Rapport de ZHPDiag v2013.6.13.18 par Nicolas Coolman, Update du 13/06/2013 Run by Vivie at 16/06/2013 14:07:23 WebSite: http://nicolascoolman.webs.com State : Version à jour. WhiteList : Enable High Elevated Privileges : OK UAC : Deactivate by program ---\\ Web Browser MSIE: Internet Explorer v10.0.9200.16618 MFIE: Mozilla Firefox 6.0.2 GCIE: Google Chrome v26.0.1410.64 (Defaut) ---\\ Windows Product Information ~ Langage: Français Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601) Windows Server License Manager Script : OK ~ Windows(R) 7, RETAIL channel Windows ID Activation : OK ~ Windows Partial Key : CPX9K Windows License : OK ~ Windows Remaining Initializations Number : 4 Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\\ System Protection Avira Free Antivirus v13.0.0.3640 avast! Free Antivirus v8.0.1489.0 Windows Defender W7 ---\\ System Optimizer CCleaner v2.31 =>Piriform Ltd ---\\ Peer To Peer (P2P) ---\\ Software Update Adobe Flash Player 11 Plugin Adobe Reader XI Java 7 Update 21 ---\\ System Information ~ Processor: Intel64 Family 6 Model 15 Stepping 13, GenuineIntel ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 2047 MB (27% free) System Restore: Activé (Enable) System drive C: has 6 GB (11%) free of 49 GB ---\\ Logged in mode ~ Computer Name: VIVIE-PC ~ User Name: Vivie ~ All Users Names: Vivie, UpdatusUser, HomeGroupUser$, Administrateur, ~ Unselected Option: None Logged in as Administrator ---\\ Environnement Variables ~ System Unit : C:\ ~ %AppData% : C:\Users\Vivie\AppData\Roaming\ ~ %Desktop% : C:\Users\Vivie\Desktop\ ~ %Favorites% : C:\Users\Vivie\Favorites\ ~ %LocalAppData% : C:\Users\Vivie\AppData\Local\ ~ %StartMenu% : C:\Users\Vivie\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 6 Go of 49 Go) D:\ Hard drive, Flash drive, Thumb drive (Free 11 Go of 195 Go) E:\ Hard drive, Flash drive, Thumb drive (Free 97 Go of 98 Go) F:\ Hard drive, Flash drive, Thumb drive (Free 49 Go of 124 Go) G:\ CD-ROM drive (Not Inserted) H:\ CD-ROM drive (Not Inserted) I:\ Floppy drive, Flash card reader, USB Key (Free 4 Go of 4 Go) ---\\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified ~ Security Center: 29 Legitimates Filtered in 00mn 00s ---\\ Recherche particulière de fichiers génériques [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808] [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024] [MD5.12716D987D475B051F35895659159705] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.17/05/2013 - 01:59:03.) -- C:\Windows\System32\wininet.dll [2241024] [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.20/11/2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656] [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448] [MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688] [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128] [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160] [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456] [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400] [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368] [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472] [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224] [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208] [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632] [MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.12/04/2013 - 15:45:08.) -- C:\Windows\system32\Drivers\ntfs.sys [1656680] [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280] [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536] [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184] [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296] [MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808] ~ Generic Processes: Scanned in 00mn 00s ---\\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 1/497 ~ Mes musiques (My Musics) : 1/77 ~ Mes Videos (My Videos) : 2/5 ~ Mes Favoris (My Favorites) : 1/14 ~ Mes Documents (My Documents) : 1/17 ~ Mon Bureau (My Desktop) : 1/22 ~ Menu demarrer (Programs) : 1/38 ~ Hidden Files: Scanned in 00mn 00s ---\\ Processus lancés [MD5.9EC9218D94DB00C67BBB28DC62B8A46B] - (.Microsoft Corporation - Microsoft LifeCam Device Application.) -- C:\Windows\vVX1000.exe [762736] [PID.2272] [MD5.4FDA635475F67582522E61AF21A672E6] - (.Realtek Semiconductor Corp. - Realtek Sound Manager.) -- C:\Windows\SOUNDMAN.exe [604704] [PID.2280] [MD5.9C8ACCB9AA289995EF17D88E5C7BB4A4] - (.ACD Systems, Ltd. - Device Detector.) -- C:\Program Files (x86)\Common Files\ACD Systems\FR\DevDetect.exe [288296] [PID.2316] [MD5.7CAAA5A0836E284F7363A39C95A252CF] - (.Oberon Media - SearchEngineProtection.exe.) -- C:\Program Files (x86)\GamesBar\SearchEngineProtection.exe [546200] [PID.2328] =>Adware.GamesBar [MD5.775DC2AE72F972935703ADA4FFDF3749] - (.Orange - MailNotifier.) -- C:\Program Files (x86)\Orange\MailNotifier\MailNotifier.exe [888480] [PID.2388] [MD5.143ECB242AF6ECE366AB477828E29D44] - (...) -- C:\Program Files (x86)\Orange\Orange Installer\OrangeInstaller.exe [561320] [PID.2420] [MD5.506B6B3D1800A40113EFE80948455B8D] - (.Logitech Inc. - Logitech G-series Media Display.) -- C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDMedia.exe [460048] [PID.2472] [MD5.095184B28B8414A6D2D09C1CE7C7B86F] - (.Orange - Executable Orange Inside.) -- C:\Users\Vivie\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe [1530520] [PID.2548] [MD5.68EB124634A8E03D0D49320ABF6F90BE] - (.Smartbar - Smartbar.) -- C:\Users\Vivie\AppData\Local\Smartbar\Application\Smartbar.exe [20272] [PID.2428] =>Hijacker.SmartBar [MD5.E84DA43E726D043CA2DEE71F01DB261A] - (.Microsoft Corporation - Microsoft OneNote Quick Launcher.) -- C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.exe [228448] [PID.2924] [MD5.C16839DB1F0CB8E308049514BB5736C1] - (...) -- C:\Users\Vivie\AppData\Roaming\BrowserCompanion\tbhcn.exe [733376] [PID.2960] =>PUP.Blabbers [MD5.9670844EAC56B193B06010DC21219052] - (.PC Tools - SSDMonit Application.) -- C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe [104408] [PID.2268] [MD5.15F986CC4BAA199A27E517723A581260] - (.Blabbers Communications LTD - Browser Companion Helper.) -- C:\Program Files (x86)\BrowserCompanion\BCHelper.exe [192816] [PID.2648] =>PUP.Blabbers [MD5.F43B91D94A766B5D6C401FA69BCC8A1B] - (.Discordia, LTD - Data Manager.) -- C:\Program Files (x86)\Windows Searchqu Toolbar\Datamngr\datamngrUI.exe [1115536] [PID.3092] =>PUP.Datamngr [MD5.07B0A211110E86A3C206F9624DEEFC57] - (.Babylon Ltd. - Babylon Information Tool.) -- C:\Program Files (x86)\Babylon\Babylon-Pro\Babylon.exe [3196016] [PID.3136] =>Toolbar.Babylon [MD5.4C976D5913FF84FBF3ED55F8855641B1] - (.Ask - Ask Updater.) -- C:\Program Files (x86)\Ask.com\Updater\Updater.exe [1568976] [PID.2712] [MD5.FD579C25D253A47DF82A76B7EE96ADB5] - (.Avira Operations GmbH & Co. KG - Avira System Tray Tool.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345312] [PID.3320] [MD5.8E2A7F1F62467A7DCB8AB2C0642F47CA] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392] [PID.3356] [MD5.0A9A90EDB4EB99CD4005D20FF91B26CF] - (.Boxore OU - Boxore Client.) -- C:\Program Files (x86)\Boxore\BoxoreClient\boxore.exe [611616] [PID.3404] =>Adware.Boxore [MD5.3F11B20D12D89365D7721BDC860CE5F0] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4858968] [PID.3412] [MD5.B8DD83B85636F7D6EC0F09B090E49130] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [7494656] [PID.6560] [MD5.5A19667A580B1CE886EAF968B9743F45] - (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [383264] [PID.808] [MD5.28D6701C710AD7BA3CB95E75F8F1A9AA] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808] [PID.1276] [MD5.E41F55D0B71734BB68FF26963EB250E4] - (.Avira Operations GmbH & Co. KG - Avira Scheduler.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [86752] [PID.1576] [MD5.ADDA5E1951B90D3D23C56D3CF0622ADC] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65640] [PID.1944] [MD5.880AE0BEDE234F27AC252049373B8CB9] - (.Avira Operations GmbH & Co. KG - Avira On-Access Service.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [110816] [PID.1976] [MD5.F02A533F517EB38333CB12A9E8963773] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [136176] [PID.2060] [MD5.85D5E6AC46A2AE4672C1AC813AE45B95] - (.Microsoft Corp. - Bing Desktop updating service.) -- C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [168592] [PID.2712] [MD5.3F3D6E8BD31B3C017D0AB24CD5EC0D05] - (.Yuna Software - Service - Messenger Plus! for Skype.) -- C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe [124832] [PID.3956] [MD5.E6E503845208A148A9E3E7FAA63B97A4] - (.PC Tools - StartMan Application.) -- C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [583640] [PID.4068] [MD5.8A9828975A857E477EFEF5A61BA45AC0] - (.TeamViewer GmbH - TeamViewer Remote Control Application.) -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2337144] [PID.684] [MD5.4AA2CC5979AFF984227364F2C23B04F3] - (.Wajam - Auto-updater.) -- C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe [109064] [PID.3772] =>Toolbar.Wajam [MD5.8349419DFDA3F2F03EA4A655758290C2] - (.Avira Operations GmbH & Co. KG - Avira WebGuard Service.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.exe [562744] [PID.5056] [MD5.8598C2AE3A7C7281B1290297C7CCFD57] - (.AVAST Software - avast! antivirus Update.) -- C:\Program Files\AVAST Software\Avast\setup\avast.setup [6583664] [PID.6332] ~ Processes Running: Scanned in 00mn 01s ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) C:\Users\Vivie\AppData\Local\Google\Chrome\User Data\Default\Preferences G2 - GCE: Preference [User Data\Default] [amfclgbdpgndipgoegfpkkgobahigbcl] Messenger Plus! Community Smartbar v.1.4, (Désactivé) =>Hijacker.SmartBar G2 - GCE: Preference [User Data\Default] [bjeikeheijdjdfjbmknpefojickbkmom] Offerbox v.2.1.3128.64 (Désactivé) =>PUP.OfferBox G2 - GCE: Preference [User Data\Default] [bodddioamolcibagionmmobehnbhiakf] Browser Companion Helper v.1.0.5 (Activé) G2 - GCE: Preference [User Data\Default] [bpgoohpbdddibhlhdkenenmmlfofjfkh] Ginyas Browser Companions v.1.0.5 (Activé) G2 - GCE: Preference [User Data\Default] [dhkplhfnhceodhffomolpfigojocbpcb] Babylon Translator v.1.4 (Activé) =>Toolbar.Babylon G2 - GCE: Preference [User Data\Default] [jpmbfleldcgkldadpdinhjjopdfpjfjp] Wajam v.1.24 (Activé) =>Toolbar.Wajam G2 - GCE: Preference [User Data\Default] [pbpohikckhbcljgombipcdoinkaedlfa] Smart Display v.1.5 (Activé) =>Spyware.SmartDisplay ~ Google Browser: 16 Legitimates Filtered in 00mn 01s ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) C:\Users\Vivie\AppData\Roaming\Mozilla\Firefox\Profiles\y6jc2wt2.default\prefs.js C:\Users\Vivie\AppData\Roaming\Mozilla\Firefox\Profiles\y6jc2wt2.default\user.js M3 - MFPP: Plugins - [Vivie] -- C:\Users\Vivie\AppData\Roaming\Mozilla\Firefox\Profiles\y6jc2wt2.default\searchplugins\askcom.xml M3 - MFPP: Plugins - [Vivie] -- C:\Users\Vivie\AppData\Roaming\Mozilla\Firefox\Profiles\y6jc2wt2.default\searchplugins\bingp.xml M3 - MFPP: Plugins - [Vivie] -- C:\Users\Vivie\AppData\Roaming\Mozilla\Firefox\Profiles\y6jc2wt2.default\searchplugins\conduit.xml M3 - MFPP: Plugins - [Vivie] -- C:\Users\Vivie\AppData\Roaming\Mozilla\Firefox\Profiles\y6jc2wt2.default\searchplugins\Messenger Plus Smartbar Search.xml =>Hijacker.SmartBar M3 - MFPP: Plugins - [Vivie] -- C:\Users\Vivie\AppData\Roaming\Mozilla\Firefox\Profiles\y6jc2wt2.default\searchplugins\Plusnetwork.xml M3 - MFPP: Plugins - [Vivie] -- C:\Users\Vivie\AppData\Roaming\Mozilla\Firefox\Profiles\y6jc2wt2.default\searchplugins\SearchquWebSearch.xml =>PUP.Datamngr M3 - MFPP: Plugins - [Vivie] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\babylon.xml =>Toolbar.Babylon M3 - MFPP: Plugins - [Vivie] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\SearchquWebSearch.xml =>PUP.Datamngr M0 - MFSP: prefs.js [Vivie - y6jc2wt2.default] http://www.searchqu.com =>PUP.Datamngr M2 - MFEP: prefs.js [Vivie - y6jc2wt2.default\bbrs_003@blabbers.com] [] Ginyas Browser Companions v1.0.5 (..) =>PUP.Blabbers M2 - MFEP: prefs.js [Vivie - y6jc2wt2.default\helperbar@helperbar.com] [] Messenger Plus! Community Smartbar v1.0.5 (..) =>Hijacker.SmartBar M2 - MFEP: prefs.js [Vivie - y6jc2wt2.default\{99079a25-328f-4bd4-be04-00955acaa0a7}] [] Searchqu Toolbar v4.1.0.01 (..) =>PUP.Datamngr ~ Firefox Browser: 43 Legitimates Filtered in 00mn 00s ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://s1.bubbledock.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://feed.plusnetwork.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.plusnetwork.com R3 - URLSearchHook: Elf 1.12 Toolbar [64Bits] - {38542454-dfb6-44f5-b052-d4e071a3d073} . (.Conduit Ltd. - Conduit Toolbar.) (6.3.0.26) -- C:\Program Files (x86)\Elf_1.12\prxtbElf_.dll =>Toolbar.Conduit R3 - URLSearchHook: Messenger Plus FR Toolbar [64Bits] - {3d4d238c-9c48-47cd-a95c-53259acf9e56} . (.Conduit Ltd. - Conduit Toolbar.) (6.3.4.1) -- C:\Program Files (x86)\Messenger_Plus_FR\prxtbMes0.dll =>Toolbar.Conduit ~ IE Browser: 17 Legitimates Filtered in 00mn 00s ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe ~ Keys: Scanned in 00mn 00s ---\\ Redirection du fichier Hosts (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Hosts File: Scanned in 00mn 00s ~ Nombre de lignes (Lines number): 21 ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: script helper for ie [64Bits] - {00cbb66b-1d3b-46d3-9577-323a336acb50} . (.Pas de propriétaire - Browser Companion Helper plug-in.) -- C:\Program Files (x86)\BrowserCompanion\jsloader.dll =>PUP.Blabbers O2 - BHO: CrossriderApp0004479 [64Bits] - {11111111-1111-1111-1111-110011441179} . (.215 Apps - Giant Savings BHO.) -- C:\Program Files (x86)\Giant Savings\Giant Savings.dll =>PUP.SpecialSavings O2 - BHO: ToolbarOrange.InitToolbarBHO [64Bits] - {1d970ed5-3eda-438d-bffd-715931e2775b} . (...) -- mscoree.dll (.not file.) O2 - BHO: Babylon toolbar helper [64Bits] - {2EECD738-5844-4a99-B4B6-146BF802613B} . (.Babylon BHO - Pas de description.) -- C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.8.3.8\bh\BabylonToolbar.dll =>Toolbar.Babylon O2 - BHO: Conduit Engine [64Bits] - {30F9B915-B755-4826-820B-08FBA6BD249D} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll =>Toolbar.Conduit O2 - BHO: Messenger Plus! Community SmartbarEngine [64Bits] - {31ad400d-1b06-4e33-a59a-90c2c140cba0} . (...) -- mscoree.dll (.not file.) =>Hijacker.SmartBar O2 - BHO: Elf 1.12 [64Bits] - {38542454-dfb6-44f5-b052-d4e071a3d073} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files (x86)\Elf_1.12\prxtbElf_.dll =>Toolbar.Conduit O2 - BHO: Messenger Plus FR [64Bits] - {3d4d238c-9c48-47cd-a95c-53259acf9e56} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files (x86)\Messenger_Plus_FR\prxtbMes0.dll =>Toolbar.Conduit O2 - BHO: TBSB01620 [64Bits] - {58124A0B-DC32-4180-9BFF-E0E21AE34026} . (.Pas de propriétaire - IE Toolbar Engine.) -- C:\Program Files (x86)\IMinent Toolbar\tbcore3.dll =>Adware.IMBooster O2 - BHO: Update Timer [64Bits] - {963B125B-8B21-49A2-A3A8-E37092276531} . (.Blabbers Communications Ltd - Ginyas Browser Companion Verifier.) -- C:\Program Files (x86)\GinyasBrowserCompanions\updatebhoWin32.dll =>PUP.Blabbers O2 - BHO: Searchqu Toolbar [64Bits] - {99079a25-328f-4bd4-be04-00955acaa0a7} . (.Pas de propriétaire - dtx Dynamic Link Library.) -- C:\Program Files (x86)\Windows Searchqu Toolbar\ToolBar\searchqudtx.dll =>PUP.Datamngr O2 - BHO: Babylon IE plugin [64Bits] - {9CFACCB6-2F3F-4177-94EA-0D2B72D384C1} . (.Babylon Ltd. - Babylon Internet Explorer Addin.) -- C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll =>Toolbar.Babylon O2 - BHO: UrlHelper Class [64Bits] - {A40DC6C5-79D0-4ca8-A185-8FF989AF1115} . (.Discordia, LTD - IEHelper.) -- C:\Program Files (x86)\Windows Searchqu Toolbar\Datamngr\IEBHO.dll =>PUP.Datamngr O2 - BHO: Wajam IE BHO [64Bits] - {A7A6995D-6EE1-4FD1-A258-49395D5BF99C} . (.Wajam - Wajam Internet Explorer Add-on.) -- C:\Program Files (x86)\Wajam\IE\priam_bho.dll =>Toolbar.Wajam O2 - BHO: GamesBarBHO Class [64Bits] - {CB0D163C-E9F4-4236-9496-0597E24B23A5} . (.Oberon Media Ltd. - GamesBar.) -- C:\Program Files (x86)\GamesBar\2.0.1.59\oberontb.dll =>Adware.GamesBar O2 - BHO: Ask Toolbar BHO [64Bits] - {D4027C7F-154A-4066-A1AD-4243D8127440} . (.Ask - Avira SearchFree Toolbar.) -- C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll =>Toolbar.Ask ~ BHO: 24 Legitimates Filtered in 00mn 01s ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar: Messenger Plus! Community Smartbar [64Bits] - [HKLM]{ae07101b-46d4-4a98-af68-0333ea26e113} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>Hijacker.SmartBar O3 - Toolbar: Google Toolbar [64Bits] - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O3 - Toolbar: (no name) [64Bits] - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Clé orpheline ~ Toolbar: Scanned in 00mn 00s ---\\ Applications démarrées par registre & par dossier (O4) O4 - HKLM\..\Run: [VX1000] . (.Microsoft Corporation - Microsoft LifeCam Device Application.) -- C:\Windows\vVX1000.exe O4 - HKLM\..\Run: [SoundMan] . (.Realtek Semiconductor Corp. - Realtek Sound Manager.) -- C:\Windows\SOUNDMAN.exe O4 - HKLM\..\Run: [Launch LCDMon] . (.Logitech Inc. - Logitech LCD Manager.) -- C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe O4 - HKLM\..\Run: [Launch LGDCore] . (.Logitech Inc. - Logitech G-series Profiler.) -- C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe O4 - HKCU\..\Run: [Device Detector] DevDetect.exe O4 - HKCU\..\Run: [SearchEngineProtection] . (.Oberon Media - SearchEngineProtection.exe.) -- C:\Program Files (x86)\Gamesbar\SearchEngineProtection.exe =>Adware.GamesBar O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [MailNotifier] . (.Orange - MailNotifier.) -- C:\Program Files (x86)\Orange\MailNotifier\MailNotifier.exe O4 - HKCU\..\Run: [Orange Installer] . (...) -- C:\Program Files (x86)\Orange\Orange Installer\OrangeInstaller.exe O4 - HKCU\..\Run: [OrangeInside] . (.Orange - Executable Orange Inside.) -- C:\Users\Vivie\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe O4 - HKCU\..\Run: [Browser Infrastructure Helper] . (.Smartbar - Smartbar.) -- C:\Users\Vivie\AppData\Local\Smartbar\Application\Smartbar.exe =>Hijacker.SmartBar O4 - HKLM\..\Wow6432Node\Run: [LifeCam] . (.Microsoft Corporation - LifeExp.exe.) -- C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe O4 - HKLM\..\Wow6432Node\Run: [SSDMonitor] . (.PC Tools - SSDMonit Application.) -- C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe O4 - HKLM\..\Wow6432Node\Run: [Browser companion helper] . (.Blabbers Communications LTD - Browser Companion Helper.) -- C:\Program Files (x86)\BrowserCompanion\BCHelper.exe =>PUP.Blabbers O4 - HKLM\..\Wow6432Node\Run: [PlusService] . (.Yuna Software - Messenger Plus! 6.) -- F:\Messenger Plus!\PlusService.exe O4 - HKLM\..\Wow6432Node\Run: [DATAMNGR] . (.Discordia, LTD - Data Manager.) -- C:\Program Files (x86)\Windows Searchqu Toolbar\Datamngr\datamngrUI.exe =>PUP.Datamngr O4 - HKLM\..\Wow6432Node\Run: [Babylon Client] . (.Babylon Ltd. - Babylon Information Tool.) -- C:\Program Files (x86)\Babylon\Babylon-Pro\Babylon.exe =>Toolbar.Babylon O4 - HKLM\..\Wow6432Node\Run: [MessengerPlusForSkypeService] . (.Yuna Software - Service - Messenger Plus! for Skype.) -- C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe O4 - HKLM\..\Wow6432Node\Run: [ApnUpdater] . (.Ask - Ask Updater.) -- C:\Program Files (x86)\Ask.com\Updater\Updater.exe O4 - HKLM\..\Wow6432Node\Run: [BingDesktop] . (.Microsoft Corp. - Bing Desktop Application.) -- C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe O4 - HKLM\..\Wow6432Node\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Avira System Tray Tool.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe O4 - HKLM\..\Wow6432Node\Run: [Boxore Client] . (.Boxore OU - Boxore Client.) -- C:\Program Files (x86)\Boxore\BoxoreClient\boxore.exe =>Adware.Boxore O4 - HKLM\..\Wow6432Node\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe O4 - HKUS\S-1-5-21-1042879119-3641776606-230875828-1000\..\Run: [Device Detector] DevDetect.exe O4 - HKUS\S-1-5-21-1042879119-3641776606-230875828-1000\..\Run: [SearchEngineProtection] . (.Oberon Media - SearchEngineProtection.exe.) -- C:\Program Files (x86)\Gamesbar\SearchEngineProtection.exe =>Adware.GamesBar O4 - HKUS\S-1-5-21-1042879119-3641776606-230875828-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe O4 - HKUS\S-1-5-21-1042879119-3641776606-230875828-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKUS\S-1-5-21-1042879119-3641776606-230875828-1000\..\Run: [MailNotifier] . (.Orange - MailNotifier.) -- C:\Program Files (x86)\Orange\MailNotifier\MailNotifier.exe O4 - HKUS\S-1-5-21-1042879119-3641776606-230875828-1000\..\Run: [Orange Installer] . (...) -- C:\Program Files (x86)\Orange\Orange Installer\OrangeInstaller.exe O4 - HKUS\S-1-5-21-1042879119-3641776606-230875828-1000\..\Run: [OrangeInside] . (.Orange - Executable Orange Inside.) -- C:\Users\Vivie\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe O4 - HKUS\S-1-5-21-1042879119-3641776606-230875828-1000\..\Run: [Browser Infrastructure Helper] . (.Smartbar - Smartbar.) -- C:\Users\Vivie\AppData\Local\Smartbar\Application\Smartbar.exe =>Hijacker.SmartBar ~ Application: Scanned in 00mn 00s ---\\ Autres liens utilisateurs (O4) O4 - GS\TaskBar: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O4 - GS\TaskBar: Media Center.lnk . (.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe O4 - GS\TaskBar: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O4 - GS\TaskBar: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe O4 - GS\TaskBar: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe O4 - GS\Programs: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\QuickLaunch: Babylon.lnk . (.Babylon Ltd. - Babylon Information Tool.) -- C:\Program Files (x86)\Babylon\Babylon-Pro\Babylon.exe =>Toolbar.Babylon O4 - GS\QuickLaunch: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O4 - GS\QuickLaunch: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\QuickLaunch: Meteo en France.lnk - Clé orpheline O4 - GS\Accessories: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\Accessories: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.) -- C:\Windows\system32\eudcedit.exe O4 - GS\SendTo: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) -- C:\Windows\system32\WFS.exe O4 - GS\SendTo: Skype.lnk . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe O4 - Global Startup: C:\Users\Vivie\Desktop\Aide à la configuration des comptes Internet.url . (.Skype Technologies S.A. - Skype.) -- C:\Users\Vivie\Desktop\Aide à la configuration des comptes Internet.url O4 - GS\Desktop: CCleaner.lnk . (.Piriform Ltd - CCleaner.) -- C:\Program Files (x86)\CCleaner\CCleaner.exe =>Piriform Ltd O4 - GS\Desktop: Documents.lnk . (...) -- C:\Users\Vivie\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-ms O4 - GS\Desktop: Google Earth.lnk . (.Google - Google Earth.) -- C:\Program Files (x86)\Google\Google Earth\client\googleearth.exe O4 - GS\Desktop: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\Desktop: Media Center.lnk . (.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe O4 - Global Startup: C:\Users\Vivie\Desktop\messagerie.url . (.Microsoft Corporation - Windows Media Center.) -- C:\Users\Vivie\Desktop\messagerie.url O4 - GS\Desktop: Microsoft Excel 2010.lnk . (...) -- C:\Windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\xlicons.exe O4 - GS\Desktop: Microsoft Word 2010.lnk . (...) -- C:\Windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\wordicon.exe O4 - GS\Desktop: Search The Web.lnk - Clé orpheline =>Adware.IMBooster ~ Global Startup: Scanned in 00mn 00s ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: &Envoyer à OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} -- C:\Program Files (x86)\MICROS~2\Office14\ONBttnIE.dll (.not file.) O9 - Extra button: Notes &liées OneNote [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} -- C:\Program Files (x86)\MICROS~2\Office14\ONBTTN~1.dll (.not file.) ~ IE Extra Buttons: Scanned in 00mn 00s ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{81DA3199-3217-4BD2-AF7C-CA40B347B06A}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CS1\Services\Tcpip\..\{81DA3199-3217-4BD2-AF7C-CA40B347B06A}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CS2\Services\Tcpip\..\{81DA3199-3217-4BD2-AF7C-CA40B347B06A}: DhcpNameServer = 192.168.1.254 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254 ~ Domain: Scanned in 00mn 00s ---\\ Protocole additionnel (O18) O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) -- O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll ~ Protocole Additionnel: Scanned in 00mn 00s ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - AppInit_DLLs: . (.Discordia, LTD - Data Manager.) - C:\Program Files (x86)\WIA6EB~1\Datamngr\x64\datamngr.dll =>PUP.Datamngr ~ AppInit DLL: Scanned in 00mn 00s ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: PC Tools Startup and Shutdown Monitor se (PCToolsSSDMonitorSvc) . (.PC Tools - StartMan Application.) - C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe O23 - Service: Software Update Service (supdate) (supdate) . (.Boxore OU. - Programme d'installation de Software.) - C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe =>Adware.Boxore O23 - Service: WajamUpdater (WajamUpdater) . (.Wajam - Auto-updater.) - C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe =>Toolbar.Wajam ~ Services: 18 Legitimates Filtered in 00mn 08s ---\\ Tâches planifiées en automatique (O39) O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GinyasBrowserCompanions Chrome Watcher.job [1002] =>PUP.Blabbers O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GinyasBrowserCompanions FireFox Watcher.job [1002] =>PUP.Blabbers O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GinyasBrowserCompanions Stats Report.job [1050] =>PUP.Blabbers O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GinyasBrowserCompanions Update Checker.job [934] =>PUP.Blabbers O39 - APT:Automatic Planified Task - C:\Windows\Tasks\SoftwareUpdateTaskMachineCore.job [1080] O39 - APT:Automatic Planified Task - C:\Windows\Tasks\SoftwareUpdateTaskMachineUA.job [1084] [MD5.193A62BC5A4E580E3547BC7270CA74C9] [APT] [GinyasBrowserCompanions Chrome Watcher] (.Blabbers Communications Ltd.) -- C:\ProgramData\GinyasBrowserCompanions\tbhcns.exe [741888] =>PUP.Blabbers [MD5.193A62BC5A4E580E3547BC7270CA74C9] [APT] [GinyasBrowserCompanions FireFox Watcher] (.Blabbers Communications Ltd.) -- C:\ProgramData\GinyasBrowserCompanions\tbhcns.exe [741888] =>PUP.Blabbers [MD5.193A62BC5A4E580E3547BC7270CA74C9] [APT] [GinyasBrowserCompanions Stats Report] (.Blabbers Communications Ltd.) -- C:\ProgramData\GinyasBrowserCompanions\tbhcns.exe [741888] =>PUP.Blabbers [MD5.00000000000000000000000000000000] [APT] [RMSchedule] (...) -- C:\Program Files (x86)\Registry Mechanic\RegMech.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [RMSmartUpdate] (...) -- C:\Program Files (x86)\Registry Mechanic\update.exe (.not file.) [0] [MD5.2BCD5FE578F82D0C4622EBD0EAFE001C] [APT] [Scheduled Update for Ask Toolbar] (...) -- C:\Program Files (x86)\Ask.com\UpdateTask.exe [137864] =>Toolbar.Ask [MD5.251A1AED2D4A26A47C0A4A3058AAE4A8] [APT] [SoftwareUpdateTaskMachineCore] (.Boxore OU..) -- C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe [139576] =>Adware.Boxore [MD5.251A1AED2D4A26A47C0A4A3058AAE4A8] [APT] [SoftwareUpdateTaskMachineUA] (.Boxore OU..) -- C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe [139576] =>Adware.Boxore [MD5.96261D590C12F5D47DA973AE882C58F0] [APT] [Updater4479.exe] (.FileProperties_CompanyName.) -- C:\Users\Vivie\AppData\Local\Updater4479\Updater4479.exe [206336] =>PUP.CrossRider [MD5.00000000000000000000000000000000] [APT] [{0E6EF0EA-A34B-490C-A4AC-DB834787A632}] (...) -- C:\Users\Vivie\AppData\Local\Babylon\Setup\Setup.exe (.not file.) [0] =>Toolbar.Babylon [MD5.00000000000000000000000000000000] [APT] [{22B8ED6E-F722-4C65-B265-8B2F9BFFFF03}] (...) -- H:\EAutorun.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{4891A602-9F6A-4780-8F2A-A595CED2EE57}] (...) -- H:\Livebox\Setup\Livebox.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{512DDBEF-48B9-4824-A390-C6A9B5161D25}] (...) -- H:\noautorun.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{5E5AB197-D7BA-40CC-BC4C-7637D7810FD3}] (...) -- H:\noautorun.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{5EDB34FA-E878-4067-9555-671A61483B3B}] (...) -- C:\Users\Vivie\AppData\Local\Babylon\Setup\Setup.exe (.not file.) [0] =>Toolbar.Babylon [MD5.00000000000000000000000000000000] [APT] [{60A9200A-691E-4EF1-8E43-B08BFCF591E6}] (...) -- H:\noautorun.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{766F96F5-4A28-4759-9459-29C97848F925}] (...) -- H:\noautorun.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{76AF1677-8CC4-4376-B10A-F4EA4C157122}] (...) -- H:\TopGun_Install.exe (.not file.) [0] [MD5.D41D8CD98F00B204E9800998ECF8427E] [APT] [{82B136CE-F21F-4813-8E14-1A501EAE6E3D}] (...) -- C:\Users\Vivie\Downloads\FacebookVideoCallSetup_v1.2.203.0 (1).exe [0] [MD5.00000000000000000000000000000000] [APT] [{8940135D-8BC9-488F-9916-2156220110A1}] (...) -- H:\Eurodocs\Fran‡ais\Acrobat\FRANCAIS.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{8B39387A-C124-4244-8F81-C9B4BCC734DD}] (...) -- C:\Users\Vivie\AppData\Local\Babylon\Setup\Setup.exe (.not file.) [0] =>Toolbar.Babylon [MD5.00000000000000000000000000000000] [APT] [{A5E5696E-4049-4B43-B794-86C4E6D46C56}] (...) -- C:\Users\Vivie\AppData\Local\Babylon\Setup\Setup.exe (.not file.) [0] =>Toolbar.Babylon [MD5.D41D8CD98F00B204E9800998ECF8427E] [APT] [{AA8BA690-4CDA-415B-875D-2FAE508B2A6B}] (...) -- C:\Users\Vivie\Downloads\FacebookVideoCallSetup_v1.2.203.0 (1).exe [0] [MD5.00000000000000000000000000000000] [APT] [{C89D1B0F-8787-4B7E-BDD4-EB566A567282}] (...) -- H:\noautorun.exe (.not file.) [0] ~ Scheduled Task: 51 Legitimates Filtered in 00mn 06s ---\\ Logiciels installés (O42) O42 - Logiciel: Ask Toolbar - (.Ask.com.) [HKLM][64Bits] -- {86D4B82A-ABED-442A-BE86-96357B70F4FE} =>Toolbar.Ask O42 - Logiciel: Babylon - (.Babylon.) [HKLM][64Bits] -- Babylon =>Toolbar.Babylon O42 - Logiciel: Babylon toolbar - (.BabylonToolbar.) [HKLM][64Bits] -- BabylonToolbar =>Toolbar.Babylon O42 - Logiciel: Boxore Client - (.Boxore OU.) [HKLM][64Bits] -- {0E25BB07-62EB-476F-87FC-6AF426AB059E} =>Adware.Boxore O42 - Logiciel: BrowserCompanion - (...) [HKLM][64Bits] -- BrowserCompanion =>PUP.Blabbers O42 - Logiciel: Conduit Engine - (.Conduit Ltd..) [HKLM][64Bits] -- conduitEngine =>Toolbar.Conduit O42 - Logiciel: Elf 1.12 Toolbar - (.Elf 1.12.) [HKLM][64Bits] -- Elf_1.12 Toolbar O42 - Logiciel: Giant Savings - (.215 Apps.) [HKLM][64Bits] -- Giant Savings =>PUP.SpecialSavings O42 - Logiciel: GinyasBrowserCompanions - (.Ginyas.) [HKLM][64Bits] -- GinyasBrowserCompanions =>PUP.Blabbers O42 - Logiciel: IMinent Toolbar - (.IMinent.) [HKLM][64Bits] -- {A76AA284-E52D-47E6-9E4F-B85DBF8E35C3} =>Adware.IMBooster O42 - Logiciel: Iadah Toolbar - (.DevNet.) [HKCU][64Bits] -- IadahToolbar O42 - Logiciel: SelectionLinks - (.SelectionLinks.) [HKLM][64Bits] -- sl-apl =>Hijacker.SelectionLinks O42 - Logiciel: Wajam - (.Wajam.) [HKLM][64Bits] -- Wajam =>Toolbar.Wajam ~ Logic: 129 Legitimates Filtered in 00mn 01s ---\\ HKCU & HKLM Software Keys [HKCU\Software\APN] [HKCU\Software\AppDataLow\Software\AskToolbar] [HKCU\Software\AppDataLow\Software\Crossrider] =>PUP.CrossRider [HKCU\Software\AppDataLow\Software\Elf_1.12] [HKCU\Software\AppDataLow\Software\Giant Savings] =>Adware.VidSaver [HKCU\Software\AppDataLow\Software\PriceGong] =>Adware.PriceGong [HKCU\Software\AppDataLow\Software\conduitEngine] =>Toolbar.Conduit [HKCU\Software\AppDataLow\Toolbar] [HKCU\Software\Ask.com] [HKCU\Software\BabylonToolbar] =>Toolbar.Babylon [HKCU\Software\Babylon] =>Toolbar.Babylon [HKCU\Software\Blabbers] =>PUP.Blabbers [HKCU\Software\BrowserCompanion] =>PUP.Blabbers [HKCU\Software\Cr_Installer] =>PUP.CrossRider [HKCU\Software\DataMngr] =>PUP.Datamngr [HKCU\Software\DataMngr_Toolbar] =>PUP.Datamngr [HKCU\Software\Digital-Integration] [HKCU\Software\GamesBar] =>Adware.GamesBar [HKCU\Software\Iminent] =>Adware.IMBooster [HKCU\Software\InstallCore] =>PUP.InstallCore [HKCU\Software\InstalledBrowserExtensions] =>Adware.VidSaver [HKCU\Software\PCTools] [HKCU\Software\SmartbarBackup] =>Hijacker.SmartBar [HKCU\Software\SmartbarLog] =>Hijacker.SmartBar [HKCU\Software\Smartbar] =>Hijacker.SmartBar [HKCU\Software\Softonic] [HKCU\Software\Wajam] =>Toolbar.Wajam [HKLM\Software\Wow6432Node\APN] [HKLM\Software\Wow6432Node\AskToolbar] [HKLM\Software\Wow6432Node\Bandoo] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Boxore] =>Adware.Boxore [HKLM\Software\Wow6432Node\BrowserCompanions] =>PUP.Blabbers [HKLM\Software\Wow6432Node\DataMngr] =>PUP.Datamngr [HKLM\Software\Wow6432Node\Elf_1.12] [HKLM\Software\Wow6432Node\GamesBarSetup] =>Adware.GamesBar [HKLM\Software\Wow6432Node\Iminent] =>Adware.IMBooster [HKLM\Software\Wow6432Node\Object] [HKLM\Software\Wow6432Node\PCTools] [HKLM\Software\Wow6432Node\Productivity_2.2] [HKLM\Software\Wow6432Node\SearchquMediabarTb] =>PUP.Datamngr ~ Key Software: 270 Legitimates Filtered in 00mn 01s ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 24/02/2013 - 17:18:23 - [4,396] ----D C:\Program Files (x86)\Ask.com O43 - CFD: 17/04/2012 - 13:49:58 - [14,048] ----D C:\Program Files (x86)\Babylon =>Toolbar.Babylon O43 - CFD: 17/04/2012 - 13:49:25 - [3,799] ----D C:\Program Files (x86)\BabylonToolbar =>Toolbar.Babylon O43 - CFD: 11/06/2013 - 19:55:47 - [1,278] ----D C:\Program Files (x86)\Boxore =>Adware.Boxore O43 - CFD: 14/11/2012 - 23:25:05 - [1,974] ----D C:\Program Files (x86)\BrowserCompanion =>PUP.Blabbers O43 - CFD: 21/01/2011 - 14:46:47 - [4,209] ----D C:\Program Files (x86)\ConduitEngine =>Toolbar.Conduit O43 - CFD: 21/01/2011 - 14:46:45 - [4,287] ----D C:\Program Files (x86)\Elf_1.12 O43 - CFD: 06/01/2013 - 19:54:15 - [0,296] ----D C:\Program Files (x86)\File Scout O43 - CFD: 22/08/2010 - 13:56:24 - [1,933] ----D C:\Program Files (x86)\GamesBar =>Adware.GamesBar O43 - CFD: 30/11/2012 - 16:25:54 - [2,975] ----D C:\Program Files (x86)\Giant Savings =>Adware.VidSaver O43 - CFD: 10/03/2013 - 17:16:31 - [0,658] ----D C:\Program Files (x86)\GinyasBrowserCompanions =>PUP.Blabbers O43 - CFD: 10/11/2011 - 21:50:05 - [3,362] ----D C:\Program Files (x86)\IMinent Toolbar =>Adware.IMBooster O43 - CFD: 22/11/2012 - 22:48:25 - [0,480] ----D C:\Program Files (x86)\OApps O43 - CFD: 25/07/2011 - 06:45:47 - [0,403] ----D C:\Program Files (x86)\OfferBox =>PUP.OfferBox O43 - CFD: 24/10/2012 - 17:03:46 - [0,525] ----D C:\Program Files (x86)\Wajam =>Toolbar.Wajam O43 - CFD: 16/06/2013 - 13:53:55 - [93,761] ----D C:\ProgramData\Babylon =>Toolbar.Babylon O43 - CFD: 15/05/2011 - 22:22:25 - [0,159] ----D C:\ProgramData\GamesBar =>Adware.GamesBar O43 - CFD: 16/06/2013 - 14:05:00 - [0,855] ----D C:\ProgramData\GinyasBrowserCompanions =>PUP.Blabbers O43 - CFD: 06/01/2013 - 19:54:15 - [0,001] ----D C:\ProgramData\IBUpdaterService =>Adware.InstallBrain O43 - CFD: 26/04/2012 - 21:44:59 - [1,782] ----D C:\Users\Vivie\AppData\Roaming\Babylon =>Toolbar.Babylon O43 - CFD: 16/06/2013 - 14:02:36 - [0,700] ----D C:\Users\Vivie\AppData\Roaming\BrowserCompanion =>PUP.Blabbers O43 - CFD: 01/06/2011 - 10:06:09 - [0,268] ----D C:\Users\Vivie\AppData\Roaming\OfferBox =>PUP.OfferBox O43 - CFD: 24/02/2013 - 20:06:29 - [0] ----D C:\Users\Vivie\AppData\Roaming\PerformerSoft O43 - CFD: 23/09/2012 - 23:01:08 - [0,158] ----D C:\Users\Vivie\AppData\Local\APN O43 - CFD: 30/11/2012 - 16:25:43 - [16,680] ----D C:\Users\Vivie\AppData\Local\Babylon =>Toolbar.Babylon O43 - CFD: 25/01/2013 - 20:06:21 - [0] ----D C:\Users\Vivie\AppData\Local\Giant Savings =>Adware.VidSaver O43 - CFD: 04/04/2012 - 22:27:07 - [0,012] ----D C:\Users\Vivie\AppData\Local\Linkury O43 - CFD: 28/05/2013 - 18:11:43 - [18,877] ----D C:\Users\Vivie\AppData\Local\Smartbar =>Hijacker.SmartBar O43 - CFD: 25/01/2013 - 20:06:22 - [0,197] ----D C:\Users\Vivie\AppData\Local\Updater4479 =>PUP.CrossRider O43 - CFD: 24/10/2012 - 17:03:33 - [0,054] ----D C:\Users\Vivie\AppData\Local\Wajam =>Toolbar.Wajam O43 - CFD: 20/08/2011 - 10:25:19 - [0,000] R---D C:\Users\Vivie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jeux - Raccourci O43 - CFD: 22/10/2010 - 18:22:52 - [0,000] ----D C:\Users\Vivie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Top Gun O43 - CFD: 24/10/2012 - 17:03:42 - [0,001] ----D C:\Users\Vivie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam =>Toolbar.Wajam ~ 649 Dossiers CLSID vides (CLSID Empty Folders) ~ Program Folder: 970 Legitimates Filtered in 00mn 11s ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 14/06/2013 - 18:50:21 ---A- . (...) -- C:\END [0] ~ Files: 68 Legitimates Filtered in 00mn 30s ---\\ Derniers fichiers créés dans Windows Prefetcher (O45) O45 - LFCP:[MD5.2F09E2B9A0DEEE9E58248F444D54B20D] - 16/06/2013 - 13:05:01 ---A- - C:\Windows\Prefetch\TBHCNS.EXE-BDCDC274.pf ~ Prefetcher: 72 Legitimates Filtered in 00mn 00s ---\\ Microsoft Windows Policies System (O55) O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 ~ MWPS: 16 Legitimates Filtered in 00mn 00s ---\\ Microsoft Windows Policies Explorer (O56) O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 ~ MWPE Keys: 3 Legitimates Filtered in 00mn 00s ---\\ Liste des Drivers Système (O58) O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088] O58 - SDL:[MD5.1BF91F352D746AD7469FA71783B5FAE8] - 28/11/2006 - 20:46:22 ----- . (.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 MPR Protocol Driver.) -- C:\Windows\SysWOW64\drivers\PCAMp50.sys [28224] ~ Drivers: Scanned in 00mn 00s ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) O61 - LFC: 14/06/2013 - 12:52:26 ---A- C:\Users\Vivie\AppData\Local\Messenger_Plus_Live\CacheIcons\search_{4327FABE-3C22-4689-8DBF-D226CF777FE9}.ico [1150] O61 - LFC: 15/06/2013 - 11:54:33 ---A- C:\Users\Vivie\AppData\Local\Smartbar\Application\Smartbar.exe.config [13247] =>Hijacker.SmartBar O61 - LFC: 15/06/2013 - 11:54:33 ---A- C:\Users\Vivie\AppData\Local\Smartbar\Smartbar.exe_StrongName_vuedtbpoockmp1sq45awfxuouevabx0i\1.6.1.949\user.config [600] =>Hijacker.SmartBar O61 - LFC: 15/06/2013 - 12:13:45 ---A- C:\Users\Vivie\Downloads\avast_free_antivirus_setup.exe [117478104] O61 - LFC: 15/06/2013 - 13:38:45 ---A- C:\Users\Vivie\AppData\Roaming\Babylon\ocr_cache [190636] =>Toolbar.Babylon O61 - LFC: 16/06/2013 - 11:26:19 ---A- C:\Users\Vivie\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists [270879] O61 - LFC: 16/06/2013 - 11:53:51 ---A- C:\Users\Vivie\AppData\Local\Babylon\BabAll.bak [10640] =>Toolbar.Babylon O61 - LFC: 16/06/2013 - 11:53:53 ---A- C:\Users\Vivie\AppData\Roaming\Babylon\log_file.txt [152398] =>Toolbar.Babylon O61 - LFC: 16/06/2013 - 11:53:54 ---A- C:\Users\Vivie\AppData\Roaming\Babylon\FLStat.dat [4] =>Toolbar.Babylon O61 - LFC: 16/06/2013 - 12:45:29 ---A- C:\Users\Vivie\AppData\Local\Google\Chrome\User Data\Local State [45684] ~ 279 Fichiers temporaires (Temporary files) ~ Files: 655 Legitimates Filtered in 01mn 06s ---\\ Liste des outils de nettoyage (O63) O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 ~ ADS: Scanned in 00mn 00s ---\\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Not Key.) ~ FASS Keys: 19 Legitimates Filtered in 00mn 00s ---\\ Start Menu Internet (O68) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (.Not Key.) ~ Keys: Scanned in 00mn 00s ---\\ Search Browser Infection (O69) O69 - SBI: C:\Users\Vivie\AppData\Roaming\Mozilla\Firefox\Profiles\y6jc2wt2.default\searchplugins\askcom.xml O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330..clientLogIsEnabled", false); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330..clientLogServiceUrl", "http://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330..uninstallLogServiceUrl", "http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.AboutPrivacyUrl", "http://www.conduit.com/privacy/Default.aspx"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.AppTrackingLastCheckTime", "Wed Aug 31 2011 15:48:47 GMT+0200"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.BrowserCompStateIsOpen_129454256085075876", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.BrowserCompStateIsOpen_129454256085544628", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.BrowserCompStateIsOpen_129723127732942414", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.BrowserCompStateIsOpen_129785985710505237", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.BrowserCompStateIsOpen_1367165287000", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.CTID", "CT2905330"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.CurrentServerDate", "8-5-2013"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.DSChangedManually", false); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.DSProtectChoice", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.DSProtectCount", 1); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.DialogsAlignMode", "LTR"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.DialogsGetterLastCheckTime", "Wed May 08 2013 21:32:04 GMT+0200"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.DownloadReferralCookieData", ""); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.FirstServerDate", "20-7-2011"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.FirstTime", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.FirstTimeFF3", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.FixPageNotFoundErrors", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.GroupingServerCheckInterval", 1440); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.GroupingServiceUrl", "http://grouping.services.conduit.com/"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.HPProtectChoice", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.HPProtectCount", 1); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.HasUserGlobalKeys", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.HomePageProtectorEnabled", false); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.HomepageBeforeUnload", "http://www.plusnetwork.com"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.Initialize", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.InitializeCommonPrefs", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.InstallationAndCookieDataSentCount", 3); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.InstallationId", "CT2905330_Messenger_Plus_FR.exe"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.InstallationType", "ConduitIntegration"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.InstalledDate", "Wed Jul 20 2011 20:05:55 GMT+0200"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.InvalidateCache", false); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.IsAlertDBUpdated", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.IsGrouping", false); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.IsInitSetupIni", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.IsMulticommunity", false); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.IsOpenThankYouPage", false); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.IsOpenUninstallPage", false); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.IsProtectorsInit", true); =>PUP.Mocaflix O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.LanguagePackLastCheckTime", "Wed May 08 2013 21:32:04 GMT+0200"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.LanguagePackReloadIntervalMM", 1440); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.LanguagePackServiceUrl", "http://translation.users.conduit.com/Translation.ashx"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.LastLogin_3.5.1.1", "Wed Aug 17 2011 15:05:29 GMT+0200"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.LastLogin_3.6.0.10", "Sun Oct 02 2011 23:30:42 GMT+0200"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.LastLogin_3.7.0.6", "Wed May 08 2013 21:32:03 GMT+0200"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.LatestVersion", "3.18.0.7"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.Locale", "fr-fr"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.MCDetectTooltipHeight", "83"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.MCDetectTooltipUrl", "http://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.MCDetectTooltipWidth", "295"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.MyStuffEnabledAtInstallation", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.OriginalFirstVersion", "3.5.1.1"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.RadioIsPodcast", false); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.RadioLastCheckTime", "Wed May 08 2013 21:32:18 GMT+0200"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.RadioLastUpdateIPServer", "3"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.RadioLastUpdateServer", "129430407431930000"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.RadioMediaID", "21795763"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.RadioMediaType", "Media Player"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.RadioMenuSelectedID", "EBRadioMenu_CT290533021795763"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.RadioShrinked", "shrinked"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.RadioShrinkedFromSetup", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.RadioStationName", "France%20Inter"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.RadioStationURL", "http://radiotime.com/WebTuner.aspx?StationId=24875&"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.SavedHomepage", "chrome://branding/locale/browserconfig.properties"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.SearchEngineBeforeUnload", "Messenger Plus FR Customized Web Search"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.SearchFromAddressBarIsInit", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2905330&SearchSource=2&q="); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.SearchInNewTabEnabled", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.SearchInNewTabIntervalMM", 1440); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.SearchInNewTabLastCheckTime", "Wed May 08 2013 21:32:02 GMT+0200"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.SearchInNewTabServiceUrl", "http://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID&UM=UM_ID"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.SearchInNewTabUsageUrl", "http://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.SearchInNewTabUserEnabled", false); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.SearchProtectorEnabled", false); =>Toolbar.Conduit O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.SearchProtectorToolbarDisabled", false); =>Toolbar.Conduit O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.ServiceMapLastCheckTime", "Wed May 08 2013 21:32:03 GMT+0200"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.SettingsLastCheckTime", "Wed May 08 2013 21:32:02 GMT+0200"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.SettingsLastUpdate", "1368000768"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.ThirdPartyComponentsInterval", 504); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.ThirdPartyComponentsLastCheck", "Wed May 08 2013 21:32:01 GMT+0200"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.ThirdPartyComponentsLastUpdate", "1331805999"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.ToolbarShrinkedFromSetup", false); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.TrusteLinkUrl", "http://trust.conduit.com/CT2905330"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolb[...] O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.UserID", "UN09424321998858132"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.ValidationData_Toolbar", 2); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.alertChannelId", "1297255"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.ct2905330ads1", "25374225323261647325323225334125354225374225323261696425323225334125323231303[...] O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.ct2905330current_term", ""); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.ct2905330sdate", "38"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.d_ginyas1", "30"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.d_ginyas1_d", ""); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.d_ginyas1_t", "31333137353932313131333235"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.for_aoi", "31333133393630383331"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.for_ccid", "4E6575696C6C792D6C652D6D616C6865726265"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.for_cdtr2", "31333133393630383331"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.for_cdtr5", "31333133393630383331"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.for_cdtr6", "31333135363930313135"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.for_cid", "4652"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.for_ip", "37382E3232322E3138302E313930"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.for_lcut", "31333638303431353533"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.for_pid", "31303132"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.for_rid", "3939"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.for_zoneid", "3130303836"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.ginyasstest", "676F6F64"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.http://cmg1_conduit-widgets_com/pitsi.state", "4F50454E"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.http://rv_ginyas_com/app/conduit.bbrs_affid", "6D7367706C75735F636F6E64756974"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.http://rv_ginyas_com/app/conduit.bbrs_bguid", "6D7367706C75735F636F6E647569742D373834444243443[...] O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.http://rv_ginyas_com/app/conduit.bbrs_lba", "3232353631333239"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.http://rv_ginyas_com/app/conduit.bbrs_lba1", "323031322D31312D3233"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.http://www_blabbers_com/app/conduit.bbrs_affid", "46525F4E6577"); =>PUP.Blabbers O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.http://www_blabbers_com/app/conduit.bbrs_bguid", "46525F4E65772D32413836423841382D364345422D34[...] =>PUP.Blabbers O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.http://www_blabbers_com/app/conduit.bbrs_lba", "3231393636363935"); =>PUP.Blabbers O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.http://www_blabbers_com/app/conduit.bbrs_lba1", "323031312D31302D37"); =>PUP.Blabbers O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.http://www_blabbers_com/app/conduit.bbrs_updatesliststr1", "70726F6D6F766163616E6365732E636F6D[...] =>PUP.Blabbers O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.http://www_blabbers_com/app/conduit.bbrs_updatesliststr1_exp", "3231393539383638"); =>PUP.Blabbers O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.mam_gk_appsdata", O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.mam_gk_currentversion", "312E342E342E36"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.mam_gk_settings1.4.4.6", "7B22537461747573223A22737563636565646564222C2244617461223A7B22696E74[...] O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.youtube_user_first_login_date", "30382F32312F32303131"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.youtube_user_survey_visit", "4E4F545F56495349544544"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.youtubelang", "4652"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;se[...] O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.globalFirstTimeInfoLastCheckTime", "Wed May 08 2013 21:32:05 GMT+0200"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.homepageProtectorEnableByLogin", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.initDone", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.isAppTrackingManagerOn", false); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.isFirstRadioInstallation", false); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.myStuffEnabled", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.myStuffPublihserMinWidth", 400); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.myStuffSearchUrl", "http://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&oct[...] O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.myStuffServiceIntervalMM", 1440); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.myStuffServiceUrl", "http://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE[...] O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.oldAppsList", "129391541264056451,129391541264525205,111,129391541264681456,129785985710505237,12939154126483[...] O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.revertSettingsEnabled", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.searchProtectorDialogDelayInSec", 10); =>Toolbar.Conduit O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.searchProtectorEnableByLogin", true); =>Toolbar.Conduit O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.testingCtid", ""); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.toolbarAppMetaDataLastCheckTime", "Wed May 08 2013 21:32:04 GMT+0200"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.toolbarContextMenuLastCheckTime", "Wed May 08 2013 21:32:04 GMT+0200"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.usagesFlag", 2); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ConduitHomepagesList", "http://search.conduit.com/?ctid=CT2905330&SearchSource=13"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ConduitSearchList", "Messenger Plus FR Customized Web Search"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://Settings.toolbar.search.conduit.com/root/CT2905330/CT2905330", "\"0e00ea9237622516e7bad256[...] O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://alerts.conduit-services.com/root/1297255/1292926/FR", "\"0\""); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://appsmetadata.toolbar.conduit-services.com/?ctid=CT2905330", "\"1367217760\""); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=fr-fr", "wmxT3la3WNnJ27Qo[...] O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=fr-fr&ctid=CT2905330", "w[...] O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=fr-fr", "baZTA2tXV7T4AAbft[...] O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=fr-fr&ctid=CT2905330", "ba[...] O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=fr-fr", "jKoBOjdPF2fwBUlN[...] O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=fr-fr&ctid=CT2905330", "j[...] O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=fr-fr", "TG4z5eYloz+CZo4B4Z1[...] O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=fr-fr&ctid=CT2905330", "TG4z[...] O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"0ea11bd291bce1:0\""); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.5.1.1", "\"80161a5ed5ccc1:0\""); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.0.10", "\"0ee90707f77cc1:0\"")[...] O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.7.0.6", "\"0343677cfb1cd1:0\""); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://servicemap.conduit-services.com/Toolbar/?ownerId=CT2905330", "\"6341c50648fd59897cde84cfa3[...] O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://settings.toolbar.conduit-services.com/?ctid=CT2905330&octid=CT2905330", "\"1314694064\""); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://settings.toolbar.search.conduit.com/root/CT2905330/CT2905330", "\"1311168859\""); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://storage.conduit.com/BankImages/RadioSkins/Funky/maxi.gif", "\"80feeded4e19c81:0\""); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://storage.conduit.com/BankImages/RadioSkins/Funky/minimize.gif", "\"80feeded4e19c81:0\""); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://storage.conduit.com/BankImages/RadioSkins/Funky/play.gif", "\"09586ee4e19c81:0\""); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://storage.conduit.com/BankImages/RadioSkins/Funky/play_mini.gif", "\"09586ee4e19c81:0\""); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://storage.conduit.com/BankImages/RadioSkins/Funky/stop.gif", "\"09586ee4e19c81:0\""); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://storage.conduit.com/BankImages/RadioSkins/Funky/stopped.GIF", "\"09586ee4e19c81:0\""); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://storage.conduit.com/BankImages/RadioSkins/Funky/vol.gif", "\"09586ee4e19c81:0\""); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://translation.toolbar.conduit-services.com/?locale=fr-fr", "\"7b7913f4799cfe242f051e0e5640da[...] O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Vivie\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\y6jc2wt2.def[...] O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.7.0.6"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", ""); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ToolbarsList", "CT2905330"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ToolbarsList2", "CT2905330"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ToolbarsList4", "CT2905330"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.globalUserId", "ce79d123-b849-49c3-b51a-f85f5a9c289d"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2905330"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Wed May 08 2013 21:32:05 GMT+0200"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Wed May 08 2013 21:32:10 GMT+0200"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.notifications.clientsServerUrl", "http://alert.client.conduit.com"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.notifications.locale", "en"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Wed May 08 2013 21:32:03 GMT+0200"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.notifications.servicesServerUrl", "http://alert.services.conduit.com"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.notifications.showTrayIcon", false); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.notifications.userId", "36c56399-7e9d-4510-ac4e-3086964f0628"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("browser.babylon.HPOnNewTab", "search.babylon.com"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("browser.search.defaultthis.engineName", "Messenger Plus FR Customized Web Search"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("browser.search.defaulturl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2905330&SearchSource=3&q={searchTerms}"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.admin", false); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.aflt", "babsst"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.babExt", ""); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.babTrack", "affID=10588&tl=gkn110568"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.bbDpng", 23); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.cntry", "FR"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.dfltLng", "en"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.dfltSrch", true); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.excTlbr", false); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.firstRun", false); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.hdrMd5", "CCD35551A5486B6FFBD490E6B1674C33"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.hmpg", true); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.id", "bcbfb8670000000000000019db201b32"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.instlDay", "15674"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.instlRef", "sst"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.keyWordUrl", "http://search.babylon.com/?affID=110824&tl=gkn110568&tt=4812_1&babsrc=KW_ss&mnt[...] =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.lastActv", "7"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.lastDP", 23); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.8.3.815:25:42"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "6.0"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.newTab", false); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.newTabUrl", "http://search.babylon.com/?affID=110824&tl=gkn110568&tt=4812_1&babsrc=NT_ss&mntr[...] =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.noFFXTlbr", false); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.propectorlck", 92239872); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.prtnrId", "babylon"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.ptch_0717", true); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.sg", "tzb"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.smplGrp", "tzb"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.srcExt", "def"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.tlbrId", "irhnew"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "http://search.babylon.com/?babsrc=TB_def&mntrId=bcbfb8670000000000000019db201b[...] =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.vrsn", "1.8.3.8"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.vrsnTs", "1.8.3.815:25:42"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.vrsni", "1.8.3.8"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.aflt", "babclient"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.babExt", ""); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.babTrack", "affID=10588&tl=gkn110568"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.hardId", "bcbfb8670000000000000019db201b32"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.id", "bcbfb8670000000000000019db201b32"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.instlDay", "15447"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.instlRef", "std"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.newTab", false); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.smplGrp", "none"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.srcExt", "def"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.tlbrId", "base"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.8.3.815:25:42"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17"); =>Toolbar.Babylon O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.InstallDir", "C:\\Program Files (x86)\\Ask.com\\"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.apn_dbr", "cr_21.0.1180.89"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.autofill-text-highlight-enabled", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.cbid", "^ABW"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.config-updated", false); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.cr-o", "APN10398"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.crumb", "2012.09.23+13.59.40-toolbar019iad-FR-Q2FlbixGcmFuY2U%3D"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.default-channel-url-mask", "http://avira-int.ask.com/web?q={query}&qsrc={qsrc}&o={o}&l={l}&gct=bar&loc[...] O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.domain", "avira-int.ask.com"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.domainName", "avira-int.ask.com"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.dtid", "^YYYYYY^YY^FR"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.ff-original-keyword-url", "http://r.orange.fr/r?ref=O_OI_hook_openSearchFF&url=http%3A//rws.search.ke.[...] O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.fresh-install", false); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.guid", "2b8cdd28-3c9c-4307-b378-20c42628f735"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.hpr", "YES"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.http-header-whitelist-hosts", "[\"static-dev.en.dev.ask.com\", \"ask.com\", \"www.facebook.com\", \"ww[...] O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.if", "first"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.keyword-toggled-in-session", false); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.l", "dis"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.last-config-req", "1368041511330"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.locale", "fr_FR"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.localePref", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.location", "Caen,France"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.notification-shown", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.nthp", "YES"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.nthp_prev", "1"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.o", "APN10398"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.overlay-reloaded-using-restart", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.qsrc", "2871"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.r", "20"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.sa", "YES"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.saguid", "7FD78D9B-A0A4-479D-9F69-A5FD8174EFD6"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.search-suggestions-enabled", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.silent-upgrade", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.silent-upgrade-from-pre-newtabs-build", false); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.socialmini-native-on", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.themeid", ""); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.timeinstalled", "23/09/2012 23:01:25"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.to", ""); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.v", "3.15.18.100015"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.version", "5.15.18.37268"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossrider.bic", "13e85a1100ee420d9b197fe05deb2b6f"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.InstallationThankYouPage", true); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.InstallationTime", 1354285526); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.searchUserConifrmation", false); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.setHomepage", false); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.setNewTab", false); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.setSearch", false); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.active", true); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.addressbar", ""); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.backgroundjs", "\n\n//\n"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.backgroundver", 42); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.can_run_bg_code", true); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.certdomaininstaller", ""); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.changeprevious", false); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie.InstallationTime.value", "1354285526"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_aoi.value", "1354285526"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_arbitrary_code.expiration", "Wed May 08 2013 23:12:23 GMT+0200"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_arbitrary_code.value", "%22appAPI.db.get%28%5C%22_GPL_ib_disclosure%5C%22[...] =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_blocklist.value", "%22nonexistantdomain.com%22"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_country_code.expiration", "Wed May 15 2013 21:32:22 GMT+0200"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_country_code.value", "%22FR%22"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_crr.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_crr.value", "1368047216"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_currenttime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_currenttime.value", "%221367851711%22"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_hotfix20111102645.value", "%221%22"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_ib_delay.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_ib_delay.value", "24"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_ib_disclosure.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_ib_disclosure.value", "1368047249"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_ib_disclosure_tmp.expiration", "Wed May 08 2013 23:17:23 GMT+0200"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_ib_disclosure_tmp.value", "1368047243"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_ib_list.expiration", "Thu May 09 2013 05:07:29 GMT+0200"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_ib_list.value", "%7B%225a0a78b4cf7a0f072d270b686d9c51f5%22%3A%7B%22p%22%3[...] =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_ib_list_temp.expiration", "Wed May 08 2013 23:17:29 GMT+0200"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_ib_list_temp.value", "1368047249.458"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_installer_params.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_installer_params.value", "%7B%22source_id%22%3A%2258429%22%2C%22sub_id%22[...] =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_installtime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_installtime.value", "%221367851711%22"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_parent_zoneid.value", "%2258429%22"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_pc_20120828.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_pc_20120828.value", "1368047242941"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_product_id.value", "%221242%22"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_zoneid.value", "%22113517%22"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie.dbtest.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie.dbtest.value", "1368041540730"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.description", "Save big with Giant Savings! Coupons display instantly while you're sh[...] =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.domain", ""); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.enablesearch", false); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.fbremoteurl", ""); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.group", 0); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.homepage", ""); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.iframe", false); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3A%22328988446AC340B0[...] =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_appVer.value", "97"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_lastVersion.value", "0"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_meta.value", "%7B%7D"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_nextCheck.expiration", "Thu May 09 2013 03:32:16 GMT+0200"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_nextCheck.value", "true"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_queue.value", "%7B%7D"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.internaldb.SoftwareDetected.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.internaldb.SoftwareDetected.value", "%7B%22AnySoftware%22%3Afalse%2C%22Wireshark%22%3[...] =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.js", "\n\nif(\"undefined\"!=typeof _GPL_PLUGIN){var _GPL_=function(){_GPL_PLUGIN.star[...] =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.manifesturl", ""); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.name", "Giant Savings"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.newtab", ""); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.opensearch", ""); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1.code", "appAPI._cr_config={appID:function(){var a=appAPI.appInfo;if([...] =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1.ver", 6); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1000014.code", "Array.prototype.indexOf||(Array.prototype.indexOf=func[...] =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1000014.ver", 15); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1000015.code", "var a=appAPI.db.getList(),cf_ran=!1,_GPL_BG={vars:{},r[...] =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1000015.name", "GPL Background (BG)"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1000015.ver", 38); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_13.code", "(function(a){a.selectedText=function(e,c){function d(){if(w[...] =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_13.ver", 3); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_14.code", "if(typeof(appAPI)===\"undefined\"){appAPI={};}var CR__bIsIE[...] =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_14.name", "CrossriderUtils"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_14.ver", 3); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_16.code", "if((typeof isBackground===\"undefined\"||isBackground!==tru[...] =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_16.name", "FFAppAPIWrapper"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_16.ver", 7); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_17.code", "if(typeof window!==\"undefined\"){\n/*!\n * jQuery JavaScri[...] =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_17.ver", 4); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_21.code", "var CrossriderDebugManager=(function(h){var f={appId:appAPI[...] =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_21.name", "debug"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_21.ver", 4); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_22.code", "(function(a){appAPI.queueManager={queue:[],register:functio[...] =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_22.ver", 4); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_28.code", "var CrossriderInitializerPlugin=(function(e){var c={appId:a[...] =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_28.name", "initializer"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_28.ver", 3); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_4.code", "var jQuery = $jquery_171 = $jquery = null;\n\nif (document &[...] =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_4.name", "jquery_1_7_1"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_4.ver", 4); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.resources.isRea[...] =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_47.ver", 3); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_64.code", "(function(){var h=\"__CR_EMPTY_CHANNEL__\";var d=function(j[...] =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_64.name", "appApiMessage"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_64.ver", 2); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_72.code", "if(appAPI.__should_activate_validation__===true){(function([...] =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_72.ver", 3); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_78.code", "if(typeof jQuery!==\"undefined\"&&(jQuery)&&typeof navigato[...] =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_78.name", "CrossriderInfo"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_78.ver", 3); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_98.code", "(function(){var b=\"cr_\"+appAPI.appID+\"internalMessage\";[...] =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_98.name", "omniCommands"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_98.ver", 2); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins_lists.plugins_0", "4,14,78,16,64,47,72,98,1000015"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins_lists.plugins_1", "17,14,78,13,16,64,4,1,21,22,72,98,1000014,28"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.pluginsurl", "https://w9u6a2p6.ssl.hwcdn.net/plugin/apps/4479/plugins/085/ff/plugins.[...] =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.pluginsversion", 68); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.publisher", "Innovative Apps"); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.searchstatus", 0); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.setnewtab", false); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.settingsurl", ""); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.thankyou", ""); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.updateinterval", 360); =>PUP.CrossRider O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.apps", "4479"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.bic", "13e85a1100ee420d9b197fe05deb2b6f"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.cid", 4479); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.firstrun", false); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.hadappinstalled", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.installationdate", 1368041526); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.lastcheck", 22800692); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.lastcheckitem", 22800790); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.modetype", "production"); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.reportInstall", true); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.helperbar.DockingPositionDown", false); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.helperbar.SmartbarDisabled", false); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.helperbar.SmartbarStateMinimaized", false); O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.helperbar.Visibility", false); O69 - SBI: SearchScopes [HKCU] {006ee092-9658-4fd6-bd8e-a21a348e59f5} - (Messenger Plus Smartbar Search) - http://feed.plusnetwork.com O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} - (Search the web (Babylon)) - http://search.babylon.com O69 - SBI: SearchScopes [HKCU] {4327FABE-3C22-4689-8DBF-D226CF777FE9} [DefaultScope] - (Plus! Network) - http://plusnetwork.com O69 - SBI: SearchScopes [HKCU] {62D328FA-F36A-4C69-9BA0-AAC4DF67BD58} - (Bing) - http://www.bing.com O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - http://www.google.com O69 - SBI: SearchScopes [HKCU] {7B002C36-538E-48D7-B0D5-2D3EC2DED52C} - (Ask Search) - http://websearch.ask.com O69 - SBI: SearchScopes [HKCU] {814C76CB-2623-43F4-AAD0-58A0E5190A20} - (Orange) - http://r.orange.fr O69 - SBI: SearchScopes [HKCU] {8A96AF9E-4074-43b7-BEA3-87217BDA74C8} - (Web Search) - http://www.searchqu.com O69 - SBI: SearchScopes [HKCU] {afdbddaa-5d3f-42eeO =>PUP.CrossRider =>PUP.CrossRider-b79c-185a7020515b} - (Messenger Plus FR Customized Web Search) - h =>PUP.CrossRider Keys: Scanned in 00mn 00s ---\\ Recherche particuliere à la racine de certains dossiers (O84) [MD5.6D9E5361 =>PUP.CrossRiderpData\Local\Temp\7-zip32.dll [506880] [MD5.B28C334C03CEE7C5E829C43AE75DAE5A] [SP =>PUP.CrossRider [248008] [MD5.EB434AD9BE1183F169883420C5856045] [SPRF][09/11/2012] (.Sony DADC Austri =>PUP.CrossRiderDAFC3A856B876D0DC] [SPRF][09/11/2012] (.Sony DADC Austria AG - SecuROM dynamic-data module.) - =>PUP.CrossRider2/05/2013] (...) -- C:\Users\Vivie\AppData\Local\Temp\i4jdel0.exe [27411] [MD5.24F6D923EF6956ABD044 =>PUP.CrossRider2BEF3CDD43F3AE2FD6705B9FED] [SPRF][05/04/2013] (.Oracle Corporation - Java(TM) Platform SE b =>PUP.CrossRider23B93625187] [SPRF][23/02/2013] (.Ask.com - Setup Launcher.) -- C:\Users\Vivie\AppData\Local\Tem>PUP.CrossRiderie\AppData\Local\Temp\nst5240.tmp.exe [156225] [MD5.96261D590C12F5D47DA973AE882C58F0] [SPRF][17/ =>PUP.CrossRider\ping.exe [206336] [MD5.D41D8CD98F00B204E9800998ECF8427E] [SPRF][17/04/2013] (...) -- C:\Users\Vivie\AppData\Local\Temp\sca_pxym.dll [0] [MD5.28DF0219AA78485DF36C4136002F2786] [SPRF][23/02/2013]); O69 =>Hijacker.SmartBar34A2FA1FF5D6AD3] [SPRF][31/05/2012] (.Skype Technologies S.A. - Skype.) -- C:\Use =>Hijacker.SmartBar] (...) -- C:\Users\Vivie\AppData\Local\Temp\sqlite3.dll [362029] [MD5.679EAF2CB7A14DF0F56C5C90F0F39557] [SPRF][13/08/2012] (.Yuna Software - Setup of Messenger Plus! 5.) -- C:\Users\Vivie\A =>Hijacker.SmartBarsenger Plus! 6.) -- C:\Users\Vivie\AppData\Local\Temp\Update_4f57.exe [1161584] [MD5.BFC98F2227FCD46EA5C0E9D3B8184802] [SPRF][24/10/2012] (...) -- C:\Users\Vivie\AppData\Local\Temp\wajam_install.exe [417072] [MD =>Adware.IMBoosterAE35B747419542C83130107BDCDD6] [SPRF][10/11/2011] (.Bandoo Media Inc. - Bandoo Install.) -- C:\Users\Vivie\Desktop\BandooV6.exe [1578008] [MD5.15382BEFD84EC2490A588F8BBC624339] [SPRF][06/01/2013] (.Pas de propriétaire - Installer.) -- C:\Users\Vivie\Desktop\bundleSetup.exe [609088] [MD5.15382BEFD84EC2490A588F8BBC624339] [SPRF][06/01/2013] (.Pas de propriétaire - Installer.) -- C:\Users\Vivie\Desktop\bundleSetup[1].exe [609088] [MD5.BCC32419174FE2DF114AB3A98DAF688A] [SPRF][06/01/2013] (.Apple Inc. - iTunes Installer.) -- C:\Users\Vivie\Desktop\iTunes64Setup.exe [88946664] [MD5.BCC32419174FE2DF114AB3A98DAF688A] [SPRF][06/01/2013] (.Apple Inc =>PUP.Datamngr80ED07CF95] [SPRF][13/05/2013] (.AnjoCaido - Free launcher for Minecraft Alpha.) -- C:\Users\Vivie\Desktop\Minecraft.exe [695296] [MD5.F0B219392A3BDAAA48DF8B62E48075D3] [SPRF][27/01/2013] (...) -- C:\Users\Vivie\Desktop\Pipix_v2.8.1.exe [1115631] [MD5.D2C19C245E55901F29B338A301145162] [SPRF][20/07/2011] (.Yuna Software - Setup of Messenger Plus! 5.) -- C:\Users\Vivie\Desktop\Setup-MsgPlus-500.exe [7249288] [MD5.19EF6FE92855D6CC84CDD628D44B2EC5] [SPRF][16/06/2013] (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Vivie\Desktop\ZHPDiag2(1).exe [5678428] [MD5.1321DC81E317EE48C4D004775FB29AC9] [SPRF][24/02/2013] (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Users\Vivie\Desktop\ZHPhep.exe [1916928] [MD5.61FB16B6016BCC9AA42E02F787DC87FC] [SPRF][26/01/2010] (.Adobe Systems Incorporated - Adobe® Flash® Player ActiveX Installer.) -- C:\Windows\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe [1955384] [MD5.80F4A456633F78A26A3C6B16E64EFEC5] [SPRF][28/09/2007] (.Microsoft - Uno Messenger.) -- C:\Windows\Downloaded Program Files\GAME_UNO1.dll [381960] [MD5.8945CCA5FC4F25168E8B6F401EFAF51F] [SPRF][22/02/2007] (.Microsoft Corporation - Zone.com Stats Client for MSN Messenger.) -- C:\Windows\Downloaded Program Files\MessengerStatsPAClient.dll [304544] [MD5.E661E91B5929632665683222D509D271] [SPRF][28/02/2007] (.Microsoft Corporation - Zone.com Minesweeper Flags for MSN Messenger.) -- C:\Windows\Downloaded Program Files\MineSweeper.dll [130472] [MD5.1E5CFDF9AEBDD84305A4C8154277A269] [SPRF][28/02/2007] (.Microsoft Corporation - Zone.com Checkers for MSN Messenger.) -- C:\Windows\Downloaded Program Files\msgrchkr.dll [131472] [MD5.FEE7BE331AF827DAF4DAF3407EB28647] [SPRF][21/04/2005] (.PopCap Games - PopCapLoader Module.) -- C:\Windows\Downloaded Program Files\popcaploader.dl =>Toolbar.WajamMSN Messenger.) -- C:\Windows\Downloaded Program Files\SolitaireShowdown.dll [142248] ~ Files: Scanned in 00mn 03s ---\\ Firewall Active Exception List (FirewallRules) (O87) O87 - FAEL: "{1A38C64C-38E4-4809-8DE9-CEA8BCC29A84}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\Eidos\Kane and Lynch Dead Men\kaneandlynch.exe (.not file.) O87 - FAEL: "{AFC5B587-A29E-46B0-8E95-85A5272A3977}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\Eidos\Kane and Lynch Dead Men\kaneandlynch.exe (.not file.) O87 - FAEL: "TCP Query User{33A35422-E520-47C1-8F05-F7B167380092}C:\users\vivie\appdata\roaming\nosibay\bubble dock\bubble dock.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\vivie\appdata\roaming\nosibay\bubble dock\bubble dock.exe (.not file.) O87 - FAEL: "UDP Query User{9596BF05-1E84-4397-889F-C8356D9F7A67}C:\users\vivie\appdata\roaming\nosibay\bubble dock\bubble dock.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\vivie\appdata\roaming\nosibay\bubble dock\bubble dock.exe (.not file.) ~ Firewall: 269 Legitimates Filtered in 00mn 01s ---\\ Scan Additionnel (O88) Database Version : v2.12472 - (13/06/2013) Clés trouvées (Keys found) : 609 Valeurs trouvées (Values found) : 2 Dossiers trouvés (Folders found) : 40 Fichiers trouvés (Files found) : 6 [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{006E6A46-8D55-4F10-BBA8-2C9653B4278B}] =>Adware.Boxore [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}] =>Hijacker.SmartBar [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}] =>Hijacker.SmartBar [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00CBB66B-1D3B-46D3-9577-323A336ACB50}] =>PUP.Blabbers [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00CBB66B-1D3B-46D3-9577-323A336ACB50}] =>PUP.Blabbers [HKLM\Software\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}] =>Adware.SocialSkinz [HKLM\Software\Wow6432Node\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}] =>Adware.SocialSkinz [HKLM\Software\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}] =>Adware.IMBooster [HKLM\Software\Wow6432Node\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}] =>Adware.IMBooster [HKLM\Software\Wow6432Node\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}] =>Adware.IMBooster [HKLM\Software\Wow6432Node\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}] =>Adware.Bandoo [HKLM\Software\Classes\TypeLib\{095BFD3C-4602-4FE1-96F1-AEFAFBFD067D}] =>Toolbar.Wajam [HKLM\Software\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}] =>Toolbar.Babylon [HKLM\Software\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}] =>Adware.IMBooster [HKLM\Software\Wow6432Node\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}] =>Adware.IMBooster [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}] =>Toolbar.Babylon [HKLM\Software\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}] =>PUP.RewardsArcade [HKLM\Software\Classes\AppID\{1301a8a5-3dfb-4731-a162-b357d00c9644}] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Classes\AppID\{1301a8a5-3dfb-4731-a162-b357d00c9644}] =>Adware.Bandoo [HKLM\Software\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}] =>PUP.RewardsArcade [HKLM\Software\Classes\AppID\{186E19A3-B909-4F48-B687-BB81EB8BC7CE}] =>Trojan.BHO [HKLM\Software\Wow6432Node\Classes\AppID\{186E19A3-B909-4F48-B687-BB81EB8BC7CE}] =>Trojan.BHO [HKLM\Software\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}] =>PUP.RewardsArcade [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1a93c934-025b-4c3a-b38e-9654a7003239}] =>Adware.GamesBar [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\extensions\{1a93c934-025b-4c3a-b38e-9654a7003239}] =>Adware.GamesBar [HKLM\Software\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}] =>Adware.Bandoo [HKLM\Software\Classes\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634}] =>Toolbar.Wajam [HKLM\Software\Wow6432Node\Classes\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634}] =>Toolbar.Wajam [HKLM\Software\Classes\AppID\{20EDC024-43C5-423E-B7F5-FD93523E0D9F}] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\AppID\{20EDC024-43C5-423E-B7F5-FD93523E0D9F}] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110011441179}] =>Adware.GamePlayLabs [HKLM\Software\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}] =>PUP.RewardsArcade [HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}] =>Adware.AskSBAR [HKLM\Software\Classes\Interface\{2a42d13c-d427-4787-821b-cf6973855778}] =>Adware.Agent [HKLM\Software\Wow6432Node\Classes\Interface\{2a42d13c-d427-4787-821b-cf6973855778}] =>Adware.Agent [HKLM\Software\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}] =>Adware.SocialSkinz [HKLM\Software\Wow6432Node\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}] =>Adware.SocialSkinz [HKLM\Software\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}] =>PUP.RewardsArcade [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}] =>Toolbar.Conduit [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}] =>Toolbar.Conduit [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}] =>Toolbar.Agent [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}] =>Toolbar.Agent [HKLM\Software\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}] =>Toolbar.Agent [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}] =>Toolbar.Agent [HKLM\Software\Classes\AppID\{32451DFC-C23B-4E12-866C-FC7982238504}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\AppID\{32451DFC-C23B-4E12-866C-FC7982238504}] =>Toolbar.Babylon [HKLM\Software\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}] =>PUP.RewardsArcade [HKLM\Software\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}] =>Toolbar.Babylon [HKLM\Software\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}] =>Toolbar.Babylon [HKLM\Software\Classes\AppID\{373ED12D-B306-43AC-9485-A7C5133DC34C}] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\AppID\{373ED12D-B306-43AC-9485-A7C5133DC34C}] =>Toolbar.Agent [HKLM\Software\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}] =>PUP.RewardsArcade [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3d4d238c-9c48-47cd-a95c-53259acf9e56}] =>Toolbar.Conduit [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3d4d238c-9c48-47cd-a95c-53259acf9e56}] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3d4d238c-9c48-47cd-a95c-53259acf9e56}] =>Toolbar.Conduit [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3D4D238C-9C48-47CD-A95C-53259ACF9E56}] =>Toolbar.Agent [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3D4D238C-9C48-47CD-A95C-53259ACF9E56}] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3D4D238C-9C48-47CD-A95C-53259ACF9E56}] =>Toolbar.Agent [HKLM\Software\Classes\Interface\{3d8478aa-7b88-48a9-8bcb-b85d594411ec}] =>Adware.SocialSkinz [HKLM\Software\Wow6432Node\Classes\Interface\{3d8478aa-7b88-48a9-8bcb-b85d594411ec}] =>Adware.SocialSkinz [HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624f4-c5dd-4e1d-bdd0-1e9c9b7799cc}] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624f4-c5dd-4e1d-bdd0-1e9c9b7799cc}] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{42AEFAF9-09D6-4185-87AE-DEDF6E955CB4}] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{42AEFAF9-09D6-4185-87AE-DEDF6E955CB4}] =>Toolbar.Conduit [HKLM\Software\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}] =>Toolbar.Wajam [HKLM\Software\Wow6432Node\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}] =>Toolbar.Wajam [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{4327FABE-3C22-4689-8DBF-D226CF777FE9}] =>Toolbar.Agent [HKLM\Software\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}] =>Toolbar.Babylon [HKLM\Software\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}] =>Toolbar.Conduit [HKLM\Software\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}] =>Adware.SocialSkinz [HKLM\Software\Wow6432Node\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}] =>Adware.SocialSkinz [HKLM\Software\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}] =>Adware.SocialSkinz [HKLM\Software\Wow6432Node\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}] =>Adware.SocialSkinz [HKLM\Software\Classes\Interface\{477f210a-2a86-4666-9c4b-1189634d2c84}] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Classes\Interface\{477f210a-2a86-4666-9c4b-1189634d2c84}] =>Adware.Bandoo [HKLM\Software\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{4897bba6-48d9-468c-8efa-846275d7701b}] =>Adware.SocialSkinz [HKLM\Software\Wow6432Node\Classes\Interface\{4897bba6-48d9-468c-8efa-846275d7701b}] =>Adware.SocialSkinz [HKLM\Software\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}] =>Adware.SocialSkinz [HKLM\Software\Wow6432Node\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}] =>Adware.SocialSkinz [HKLM\Software\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}] =>Toolbar.Babylon [HKLM\Software\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}] =>Adware.SocialSkinz [HKLM\Software\Wow6432Node\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}] =>Adware.SocialSkinz [HKLM\Software\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}] =>Toolbar.Babylon [HKLM\Software\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}] =>Toolbar.Babylon [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{58124A0B-DC32-4180-9BFF-E0E21AE34026}] =>Adware.IMBooster [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{58124A0B-DC32-4180-9BFF-E0E21AE34026}] =>Adware.IMBooster [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{58124A0B-DC32-4180-9BFF-E0E21AE34026}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}] =>PUP.RewardsArcade [HKLM\Software\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}] =>Hijacker.SmartBar [HKLM\Software\Classes\Interface\{5F339F0B-716F-408F-A627-DEEB5DEB4020}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\Interface\{5F339F0B-716F-408F-A627-DEEB5DEB4020}] =>Toolbar.Babylon [HKLM\Software\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}] =>Adware.SocialSkinz [HKLM\Software\Wow6432Node\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}] =>Adware.SocialSkinz [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}] =>Adware.SocialSkinz [HKLM\Software\Classes\CLSID\{63E471BB-23F1-3A92-8D43-4079E7B7FA8E}] =>Toolbar.Agent [HKLM\Software\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}] =>PUP.RewardsArcade [HKCU\Software\Microsoft\Office\Word\Addins\BabylonOfficeAddin.OfficeAddin] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}] =>Adware.IMBooster [HKLM\Software\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}] =>Hijacker.SmartBar [HKLM\Software\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}] =>Adware.Bandoo [HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}] =>Toolbar.Ask [HKLM\Software\Wow6432Node\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}] =>Toolbar.Ask [HKLM\Software\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}] =>Hijacker.SmartBar [HKLM\Software\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}] =>Toolbar.Babylon [HKLM\Software\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}] =>Toolbar.Babylon [HKLM\Software\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{736EF78E-5A04-46F9-893E-EDEC6EA5DF45}] =>Adware.Agent [HKCU\Software\Microsoft\Office\PowerPoint\Addins\BabylonOfficeAddin.OfficeAddin] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\Interface\{7A1BCE27-099C-4628-B63A-AEC00C6376B3}] =>Adware.Agent [HKLM\Software\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}] =>PUP.RewardsArcade [HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7f000001-db8e-f89c-2fec-49bf726f8c12}] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7f000001-db8e-f89c-2fec-49bf726f8c12}] =>Adware.Bandoo [HKLM\Software\Classes\Interface\{817923CB-4744-4216-B250-CF7EDA8F1767}] =>PUP.Blabbers [HKLM\Software\Wow6432Node\Classes\Interface\{817923CB-4744-4216-B250-CF7EDA8F1767}] =>PUP.Blabbers [HKLM\Software\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}] =>Adware.SocialSkinz [HKLM\Software\Wow6432Node\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}] =>Adware.SocialSkinz [HKLM\Software\Classes\TypeLib\{830B56CB-FD22-44AA-9887-7898F4F4158D}] =>PUP.Blabbers [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}] =>Toolbar.Ask [HKLM\Software\Classes\TypeLib\{8830DDF0-3042-404D-A62C-384A85E34833}] =>PUP.Blabbers [HKLM\Software\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}] =>PUP.RewardsArcade [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8a96af9e-4074-43b7-bea3-87217bda74c8}] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{8a96af9e-4074-43b7-bea3-87217bda74c8}] =>Adware.Bandoo [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8A96AF9E-4074-43B7-BEA3-87217BDA74C8}] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{8A96AF9E-4074-43B7-BEA3-87217BDA74C8}] =>Adware.Bandoo [HKLM\Software\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}] =>Toolbar.Babylon [HKLM\Software\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}] =>PUP.RewardsArcade [HKLM\Software\Classes\TypeLib\{8F5F1CB6-EA9E-40AF-A5CA-C7FD63CC1971}] =>Adware.Bandoo [HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}] =>Toolbar.Ask [HKLM\Software\Wow6432Node\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}] =>Toolbar.Ask [HKLM\Software\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}] =>Toolbar.Babylon [HKLM\Software\Classes\TypeLib\{955B782E-CDC8-4CEE-B6F6-AD7D541A8D8A}] =>PUP.Blabbers [HKLM\Software\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}] =>Adware.SocialSkinz [HKLM\Software\Wow6432Node\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}] =>Adware.SocialSkinz [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{963B125B-8B21-49A2-A3A8-E37092276531}] =>PUP.Blabbers [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{963B125B-8B21-49A2-A3A8-E37092276531}] =>PUP.Blabbers [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}] =>Adware.IMBooster [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}] =>Adware.IMBooster [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99079A25-328F-4BD4-BE04-00955ACAA0A7}] =>Adware.Bandoo [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{99079A25-328F-4BD4-BE04-00955ACAA0A7}] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079A25-328F-4BD4-BE04-00955ACAA0A7}] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99079A25-328F-4BD4-BE04-00955ACAA0A7}] =>Adware.Bandoo [HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}] =>Adware.AskSBAR [HKLM\Software\Wow6432Node\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}] =>Adware.AskSBAR [HKLM\Software\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}] =>PUP.RewardsArcade [HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9c8a3ca5-889e-4554-beec-ec0876e4e96a}] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9c8a3ca5-889e-4554-beec-ec0876e4e96a}] =>Adware.Bandoo [HKLM\Software\Classes\Interface\{9F0C17EB-EF2C-4278-9136-2D547656BC03}] =>PUP.Blabbers [HKLM\Software\Wow6432Node\Classes\Interface\{9F0C17EB-EF2C-4278-9136-2D547656BC03}] =>PUP.Blabbers [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A047FE02-C91C-41CB-898C-4ED21B86025A}] =>Toolbar.Orange [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}] =>Adware.Bandoo [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}] =>Adware.Bandoo [HKLM\Software\Classes\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}] =>Adware.Bandoo [HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}] =>Adware.Bandoo [HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}] =>Adware.AskSBAR [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}] =>Adware.AskSBAR [HKLM\Software\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A76AA284-E52D-47E6-9E4F-B85DBF8E35C3}] =>Adware.IMBooster [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}] =>Toolbar.Agent [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}] =>Toolbar.Agent [HKLM\Software\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}] =>Toolbar.Ask [HKLM\Software\Wow6432Node\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}] =>Toolbar.Ask [HKLM\Software\Classes\TypeLib\{ad76633e-e50d-4844-9e7f-4dfbc7c18467}] =>Adware.GamesBar [HKLM\Software\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}] =>PUP.RewardsArcade [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ae07101b-46d4-4a98-af68-0333ea26e113}] =>Adware.Agent [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ae07101b-46d4-4a98-af68-0333ea26e113}] =>Adware.Agent [HKLM\Software\Classes\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113}] =>Adware.Agent [HKLM\Software\Wow6432Node\Classes\Interface\{AF3AFF7C-B9E9-48DD-9002-212B6DEAAC02}] =>Adware.Agent [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}] =>Toolbar.Conduit [HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}] =>Toolbar.Conduit [HKLM\Software\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}] =>Toolbar.Babylon [HKLM\Software\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}] =>Toolbar.Babylon [HKLM\Software\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}] =>Toolbar.Babylon [HKLM\Software\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}] =>Adware.SocialSkinz [HKLM\Software\Wow6432Node\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}] =>Adware.SocialSkinz [HKLM\Software\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}] =>Toolbar.Babylon [HKLM\Software\Classes\CLSID\{B397BC55-576C-39E6-BF64-9E2A96317447}] =>Toolbar.Agent [HKLM\Software\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}] =>Hijacker.Seeearch [HKLM\Software\Classes\CLSID\{B973AB12-952F-31C4-A321-E8FA6FE4421E}] =>Toolbar.Agent [HKLM\Software\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}] =>Adware.SocialSkinz [HKLM\Software\Wow6432Node\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}] =>Adware.SocialSkinz [HKLM\Software\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}] =>Adware.CDNHelper [HKLM\Software\Wow6432Node\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}] =>Adware.CDNHelper [HKLM\Software\Classes\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB}] =>Toolbar.Babylon [HKLM\Software\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}] =>Adware.SocialSkinz [HKLM\Software\Wow6432Node\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}] =>Adware.SocialSkinz [HKLM\Software\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}] =>Toolbar.Babylon [HKLM\Software\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}] =>Toolbar.Babylon [HKLM\Software\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}] =>Toolbar.Babylon [HKLM\Software\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}] =>PUP.RewardsArcade [HKLM\Software\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}] =>Hijacker.SmartBar [HKLM\Software\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}] =>Hijacker.Seeearch [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C9A6357B-25CC-4BCF-96C1-78736985D412}] =>Toolbar.Agent [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C9A6357B-25CC-4BCF-96C1-78736985D412}] =>Toolbar.Agent [HKLM\Software\Classes\TypeLib\{c9c5deaf-0a1f-4660-8279-9edfad6fefe1}] =>Adware.PopCap [HKLM\Software\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}] =>PUP.RewardsArcade [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}] =>Adware.AskSBAR [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}] =>Adware.AskSBAR [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}] =>Adware.AskSBAR [HKLM\Software\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}] =>Toolbar.Wajam [HKLM\Software\Wow6432Node\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}] =>Toolbar.Wajam [HKLM\Software\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] =>Toolbar.Babylon [HKLM\Software\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] =>Toolbar.Babylon [HKLM\Software\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}] =>Adware.SocialSkinz [HKLM\Software\Wow6432Node\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}] =>Adware.SocialSkinz [HKLM\Software\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}] =>PUP.RewardsArcade [HKLM\Software\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{DBE82879-914A-422F-BAE9-2ECC80BE536F}] =>Adware.Agent [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{df780f87-ff2b-4df8-92d0-73db16a1543a}] =>Adware.PopCap [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{df780f87-ff2b-4df8-92d0-73db16a1543a}] =>Adware.PopCap [HKLM\Software\Wow6432Node\Microsoft\Code Store Database\Distribution Units\{df780f87-ff2b-4df8-92d0-73db16a1543a}] =>Adware.PopCap [HKLM\Software\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\Interface\{E12D7149-73EF-45E4-A1E9-99FD7DAE62D3}] =>Adware.Agent [HKLM\Software\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}] =>Toolbar.Babylon [HKLM\Software\Classes\Interface\{e4e3e0f8-cd30-4380-8ce9-b96904bdefca}] =>Adware.PopCap [HKLM\Software\Wow6432Node\Classes\Interface\{e4e3e0f8-cd30-4380-8ce9-b96904bdefca}] =>Adware.PopCap [HKLM\Software\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}] =>Adware.BullseyeToolbar [HKLM\Software\Wow6432Node\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}] =>Adware.BullseyeToolbar [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}] =>Adware.IMBooster [HKLM\Software\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}] =>Toolbar.Babylon [HKLM\Software\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}] =>PUP.RewardsArcade [HKLM\Software\Classes\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}] =>Adware.SocialSkinz [HKLM\Software\Classes\CLSID\{EC5983DF-8DE2-31B5-989F-850F265E7F3C}] =>Toolbar.Agent [HKLM\Software\Classes\AppID\{ED6535E7-F778-48A5-A060-549D30024511}] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\AppID\{ED6535E7-F778-48A5-A060-549D30024511}] =>Toolbar.Agent [HKLM\Software\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{F2B184F1-547C-4EE9-BFC4-AC489C7077D9}] =>Adware.Agent [HKLM\Software\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}] =>PUP.RewardsArcade [HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f9189560-573a-4fde-b055-ae7b0f4cf080}] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f9189560-573a-4fde-b055-ae7b0f4cf080}] =>Adware.Bandoo [HKLM\Software\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}] =>PUP.RewardsArcade [HKLM\Software\Wow6432Node\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}] =>PUP.RewardsArcade [HKLM\Software\Classes\Interface\{fe8a736f-4124-4d9c-b4b1-3b12381efabe}] =>Adware.PopCap [HKLM\Software\Wow6432Node\Classes\Interface\{fe8a736f-4124-4d9c-b4b1-3b12381efabe}] =>Adware.PopCap [HKLM\Software\Classes\Interface\{ff871e51-2655-4d06-aed5-745962a96b32}] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Classes\Interface\{ff871e51-2655-4d06-aed5-745962a96b32}] =>Adware.Bandoo [HKLM\Software\Classes\AppID\bandoocore.exe] =>Adware.Bandoo [HKLM\Software\Classes\AppID\escort.dll] =>Toolbar.Babylon [HKLM\Software\Classes\AppID\escortapp.dll] =>Toolbar.Babylon [HKLM\Software\Classes\AppID\escorteng.dll] =>Toolbar.Babylon [HKLM\Software\Classes\AppID\esrv.EXE] =>Toolbar.Babylon [HKLM\Software\Classes\AppID\GenericAskToolbar.DLL] =>Adware.AskSBAR [HKLM\Software\Classes\AppID\TbCommonUtils.DLL] =>Toolbar.Agent [HKLM\Software\Classes\AppID\TbHelper.EXE] =>Toolbar.Agent [HKLM\Software\Classes\AppID\tdataprotocol.DLL] =>Toolbar.Agent [HKLM\Software\Classes\AppID\updatebho.DLL] =>Toolbar.Agent [HKLM\Software\Classes\AppID\wit4ie.DLL] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASMANCS] =>Toolbar.Bing [HKLM\Software\Classes\b] =>Toolbar.Babylon [HKLM\Software\Classes\Babylon.dskBnd] =>Toolbar.Babylon [HKLM\Software\Classes\Babylon.dskBnd.1] =>Toolbar.Babylon [HKLM\Software\Classes\bbylnApp.appCore] =>Toolbar.Babylon [HKLM\Software\Classes\bbylnApp.appCore.1] =>Toolbar.Babylon [HKLM\Software\Classes\comobject.deskbarenabler] =>Toolbar.Agent [HKLM\Software\Classes\comobject.deskbarenabler.1] =>Toolbar.Agent [HKLM\Software\Classes\Conduit.Engine] =>Toolbar.Conduit [HKLM\Software\Classes\escort.escortIEPane] =>PUP.Funmoods [HKLM\Software\Classes\escort.escortIEPane.1] =>PUP.Funmoods [HKLM\Software\Classes\escort.escrtBtn.1] =>Toolbar.Babylon [HKLM\Software\Classes\esrv.BabylonESrvc] =>Toolbar.Babylon [HKLM\Software\Classes\esrv.BabylonESrvc.1] =>Toolbar.Babylon [HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd] =>Adware.AskSBAR [HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd.1] =>Adware.AskSBAR [HKLM\Software\Classes\LinkurySmartBar.BHO] =>Hijacker.SmartBar [HKLM\Software\Classes\LinkurySmartBar.DockingPanel] =>Hijacker.SmartBar [HKLM\Software\Classes\LinkurySmartBar.LinkuryMenuForm] =>Hijacker.SmartBar [HKLM\Software\Classes\LinkurySmartBar.LinkurySmartBar] =>Hijacker.SmartBar [HKLM\Software\Classes\LinkurySmartBar.LinkurySmartBarBandObject] =>Hijacker.SmartBar [HKLM\Software\Classes\oberontb.band] =>Adware.GamesBar [HKLM\Software\Classes\oberontb.band.1] =>Adware.GamesBar [HKLM\Software\Classes\oberontb.GamesBarBHO] =>Adware.GamesBar [HKLM\Software\Classes\oberontb.GamesBarBHO.1] =>Adware.GamesBar [HKLM\Software\Classes\popcaploader.popcaploaderctrl2] =>Adware.PopCap [HKLM\Software\Classes\popcaploader.popcaploaderctrl2.1] =>Adware.PopCap [HKLM\Software\Classes\SearchBar.Client] =>Toolbar.Agent [HKLM\Software\Classes\SearchQUIEHelper.DNSGuard] =>Adware.Bandoo [HKLM\Software\Classes\SearchQUIEHelper.DNSGuard.1] =>Adware.Bandoo [HKLM\Software\Classes\Software.OneClickCtrl.8] =>Adware.Agent [HKLM\Software\Classes\TbCommonUtils.CommonUtils] =>Toolbar.Agent [HKLM\Software\Classes\TbCommonUtils.CommonUtils.1] =>Toolbar.Agent [HKLM\Software\Classes\updatebho.TimerBHO] =>PUP.Blabbers [HKLM\Software\Classes\updatebho.TimerBHO.1] =>PUP.Blabbers [HKLM\Software\Classes\URLSearchHook.ToolbarURLSearchHook] =>Toolbar.Agent [HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook] =>Adware.Agent [HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook.1] =>Adware.Agent [HKLM\Software\Classes\wit4ie.WitBHO] =>PUP.Blabbers [HKLM\Software\Classes\wit4ie.WitBHO.2] =>PUP.Blabbers [HKLM\Software\Wow6432Node\Google\Chrome\Extensions\bjeikeheijdjdfjbmknpefojickbkmom] =>PUP.OfferBox [HKLM\Software\Wow6432Node\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp] =>Toolbar.Wajam [HKLM\Software\Wow6432Node\Google\Chrome\Extensions\kincjchfokkeneeofpeefomkikfkiedl] =>PUP.FCTPlugin [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\1C875DDE39636004CA8CDAEC335B4160] =>Adware.PredictAd [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852] =>Toolbar.Ask [HKLM\Software\Classes\Installer\Features\482AA67AD25E6E74E9F48BD5FBE8533C] =>Adware.IMBooster [HKLM\Software\Classes\Installer\Products\482AA67AD25E6E74E9F48BD5FBE8533C] =>Adware.IMBooster [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\482AA67AD25E6E74E9F48BD5FBE8533C] =>Adware.IMBooster [HKLM\Software\Wow6432Node\Classes\Installer\Features\482AA67AD25E6E74E9F48BD5FBE8533C] =>Adware.IMBooster [HKLM\Software\Wow6432Node\Classes\Installer\Products\482AA67AD25E6E74E9F48BD5FBE8533C] =>Adware.IMBooster [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED] =>Toolbar.Ask [HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF] =>Toolbar.AVGSearch [HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF] =>Toolbar.AVGSearch [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF] =>Toolbar.AVGSearch [HKLM\Software\Wow6432Node\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF] =>Toolbar.AVGSearch [HKLM\Software\Wow6432Node\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF] =>Toolbar.AVGSearch [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\BA086F2D38A8E1A47912955A68B3AD24] =>Adware.PredictAd [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E] =>Toolbar.Ask [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{08C06D61-F1F3-4799-86F8-BE1A89362C85}] =>Toolbar.Orange [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9] =>Adware.MyWebSearch [HKLM\SYSTEM\CurrentControlSet\Services\WajamUpdater] =>Toolbar.Wajam [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater] =>Toolbar.Wajam [HKCU\Software\APN] =>Toolbar.Ask [HKLM\Software\Wow6432Node\APN] =>Toolbar.Ask [HKCU\Software\Ask.com] =>Toolbar.AskBar [HKCU\Software\AppDataLow\Software\AskToolbar] =>Toolbar.AskTBar [HKLM\Software\Wow6432Node\AskToolbar] =>Toolbar.AskTBar [HKCU\Software\BabylonToolbar] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\BabylonToolbar] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Bandoo] =>Adware.Bandoo [HKCU\Software\Blabbers] =>PUP.Blabbers [HKCU\Software\BlabbersToolbar] =>PUP.Blabbers [HKLM\Software\Wow6432Node\Boxore] =>Adware.Boxore [HKCU\Software\AppDataLow\Software\conduitEngine] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\conduitEngine] =>Toolbar.Conduit [HKCU\Software\Cr_Installer] =>PUP.CrossRider [HKCU\Software\DataMngr] =>Adware.Bandoo [HKLM\Software\Wow6432Node\DataMngr] =>Adware.Bandoo [HKCU\Software\DataMngr_Toolbar] =>Toolbar.Agent [HKCU\Software\gamesbar] =>Adware.GamesBar [HKLM\Software\Wow6432Node\gamesbar] =>Adware.GamesBar [HKLM\Software\Wow6432Node\GamesBarSetup] =>Adware.GamesBar [HKCU\Software\Iminent] =>Adware.IMBooster [HKLM\Software\Wow6432Node\Iminent] =>Adware.IMBooster [HKCU\Software\AppDataLow\Software\Messenger_Plus_FR] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Messenger_Plus_FR] =>Toolbar.Conduit [HKCU\Software\AppDataLow\Software\PriceGong] =>Adware.PriceGong [HKLM\Software\Wow6432Node\Productivity_2.2] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\SearchquMediabarTb] =>Adware.Bandoo [HKCU\Software\SmartbarBackup] =>Hijacker.SmartBar [HKCU\Software\SmartbarLog] =>Hijacker.SmartBar [HKCU\Software\Softonic] =>Toolbar.Conduit [HKCU\Software\AppDataLow\Toolbar] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Microsoft\Tracing\Babylon_RASAPI32] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Microsoft\Tracing\Babylon_RASMANCS] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Microsoft\Tracing\Iminent_RASAPI32] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Microsoft\Tracing\Iminent_RASMANCS] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Microsoft\Tracing\MyBabylontb_RASAPI32] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Microsoft\Tracing\MyBabylontb_RASMANCS] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Microsoft\Tracing\SearchquMediaBar_RASAPI32] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Microsoft\Tracing\SearchquMediaBar_RASMANCS] =>Adware.Bandoo [HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}] =>Toolbar.AskBar [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BrowserCompanion] =>PUP.Blabbers [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\gamesbar] =>Adware.GamesBar [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Giant Savings] =>Adware.VidSaver [HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\IadahToolbar] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Messenger_Plus_FR Toolbar] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP] =>Adware.IMBooster [HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\base64] =>PUP.Blabbers [HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\Chrome] =>PUP.Blabbers [HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\Prox] =>PUP.Blabbers [HKLM\Software\Classes\Prod.cap] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Microsoft\Tracing\offerbox_RASAPI32] =>PUP.OfferBox [HKLM\Software\Wow6432Node\Microsoft\Tracing\offerbox_RASMANCS] =>PUP.OfferBox [HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASAPI32] =>Toolbar.Bing [HKLM\Software\Classes\AppID\priam_bho.DLL] =>Toolbar.Wajam [HKLM\Software\Wow6432Node\Google\Chrome\Extensions\bodddioamolcibagionmmobehnbhiakf] =>PUP.Blabbers [HKLM\Software\Classes\Installer\Features\64A6E60055D801F4BB8AC269354B72B8] =>Adware.Boxore [HKLM\Software\Classes\Installer\Products\64A6E60055D801F4BB8AC269354B72B8] =>Adware.Boxore [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\64A6E60055D801F4BB8AC269354B72B8] =>Adware.Boxore [HKLM\Software\Wow6432Node\Classes\Installer\Features\64A6E60055D801F4BB8AC269354B72B8] =>Adware.Boxore [HKLM\Software\Wow6432Node\Classes\Installer\Products\64A6E60055D801F4BB8AC269354B72B8] =>Adware.Boxore [HKCU\Software\InstallCore] =>Adware.InstallCore [HKLM\SYSTEM\CurrentControlSet\Services\supdate] =>Adware.Boxore [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>Toolbar.Agent [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>Toolbar.Agent [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}] =>Toolbar.Babylon [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}] =>Toolbar.Babylon [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F72841F0-4EF1-4DF5-BCE5-B3AC8ACF5478}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\extensions\{F72841F0-4EF1-4DF5-BCE5-B3AC8ACF5478}] =>Toolbar.Babylon [HKLM\Software\Classes\BabyDict] =>Toolbar.Babylon [HKLM\Software\Classes\BabyGloss] =>Toolbar.Babylon [HKLM\Software\Classes\BabyOptFile] =>Toolbar.Babylon [HKLM\Software\Classes\AppID\{B16632F1-24E0-4D99-A68D-70BFB6447C48}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\AppID\{B16632F1-24E0-4D99-A68D-70BFB6447C48}] =>Toolbar.Babylon [HKLM\Software\Classes\AppID\{C0CEA572-2978-4DFC-A672-8100FF0E276A}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\AppID\{C0CEA572-2978-4DFC-A672-8100FF0E276A}] =>Toolbar.Babylon [HKLM\Software\Classes\TypeLib\{0C2E529C-A82C-4AC6-8807-0B51F7AD7BB2}] =>Toolbar.Babylon [HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C8A3CA5-889E-4554-BEEC-EC0876E4E96A}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C8A3CA5-889E-4554-BEEC-EC0876E4E96A}] =>Toolbar.Babylon [HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F000001-DB8E-F89C-2FEC-49BF726F8C12}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F000001-DB8E-F89C-2FEC-49BF726F8C12}] =>Toolbar.Babylon [HKLM\Software\Classes\TypeLib\{A1489C85-4F6F-48C4-AC9E-18B63AF4703E}] =>Toolbar.Babylon [HKLM\Software\Classes\TypeLib\{F310F027-15CB-4A7F-B10D-3A4AFB5013A5}] =>Toolbar.Babylon [HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F9189560-573A-4FDE-B055-AE7B0F4CF080}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F9189560-573A-4FDE-B055-AE7B0F4CF080}] =>Toolbar.Babylon [HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624F4-C5DD-4E1D-BDD0-1E9C9B7799CC}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624F4-C5DD-4E1D-BDD0-1E9C9B7799CC}] =>Toolbar.Babylon [HKLM\Software\Classes\Interface\{FF871E51-2655-4D06-AED5-745962A96B32}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\Interface\{FF871E51-2655-4D06-AED5-745962A96B32}] =>Toolbar.Babylon [HKLM\Software\Classes\Interface\{477F210A-2A86-4666-9C4B-1189634D2C84}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\Interface\{477F210A-2A86-4666-9C4B-1189634D2C84}] =>Toolbar.Babylon [HKLM\Software\Classes\Interface\{B7EA2226-F876-4BE4-B478-76EBAE2A668A}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\Interface\{B7EA2226-F876-4BE4-B478-76EBAE2A668A}] =>Toolbar.Babylon [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2] =>Toolbar.Ask [HKLM\Software\Classes\AppID\ESRV.EXE] =>Adware.Facemoods [HKLM\Software\Classes\TypeLib\{B00FE392-639D-4688-976E-A1BFF368CB96}] =>Adware.Agent [HKLM\Software\Classes\Interface\{3AE26843-9171-4F23-A8E5-5421701276A4}] =>Adware.Agent [HKLM\Software\Wow6432Node\Classes\Interface\{3AE26843-9171-4F23-A8E5-5421701276A4}] =>Adware.Agent [HKLM\Software\Classes\.bdc] =>Toolbar.Conduit [HKLM\Software\Classes\.bgl] =>Toolbar.Conduit [HKLM\Software\Classes\.bof] =>Toolbar.Conduit [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D970ED5-3EDA-438D-BFFD-715931E2775B}] =>Toolbar.Sorcim [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1D970ED5-3EDA-438D-BFFD-715931E2775B}] =>Toolbar.Sorcim [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1D970ED5-3EDA-438D-BFFD-715931E2775B}] =>Toolbar.Sorcim [HKLM\Software\Classes\AppID\{6536801B-F50C-449B-9476-093DFD3789E3}] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Classes\AppID\{6536801B-F50C-449B-9476-093DFD3789E3}] =>Toolbar.Babylon [HKCU\Software\AppDataLow\Software\Crossrider] =>PUP.CrossRider [HKCU\Software\InstalledBrowserExtensions\] =>PUP.CrossRider [HKLM\Software\Wow6432Node\Microsoft\Tracing\boxore_RASAPI32] =>Adware.Boxore [HKLM\Software\Wow6432Node\Microsoft\Tracing\boxore_RASMANCS] =>Adware.Boxore [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F994E0D9-8335-48F1-99C2-A712C21F8D5F}] =>Toolbar.Ask [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\464AA55239C100F32AF2D438EDDC0F47] =>Adware.IMBooster [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5652BA3D5FB98AE31B337BF0AF939856] =>Adware.IMBooster [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EB95E1AFCBABE3DB9ECCC669B99494] =>Adware.IMBooster [HKLM\Software\Classes\AppID\BabylonHelper.EXE] =>Toolbar.Babylon [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\sl-apl] =>Hijacker.SelectionLinks [HKLM\Software\Classes\CrossriderApp0004479.BHO] =>PUP.CrossRider [HKLM\Software\Classes\CrossriderApp0004479.BHO.1] =>PUP.CrossRider [HKLM\Software\Classes\CrossriderApp0004479.Sandbox] =>PUP.CrossRider [HKLM\Software\Classes\CrossriderApp0004479.Sandbox.1] =>PUP.CrossRider [HKLM\Software\Classes\TbHelper.TbDownloadManager] =>Toolbar.Agent [HKLM\Software\Classes\TbHelper.TbDownloadManager.1] =>Toolbar.Agent [HKLM\Software\Classes\TbHelper.TbPropertyManager] =>Toolbar.Agent [HKLM\Software\Classes\TbHelper.TbPropertyManager.1] =>Toolbar.Agent [HKLM\Software\Classes\TbHelper.TbRequest] =>Toolbar.Agent [HKLM\Software\Classes\TbHelper.TbRequest.1] =>Toolbar.Agent [HKLM\Software\Classes\TbHelper.TbTask] =>Toolbar.Agent [HKLM\Software\Classes\TbHelper.TbTask.1] =>Toolbar.Agent [HKLM\Software\Classes\TbHelper.ToolbarHelper] =>Toolbar.Agent [HKLM\Software\Classes\TbHelper.ToolbarHelper.1] =>Toolbar.Agent [HKLM\Software\Classes\TBSB01620.IEToolbar] =>Toolbar.Agent [HKLM\Software\Classes\TBSB01620.IEToolbar.1] =>Toolbar.Agent [HKLM\Software\Classes\TBSB01620.TBSB01620] =>Toolbar.Agent [HKLM\Software\Classes\TBSB01620.TBSB01620.3] =>Toolbar.Agent [HKLM\Software\Classes\Toolbar3.TBSB01620] =>Toolbar.Agent [HKLM\Software\Classes\Toolbar3.TBSB01620.1] =>Toolbar.Agent [HKLM\Software\Classes\Toolbar.CT2857572] =>Toolbar.Conduit [HKLM\Software\Classes\Toolbar.CT2905330] =>Toolbar.Conduit [HKLM\Software\Classes\Toolbar3.ContextMenuNotifier] =>Toolbar.Agent [HKLM\Software\Classes\Toolbar3.ContextMenuNotifier.1] =>Toolbar.Agent [HKLM\Software\Classes\Toolbar3.CustomInternetSecurityImpl] =>Toolbar.Agent [HKLM\Software\Classes\Toolbar3.CustomInternetSecurityImpl.1] =>Toolbar.Agent [HKLM\Software\Classes\wajam.WajamBHO] =>Toolbar.Wajam [HKLM\Software\Classes\wajam.WajamBHO.1] =>Toolbar.Wajam [HKLM\Software\Classes\wajam.WajamDownloader] =>Toolbar.Wajam [HKLM\Software\Classes\wajam.WajamDownloader.1] =>Toolbar.Wajam [HKLM\Software\Classes\AppID\BandooCore.EXE] =>Adware.Bandoo [HKLM\Software\Classes\AppID\escort.DLL] =>PUP.Funmoods [HKLM\Software\Classes\AppID\escortApp.DLL] =>PUP.Funmoods [HKLM\Software\Classes\AppID\escortEng.DLL] =>PUP.Funmoods [HKLM\Software\Classes\AppID\escorTlbr.DLL] =>PUP.Funmoods [HKLM\Software\Wow6432Node\Classes\CrossriderApp0004479.BHO] =>PUP.CrossRider [HKLM\Software\Wow6432Node\Classes\CrossriderApp0004479.BHO.1] =>PUP.CrossRider [HKLM\Software\Wow6432Node\Classes\CrossriderApp0004479.Sandbox] =>PUP.CrossRider [HKLM\Software\Wow6432Node\Classes\CrossriderApp0004479.Sandbox.1] =>PUP.CrossRider [HKLM\Software\Wow6432Node\Classes\escort.escortIEPane] =>PUP.Funmoods [HKLM\Software\Wow6432Node\Classes\escort.escortIEPane.1] =>PUP.Funmoods [HKLM\Software\Wow6432Node\Classes\escort.escrtBtn.1] =>PUP.Funmoods [HKLM\Software\Wow6432Node\Classes\SearchQUIEHelper.DNSGuard] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Classes\SearchQUIEHelper.DNSGuard.1] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Classes\TbHelper.TbDownloadManager] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\TbHelper.TbDownloadManager.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\TbHelper.TbPropertyManager] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\TbHelper.TbPropertyManager.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\TbHelper.TbRequest] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\TbHelper.TbRequest.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\TbHelper.TbTask] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\TbHelper.TbTask.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\TbHelper.ToolbarHelper] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\TbHelper.ToolbarHelper.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\TBSB01620.IEToolbar] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\TBSB01620.IEToolbar.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\TBSB01620.TBSB01620] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\TBSB01620.TBSB01620.3] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolbar3.TBSB01620] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolbar3.TBSB01620.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolbar.CT2857572] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Classes\Toolbar.CT2905330] =>Toolbar.Conduit [HKLM\Software\Wow6432Node\Classes\Toolbar3.ContextMenuNotifier] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolbar3.ContextMenuNotifier.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolbar3.CustomInternetSecurityImpl] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\Toolbar3.CustomInternetSecurityImpl.1] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Classes\wajam.WajamBHO] =>Toolbar.Wajam [HKLM\Software\Wow6432Node\Classes\wajam.WajamBHO.1] =>Toolbar.Wajam [HKLM\Software\Wow6432Node\Classes\wajam.WajamDownloader] =>Toolbar.Wajam [HKLM\Software\Wow6432Node\Classes\wajam.WajamDownloader.1] =>Toolbar.Wajam [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011441179}] =>PUP.CrossRider [HKLM\Software\Wow6432Node\Classes\CLSID\{11111111-1111-1111-1111-110011441179}] =>PUP.CrossRider [HKLM\Software\Wow6432Node\Classes\CLSID\{22222222-2222-2222-2222-220022442279}] =>PUP.CrossRider [HKLM\Software\Wow6432Node\Classes\AppID\BandooCore.EXE] =>Adware.Bandoo [HKLM\Software\Wow6432Node\Classes\AppID\escort.DLL] =>PUP.Funmoods [HKLM\Software\Wow6432Node\Classes\AppID\escortApp.DLL] =>PUP.Funmoods [HKLM\Software\Wow6432Node\Classes\AppID\escortEng.DLL] =>PUP.Funmoods [HKLM\Software\Wow6432Node\Classes\AppID\escorTlbr.DLL] =>PUP.Funmoods [HKLM\Software\Wow6432Node\Classes\AppID\TbHelper.EXE] =>Toolbar.Agent [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011441179}] =>PUP.CrossRider [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110011441179}] =>PUP.CrossRider [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BA71D41F6CC0B6247B05D473850A8AEA] =>Adware.Boxore^ [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^ [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar]:{30F9B915-B755-4826-820B-08FBA6BD249D} =>Toolbar.Conduit [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]:Browser Infrastructure Helper =>PUP.Software.Updater C:\Program Files (x86)\Ask.com =>Toolbar.AskBar C:\Program Files (x86)\Babylon =>Toolbar.Babylon C:\Program Files (x86)\BabylonToolbar =>Toolbar.Babylon C:\Program Files (x86)\Boxore =>Adware.Boxore C:\Program Files (x86)\BrowserCompanion =>PUP.Blabbers C:\Program Files (x86)\Conduit =>Toolbar.Conduit C:\Program Files (x86)\ConduitEngine =>Toolbar.Conduit C:\Program Files (x86)\GamesBar =>Adware.GamesBar C:\Program Files (x86)\Giant Savings =>Adware.VidSaver C:\Program Files (x86)\IMinent Toolbar =>Adware.IMBooster C:\Program Files (x86)\OfferBox =>PUP.OfferBox C:\Program Files (x86)\Software =>Adware.Boxore C:\Program Files (x86)\Windows Searchqu Toolbar =>Adware.Bandoo C:\Program Files (x86)\OApps =>Toolbar.Agent C:\ProgramData\Babylon =>Toolbar.Babylon C:\ProgramData\GamesBar =>Adware.GamesBar C:\ProgramData\IBUpdaterService =>Adware.IncrediBar C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Babylon =>Toolbar.Babylon C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GamesBar =>Adware.GamesBar C:\Users\Vivie\AppData\Roaming\Babylon =>Toolbar.Babylon C:\Users\Vivie\AppData\Roaming\BrowserCompanion =>PUP.Blabbers C:\Users\Vivie\AppData\Roaming\OfferBox =>PUP.OfferBox C:\Users\Vivie\AppData\Local\Babylon =>Toolbar.Babylon C:\Users\Vivie\AppData\Local\Conduit =>Toolbar.Conduit C:\Users\Vivie\AppData\Local\Giant Savings =>Adware.VidSaver C:\Users\Vivie\AppData\Local\Linkury =>Hijacker.SmartBar C:\Users\Vivie\AppData\Local\Smartbar =>Hijacker.SmartBar C:\Users\Vivie\AppData\Local\Software =>Adware.Boxore C:\Users\Vivie\AppData\LocalLow\AskToolbar =>Toolbar.AskTBar C:\Users\Vivie\AppData\LocalLow\bbrs_002.tb =>PUP.Blabbers C:\Users\Vivie\AppData\LocalLow\Conduit =>Toolbar.Conduit C:\Users\Vivie\AppData\LocalLow\ConduitEngine =>Toolbar.Conduit C:\Users\Vivie\AppData\LocalLow\PriceGong =>Adware.PriceGong C:\Users\Vivie\AppData\LocalLow\searchqutoolbar =>Adware.Bandoo C:\Users\Vivie\AppData\Local\Temp\AskSearch =>Toolbar.AskBarDis C:\Users\Vivie\AppData\Local\Temp\Iminent =>Adware.IMBooster C:\Users\Vivie\AppData\Local\Temp\Smartbar =>Hijacker.SmartBar C:\Users\Vivie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kincjchfokkeneeofpeefomkikfkiedl =>PUP.FCTPlugin C:\Users\Vivie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbpohikckhbcljgombipcdoinkaedlfa =>Spyware.SmartDisplay C:\Users\Vivie\AppData\Roaming\Mozilla\Firefox\Profiles\y6jc2wt2.default\searchqutoolbar =>Adware.Bandoo C:\Users\Vivie\AppData\Roaming\Mozilla\Firefox\Profiles\y6jc2wt2.default\SearchPlugins\conduit.xml =>Toolbar.Conduit C:\Users\Vivie\AppData\Roaming\Mozilla\Firefox\Profiles\y6jc2wt2.default\SearchPlugins\SearchquWebSearch.xml =>Adware.Bandoo C:\Users\Vivie\AppData\Local\Temp\wajam_install.exe =>Toolbar.Wajam C:\Users\Vivie\AppData\Local\Temp\blabbers-ff-le.xpi =>PUP.Blabbers C:\Users\Vivie\Desktop\BandooV6.exe =>Adware.Bandoo ~ Additionnel Scan: 299490 Items scanned in 00mn 49s ---\\ Product Upgrade Codes (O90) O90 - PUC: "482AA67AD25E6E74E9F48BD5FBE8533C" . (.IMinent Toolbar.) -- C:\Documents and Settings\CATA\My Documents\My Received Files\icon.ico O90 - PUC: "70BB52E0BE26F67478CFA64F62BA50E9" . (.Boxore Client.) -- C:\Windows\Installer\{0E25BB07-62EB-476F-87FC-6AF426AB059E}\boxore.ico O90 - PUC: "A28B4D68DEBAA244EB686953B7074FEF" . (.Avira SearchFree Toolbar plus Web Protection.) -- c:\program files (x86)\ask.com\cb_fb12.ico O90 - PUC: "E17A8F77515323848B2BF2E1BD2D0E1F" . (.Bing Bar.) -- C:\Windows\Installer\{77F8A71E-3515-4832-B8B2-2F1EDBD2E0F1}\icon_installer_ico ~ Update Products: 102 Legitimates Filtered in 00mn 00s ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SR - | Auto 11/05/2013 65640 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe SS - | Demand 16/06/2013 256904 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe SR - | Auto 01/04/2013 86752 | (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe SR - | Auto 01/04/2013 110816 | (AntiVirService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe SR - | Auto 13/05/2013 562744 | (AntiVirWebService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.exe SS - | Auto 21/12/2012 57008 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe SR - | Auto 09/05/2013 46808 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe SS - | Demand 28/02/2011 183560 | (BBSvc) . (.Microsoft Corporation..) - C:\Program Files (x86)\Microsoft\BingBar\BBSvc.exe SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe SS - | Auto 19/02/2011 136176 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 19/02/2011 136176 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 24/08/2012 194032 | (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe SR - | Demand 20/02/2013 641352 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe SR - | Auto 22/01/2012 124832 | (MsgPlusService) . (.Yuna Software.) - C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\MsgPlusForS =>Adware.IMBooster0320 | (nvUpdatusService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu =>Adware.Boxorervice\OUCore.exe SR - | Auto 05/08/2010 583640 | (PCToolsSSDMonitorSvc) . (.PC Tools.) - C:\Program Files (x86)\Common Fil =>Toolbar.AVGSearch\BingBar\SeaPort.exe SS - | Auto 01/03/2013 161384 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe SR - | Auto 18/01/2013 383264 | (Stereo Service) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe SS - | Auto 23/09/2012 139576 | (supdate) . (.Boxore OU..) - C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe SR - | Auto 01/06/2011 2337144 | (TeamViewer6) . (.TeamViewer GmbH.) - C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe SR - | Auto 05/10/2012 109064 | (WajamUpdater) . (.Wajam.) - C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe SS - | Demand 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe