Rapport de ZHPDiag v2013.6.13.18 par Nicolas Coolman, Update du 13/06/2013
Run by Vivie at 16/06/2013 14:07:23
WebSite: http://nicolascoolman.webs.com
State : Version � jour.
WhiteList : Enable
High Elevated Privileges : OK
UAC : Deactivate by program


---\\ Web Browser
MSIE: Internet Explorer v10.0.9200.16618
MFIE: Mozilla Firefox 6.0.2
GCIE: Google Chrome v26.0.1410.64 (Defaut)

---\\ Windows Product Information
~ Langage: Fran�ais
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, RETAIL channel
Windows ID Activation : OK
~ Windows Partial Key : CPX9K
Windows License : OK
~ Windows Remaining Initializations Number : 4
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ System Protection
Avira Free Antivirus v13.0.0.3640
avast! Free Antivirus v8.0.1489.0
Windows Defender W7

---\\ System Optimizer
CCleaner v2.31 =>Piriform Ltd

---\\ Peer To Peer (P2P)

---\\ Software Update
Adobe Flash Player 11 Plugin
Adobe Reader XI
Java 7 Update 21

---\\ System Information
~ Processor: Intel64 Family 6 Model 15 Stepping 13, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2047 MB (27% free)
System Restore: Activ� (Enable)
System drive C: has 6 GB (11%) free of 49 GB

---\\ Logged in mode
~ Computer Name: VIVIE-PC
~ User Name: Vivie
~ All Users Names: Vivie, UpdatusUser, HomeGroupUser$, Administrateur,
~ Unselected Option: None
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\Vivie\AppData\Roaming\
~ %Desktop% : C:\Users\Vivie\Desktop\
~ %Favorites% : C:\Users\Vivie\Favorites\
~ %LocalAppData% : C:\Users\Vivie\AppData\Local\
~ %StartMenu% : C:\Users\Vivie\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 6 Go of 49 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 11 Go of 195 Go)
E:\ Hard drive, Flash drive, Thumb drive (Free 97 Go of 98 Go)
F:\ Hard drive, Flash drive, Thumb drive (Free 49 Go of 124 Go)
G:\ CD-ROM drive (Not Inserted)
H:\ CD-ROM drive (Not Inserted)
I:\ Floppy drive, Flash card reader, USB Key (Free 4 Go of 4 Go)



---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
~ Security Center: 29 Legitimates Filtered in 00mn 00s



---\\ Recherche particuli�re de fichiers g�n�riques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de d�marrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.12716D987D475B051F35895659159705] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.17/05/2013 - 01:59:03.) -- C:\Windows\System32\wininet.dll [2241024]
[MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d�ouverture de session Windows.) (.20/11/2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Biblioth�que de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du syst�me de fichiers NT.) (.12/04/2013 - 15:45:08.) -- C:\Windows\system32\Drivers\ntfs.sys [1656680]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parall�le.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de clich� instantan� du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Generic Processes: Scanned in 00mn 00s



---\\ Etat des fichiers cach�s (Cach�/Total)
~ Mes images (My Pictures) : 1/497
~ Mes musiques (My Musics) : 1/77
~ Mes Videos (My Videos) : 2/5
~ Mes Favoris (My Favorites) : 1/14
~ Mes Documents (My Documents) : 1/17
~ Mon Bureau (My Desktop) : 1/22
~ Menu demarrer (Programs) : 1/38
~ Hidden Files: Scanned in 00mn 00s



---\\ Processus lanc�s
[MD5.9EC9218D94DB00C67BBB28DC62B8A46B] - (.Microsoft Corporation - Microsoft LifeCam Device Application.) -- C:\Windows\vVX1000.exe [762736] [PID.2272]
[MD5.4FDA635475F67582522E61AF21A672E6] - (.Realtek Semiconductor Corp. - Realtek Sound Manager.) -- C:\Windows\SOUNDMAN.exe [604704] [PID.2280]
[MD5.9C8ACCB9AA289995EF17D88E5C7BB4A4] - (.ACD Systems, Ltd. - Device Detector.) -- C:\Program Files (x86)\Common Files\ACD Systems\FR\DevDetect.exe [288296] [PID.2316]
[MD5.7CAAA5A0836E284F7363A39C95A252CF] - (.Oberon Media - SearchEngineProtection.exe.) -- C:\Program Files (x86)\GamesBar\SearchEngineProtection.exe [546200] [PID.2328] =>Adware.GamesBar
[MD5.775DC2AE72F972935703ADA4FFDF3749] - (.Orange - MailNotifier.) -- C:\Program Files (x86)\Orange\MailNotifier\MailNotifier.exe [888480] [PID.2388]
[MD5.143ECB242AF6ECE366AB477828E29D44] - (...) -- C:\Program Files (x86)\Orange\Orange Installer\OrangeInstaller.exe [561320] [PID.2420]
[MD5.506B6B3D1800A40113EFE80948455B8D] - (.Logitech Inc. - Logitech G-series Media Display.) -- C:\Program Files\Logitech\GamePanel Software\LCD Manager\Applets\LCDMedia.exe [460048] [PID.2472]
[MD5.095184B28B8414A6D2D09C1CE7C7B86F] - (.Orange - Executable Orange Inside.) -- C:\Users\Vivie\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe [1530520] [PID.2548]
[MD5.68EB124634A8E03D0D49320ABF6F90BE] - (.Smartbar - Smartbar.) -- C:\Users\Vivie\AppData\Local\Smartbar\Application\Smartbar.exe [20272] [PID.2428] =>Hijacker.SmartBar
[MD5.E84DA43E726D043CA2DEE71F01DB261A] - (.Microsoft Corporation - Microsoft OneNote Quick Launcher.) -- C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.exe [228448] [PID.2924]
[MD5.C16839DB1F0CB8E308049514BB5736C1] - (...) -- C:\Users\Vivie\AppData\Roaming\BrowserCompanion\tbhcn.exe [733376] [PID.2960] =>PUP.Blabbers
[MD5.9670844EAC56B193B06010DC21219052] - (.PC Tools - SSDMonit Application.) -- C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe [104408] [PID.2268]
[MD5.15F986CC4BAA199A27E517723A581260] - (.Blabbers Communications LTD - Browser Companion Helper.) -- C:\Program Files (x86)\BrowserCompanion\BCHelper.exe [192816] [PID.2648] =>PUP.Blabbers
[MD5.F43B91D94A766B5D6C401FA69BCC8A1B] - (.Discordia, LTD - Data Manager.) -- C:\Program Files (x86)\Windows Searchqu Toolbar\Datamngr\datamngrUI.exe [1115536] [PID.3092] =>PUP.Datamngr
[MD5.07B0A211110E86A3C206F9624DEEFC57] - (.Babylon Ltd. - Babylon Information Tool.) -- C:\Program Files (x86)\Babylon\Babylon-Pro\Babylon.exe [3196016] [PID.3136] =>Toolbar.Babylon
[MD5.4C976D5913FF84FBF3ED55F8855641B1] - (.Ask - Ask Updater.) -- C:\Program Files (x86)\Ask.com\Updater\Updater.exe [1568976] [PID.2712]
[MD5.FD579C25D253A47DF82A76B7EE96ADB5] - (.Avira Operations GmbH & Co. KG - Avira System Tray Tool.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345312] [PID.3320]
[MD5.8E2A7F1F62467A7DCB8AB2C0642F47CA] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392] [PID.3356]
[MD5.0A9A90EDB4EB99CD4005D20FF91B26CF] - (.Boxore OU - Boxore Client.) -- C:\Program Files (x86)\Boxore\BoxoreClient\boxore.exe [611616] [PID.3404] =>Adware.Boxore
[MD5.3F11B20D12D89365D7721BDC860CE5F0] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [4858968] [PID.3412]
[MD5.B8DD83B85636F7D6EC0F09B090E49130] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [7494656] [PID.6560]
[MD5.5A19667A580B1CE886EAF968B9743F45] - (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [383264] [PID.808]
[MD5.28D6701C710AD7BA3CB95E75F8F1A9AA] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808] [PID.1276]
[MD5.E41F55D0B71734BB68FF26963EB250E4] - (.Avira Operations GmbH & Co. KG - Avira Scheduler.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [86752] [PID.1576]
[MD5.ADDA5E1951B90D3D23C56D3CF0622ADC] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65640] [PID.1944]
[MD5.880AE0BEDE234F27AC252049373B8CB9] - (.Avira Operations GmbH & Co. KG - Avira On-Access Service.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [110816] [PID.1976]
[MD5.F02A533F517EB38333CB12A9E8963773] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [136176] [PID.2060]
[MD5.85D5E6AC46A2AE4672C1AC813AE45B95] - (.Microsoft Corp. - Bing Desktop updating service.) -- C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktopUpdater.exe [168592] [PID.2712]
[MD5.3F3D6E8BD31B3C017D0AB24CD5EC0D05] - (.Yuna Software - Service - Messenger Plus! for Skype.) -- C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe [124832] [PID.3956]
[MD5.E6E503845208A148A9E3E7FAA63B97A4] - (.PC Tools - StartMan Application.) -- C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [583640] [PID.4068]
[MD5.8A9828975A857E477EFEF5A61BA45AC0] - (.TeamViewer GmbH - TeamViewer Remote Control Application.) -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2337144] [PID.684]
[MD5.4AA2CC5979AFF984227364F2C23B04F3] - (.Wajam - Auto-updater.) -- C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe [109064] [PID.3772] =>Toolbar.Wajam
[MD5.8349419DFDA3F2F03EA4A655758290C2] - (.Avira Operations GmbH & Co. KG - Avira WebGuard Service.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.exe [562744] [PID.5056]
[MD5.8598C2AE3A7C7281B1290297C7CCFD57] - (.AVAST Software - avast! antivirus Update.) -- C:\Program Files\AVAST Software\Avast\setup\avast.setup [6583664] [PID.6332]
~ Processes Running: Scanned in 00mn 01s



---\\ Google Chrome, D�marrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Vivie\AppData\Local\Google\Chrome\User Data\Default\Preferences
G2 - GCE: Preference [User Data\Default] [amfclgbdpgndipgoegfpkkgobahigbcl] Messenger Plus! Community Smartbar v.1.4, (D�sactiv�) =>Hijacker.SmartBar
G2 - GCE: Preference [User Data\Default] [bjeikeheijdjdfjbmknpefojickbkmom] Offerbox v.2.1.3128.64 (D�sactiv�) =>PUP.OfferBox
G2 - GCE: Preference [User Data\Default] [bodddioamolcibagionmmobehnbhiakf] Browser Companion Helper v.1.0.5 (Activ�)
G2 - GCE: Preference [User Data\Default] [bpgoohpbdddibhlhdkenenmmlfofjfkh] Ginyas Browser Companions v.1.0.5 (Activ�)
G2 - GCE: Preference [User Data\Default] [dhkplhfnhceodhffomolpfigojocbpcb] Babylon Translator v.1.4 (Activ�) =>Toolbar.Babylon
G2 - GCE: Preference [User Data\Default] [jpmbfleldcgkldadpdinhjjopdfpjfjp] Wajam v.1.24 (Activ�) =>Toolbar.Wajam
G2 - GCE: Preference [User Data\Default] [pbpohikckhbcljgombipcdoinkaedlfa] Smart Display v.1.5 (Activ�) =>Spyware.SmartDisplay
~ Google Browser: 16 Legitimates Filtered in 00mn 01s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\Vivie\AppData\Roaming\Mozilla\Firefox\Profiles\y6jc2wt2.default\prefs.js
C:\Users\Vivie\AppData\Roaming\Mozilla\Firefox\Profiles\y6jc2wt2.default\user.js
M3 - MFPP: Plugins - [Vivie] -- C:\Users\Vivie\AppData\Roaming\Mozilla\Firefox\Profiles\y6jc2wt2.default\searchplugins\askcom.xml
M3 - MFPP: Plugins - [Vivie] -- C:\Users\Vivie\AppData\Roaming\Mozilla\Firefox\Profiles\y6jc2wt2.default\searchplugins\bingp.xml
M3 - MFPP: Plugins - [Vivie] -- C:\Users\Vivie\AppData\Roaming\Mozilla\Firefox\Profiles\y6jc2wt2.default\searchplugins\conduit.xml
M3 - MFPP: Plugins - [Vivie] -- C:\Users\Vivie\AppData\Roaming\Mozilla\Firefox\Profiles\y6jc2wt2.default\searchplugins\Messenger Plus Smartbar Search.xml =>Hijacker.SmartBar
M3 - MFPP: Plugins - [Vivie] -- C:\Users\Vivie\AppData\Roaming\Mozilla\Firefox\Profiles\y6jc2wt2.default\searchplugins\Plusnetwork.xml
M3 - MFPP: Plugins - [Vivie] -- C:\Users\Vivie\AppData\Roaming\Mozilla\Firefox\Profiles\y6jc2wt2.default\searchplugins\SearchquWebSearch.xml =>PUP.Datamngr
M3 - MFPP: Plugins - [Vivie] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\babylon.xml =>Toolbar.Babylon
M3 - MFPP: Plugins - [Vivie] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\SearchquWebSearch.xml =>PUP.Datamngr
M0 - MFSP: prefs.js [Vivie - y6jc2wt2.default] http://www.searchqu.com =>PUP.Datamngr
M2 - MFEP: prefs.js [Vivie - y6jc2wt2.default\bbrs_003@blabbers.com] [] Ginyas Browser Companions v1.0.5 (..) =>PUP.Blabbers
M2 - MFEP: prefs.js [Vivie - y6jc2wt2.default\helperbar@helperbar.com] [] Messenger Plus! Community Smartbar v1.0.5 (..) =>Hijacker.SmartBar
M2 - MFEP: prefs.js [Vivie - y6jc2wt2.default\{99079a25-328f-4bd4-be04-00955acaa0a7}] [] Searchqu Toolbar v4.1.0.01 (..) =>PUP.Datamngr
~ Firefox Browser: 43 Legitimates Filtered in 00mn 00s



---\\ Internet Explorer, D�marrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://s1.bubbledock.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://feed.plusnetwork.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.plusnetwork.com
R3 - URLSearchHook: Elf 1.12 Toolbar [64Bits] - {38542454-dfb6-44f5-b052-d4e071a3d073} . (.Conduit Ltd. - Conduit Toolbar.) (6.3.0.26) -- C:\Program Files (x86)\Elf_1.12\prxtbElf_.dll =>Toolbar.Conduit
R3 - URLSearchHook: Messenger Plus FR Toolbar [64Bits] - {3d4d238c-9c48-47cd-a95c-53259acf9e56} . (.Conduit Ltd. - Conduit Toolbar.) (6.3.4.1) -- C:\Program Files (x86)\Messenger_Plus_FR\prxtbMes0.dll =>Toolbar.Conduit
~ IE Browser: 17 Legitimates Filtered in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File: Scanned in 00mn 00s
~ Nombre de lignes (Lines number): 21



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: script helper for ie [64Bits] - {00cbb66b-1d3b-46d3-9577-323a336acb50} . (.Pas de propri�taire - Browser Companion Helper plug-in.) -- C:\Program Files (x86)\BrowserCompanion\jsloader.dll =>PUP.Blabbers
O2 - BHO: CrossriderApp0004479 [64Bits] - {11111111-1111-1111-1111-110011441179} . (.215 Apps - Giant Savings BHO.) -- C:\Program Files (x86)\Giant Savings\Giant Savings.dll =>PUP.SpecialSavings
O2 - BHO: ToolbarOrange.InitToolbarBHO [64Bits] - {1d970ed5-3eda-438d-bffd-715931e2775b} . (...) -- mscoree.dll (.not file.)
O2 - BHO: Babylon toolbar helper [64Bits] - {2EECD738-5844-4a99-B4B6-146BF802613B} . (.Babylon BHO - Pas de description.) -- C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.8.3.8\bh\BabylonToolbar.dll =>Toolbar.Babylon
O2 - BHO: Conduit Engine [64Bits] - {30F9B915-B755-4826-820B-08FBA6BD249D} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll =>Toolbar.Conduit
O2 - BHO: Messenger Plus! Community SmartbarEngine [64Bits] - {31ad400d-1b06-4e33-a59a-90c2c140cba0} . (...) -- mscoree.dll (.not file.) =>Hijacker.SmartBar
O2 - BHO: Elf 1.12 [64Bits] - {38542454-dfb6-44f5-b052-d4e071a3d073} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files (x86)\Elf_1.12\prxtbElf_.dll =>Toolbar.Conduit
O2 - BHO: Messenger Plus FR [64Bits] - {3d4d238c-9c48-47cd-a95c-53259acf9e56} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files (x86)\Messenger_Plus_FR\prxtbMes0.dll =>Toolbar.Conduit
O2 - BHO: TBSB01620 [64Bits] - {58124A0B-DC32-4180-9BFF-E0E21AE34026} . (.Pas de propri�taire - IE Toolbar Engine.) -- C:\Program Files (x86)\IMinent Toolbar\tbcore3.dll =>Adware.IMBooster
O2 - BHO: Update Timer [64Bits] - {963B125B-8B21-49A2-A3A8-E37092276531} . (.Blabbers Communications Ltd - Ginyas Browser Companion Verifier.) -- C:\Program Files (x86)\GinyasBrowserCompanions\updatebhoWin32.dll =>PUP.Blabbers
O2 - BHO: Searchqu Toolbar [64Bits] - {99079a25-328f-4bd4-be04-00955acaa0a7} . (.Pas de propri�taire - dtx Dynamic Link Library.) -- C:\Program Files (x86)\Windows Searchqu Toolbar\ToolBar\searchqudtx.dll =>PUP.Datamngr
O2 - BHO: Babylon IE plugin [64Bits] - {9CFACCB6-2F3F-4177-94EA-0D2B72D384C1} . (.Babylon Ltd. - Babylon Internet Explorer Addin.) -- C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll =>Toolbar.Babylon
O2 - BHO: UrlHelper Class [64Bits] - {A40DC6C5-79D0-4ca8-A185-8FF989AF1115} . (.Discordia, LTD - IEHelper.) -- C:\Program Files (x86)\Windows Searchqu Toolbar\Datamngr\IEBHO.dll =>PUP.Datamngr
O2 - BHO: Wajam IE BHO [64Bits] - {A7A6995D-6EE1-4FD1-A258-49395D5BF99C} . (.Wajam - Wajam Internet Explorer Add-on.) -- C:\Program Files (x86)\Wajam\IE\priam_bho.dll =>Toolbar.Wajam
O2 - BHO: GamesBarBHO Class [64Bits] - {CB0D163C-E9F4-4236-9496-0597E24B23A5} . (.Oberon Media Ltd. - GamesBar.) -- C:\Program Files (x86)\GamesBar\2.0.1.59\oberontb.dll =>Adware.GamesBar
O2 - BHO: Ask Toolbar BHO [64Bits] - {D4027C7F-154A-4066-A1AD-4243D8127440} . (.Ask - Avira SearchFree Toolbar.) -- C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll =>Toolbar.Ask
~ BHO: 24 Legitimates Filtered in 00mn 01s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: Messenger Plus! Community Smartbar [64Bits] - [HKLM]{ae07101b-46d4-4a98-af68-0333ea26e113} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>Hijacker.SmartBar
O3 - Toolbar: Google Toolbar [64Bits] - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: (no name) [64Bits] - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Cl� orpheline
~ Toolbar: Scanned in 00mn 00s



---\\ Applications d�marr�es par registre & par dossier (O4)
O4 - HKLM\..\Run: [VX1000] . (.Microsoft Corporation - Microsoft LifeCam Device Application.) -- C:\Windows\vVX1000.exe
O4 - HKLM\..\Run: [SoundMan] . (.Realtek Semiconductor Corp. - Realtek Sound Manager.) -- C:\Windows\SOUNDMAN.exe
O4 - HKLM\..\Run: [Launch LCDMon] . (.Logitech Inc. - Logitech LCD Manager.) -- C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe
O4 - HKLM\..\Run: [Launch LGDCore] . (.Logitech Inc. - Logitech G-series Profiler.) -- C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe
O4 - HKCU\..\Run: [Device Detector] DevDetect.exe
O4 - HKCU\..\Run: [SearchEngineProtection] . (.Oberon Media - SearchEngineProtection.exe.) -- C:\Program Files (x86)\Gamesbar\SearchEngineProtection.exe =>Adware.GamesBar
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MailNotifier] . (.Orange - MailNotifier.) -- C:\Program Files (x86)\Orange\MailNotifier\MailNotifier.exe
O4 - HKCU\..\Run: [Orange Installer] . (...) -- C:\Program Files (x86)\Orange\Orange Installer\OrangeInstaller.exe
O4 - HKCU\..\Run: [OrangeInside] . (.Orange - Executable Orange Inside.) -- C:\Users\Vivie\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe
O4 - HKCU\..\Run: [Browser Infrastructure Helper] . (.Smartbar - Smartbar.) -- C:\Users\Vivie\AppData\Local\Smartbar\Application\Smartbar.exe =>Hijacker.SmartBar
O4 - HKLM\..\Wow6432Node\Run: [LifeCam] . (.Microsoft Corporation - LifeExp.exe.) -- C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe
O4 - HKLM\..\Wow6432Node\Run: [SSDMonitor] . (.PC Tools - SSDMonit Application.) -- C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe
O4 - HKLM\..\Wow6432Node\Run: [Browser companion helper] . (.Blabbers Communications LTD - Browser Companion Helper.) -- C:\Program Files (x86)\BrowserCompanion\BCHelper.exe =>PUP.Blabbers
O4 - HKLM\..\Wow6432Node\Run: [PlusService] . (.Yuna Software - Messenger Plus! 6.) -- F:\Messenger Plus!\PlusService.exe
O4 - HKLM\..\Wow6432Node\Run: [DATAMNGR] . (.Discordia, LTD - Data Manager.) -- C:\Program Files (x86)\Windows Searchqu Toolbar\Datamngr\datamngrUI.exe =>PUP.Datamngr
O4 - HKLM\..\Wow6432Node\Run: [Babylon Client] . (.Babylon Ltd. - Babylon Information Tool.) -- C:\Program Files (x86)\Babylon\Babylon-Pro\Babylon.exe =>Toolbar.Babylon
O4 - HKLM\..\Wow6432Node\Run: [MessengerPlusForSkypeService] . (.Yuna Software - Service - Messenger Plus! for Skype.) -- C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe
O4 - HKLM\..\Wow6432Node\Run: [ApnUpdater] . (.Ask - Ask Updater.) -- C:\Program Files (x86)\Ask.com\Updater\Updater.exe
O4 - HKLM\..\Wow6432Node\Run: [BingDesktop] . (.Microsoft Corp. - Bing Desktop Application.) -- C:\Program Files (x86)\Microsoft\BingDesktop\BingDesktop.exe
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Wow6432Node\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Avira System Tray Tool.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe
O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe
O4 - HKLM\..\Wow6432Node\Run: [Boxore Client] . (.Boxore OU - Boxore Client.) -- C:\Program Files (x86)\Boxore\BoxoreClient\boxore.exe =>Adware.Boxore
O4 - HKLM\..\Wow6432Node\Run: [avast] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastUI.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-21-1042879119-3641776606-230875828-1000\..\Run: [Device Detector] DevDetect.exe
O4 - HKUS\S-1-5-21-1042879119-3641776606-230875828-1000\..\Run: [SearchEngineProtection] . (.Oberon Media - SearchEngineProtection.exe.) -- C:\Program Files (x86)\Gamesbar\SearchEngineProtection.exe =>Adware.GamesBar
O4 - HKUS\S-1-5-21-1042879119-3641776606-230875828-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKUS\S-1-5-21-1042879119-3641776606-230875828-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-21-1042879119-3641776606-230875828-1000\..\Run: [MailNotifier] . (.Orange - MailNotifier.) -- C:\Program Files (x86)\Orange\MailNotifier\MailNotifier.exe
O4 - HKUS\S-1-5-21-1042879119-3641776606-230875828-1000\..\Run: [Orange Installer] . (...) -- C:\Program Files (x86)\Orange\Orange Installer\OrangeInstaller.exe
O4 - HKUS\S-1-5-21-1042879119-3641776606-230875828-1000\..\Run: [OrangeInside] . (.Orange - Executable Orange Inside.) -- C:\Users\Vivie\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe
O4 - HKUS\S-1-5-21-1042879119-3641776606-230875828-1000\..\Run: [Browser Infrastructure Helper] . (.Smartbar - Smartbar.) -- C:\Users\Vivie\AppData\Local\Smartbar\Application\Smartbar.exe =>Hijacker.SmartBar
~ Application: Scanned in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - GS\TaskBar: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\TaskBar: Media Center.lnk . (.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe
O4 - GS\TaskBar: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O4 - GS\TaskBar: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe
O4 - GS\TaskBar: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe
O4 - GS\Programs: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\QuickLaunch: Babylon.lnk . (.Babylon Ltd. - Babylon Information Tool.) -- C:\Program Files (x86)\Babylon\Babylon-Pro\Babylon.exe =>Toolbar.Babylon
O4 - GS\QuickLaunch: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O4 - GS\QuickLaunch: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\QuickLaunch: Meteo en France.lnk - Cl� orpheline
O4 - GS\Accessories: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\Accessories: Private Character Editor.lnk . (.Microsoft Corporation - �diteur de caract�res priv�s.) -- C:\Windows\system32\eudcedit.exe
O4 - GS\SendTo: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) -- C:\Windows\system32\WFS.exe
O4 - GS\SendTo: Skype.lnk . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O4 - Global Startup: C:\Users\Vivie\Desktop\Aide � la configuration des comptes Internet.url . (.Skype Technologies S.A. - Skype.) -- C:\Users\Vivie\Desktop\Aide � la configuration des comptes Internet.url
O4 - GS\Desktop: CCleaner.lnk . (.Piriform Ltd - CCleaner.) -- C:\Program Files (x86)\CCleaner\CCleaner.exe =>Piriform Ltd
O4 - GS\Desktop: Documents.lnk . (...) -- C:\Users\Vivie\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-ms
O4 - GS\Desktop: Google�Earth.lnk . (.Google - Google Earth.) -- C:\Program Files (x86)\Google\Google Earth\client\googleearth.exe
O4 - GS\Desktop: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - GS\Desktop: Media Center.lnk . (.Microsoft Corporation - Windows Media Center.) -- C:\Windows\ehome\ehshell.exe
O4 - Global Startup: C:\Users\Vivie\Desktop\messagerie.url . (.Microsoft Corporation - Windows Media Center.) -- C:\Users\Vivie\Desktop\messagerie.url
O4 - GS\Desktop: Microsoft Excel 2010.lnk . (...) -- C:\Windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\xlicons.exe
O4 - GS\Desktop: Microsoft Word 2010.lnk . (...) -- C:\Windows\Installer\{90140000-003D-0000-0000-0000000FF1CE}\wordicon.exe
O4 - GS\Desktop: Search The Web.lnk - Cl� orpheline =>Adware.IMBooster
~ Global Startup: Scanned in 00mn 00s



---\\ Boutons situ�s sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Envoyer � OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} -- C:\Program Files (x86)\MICROS~2\Office14\ONBttnIE.dll (.not file.)
O9 - Extra button: Notes &li�es OneNote [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} -- C:\Program Files (x86)\MICROS~2\Office14\ONBTTN~1.dll (.not file.)
~ IE Extra Buttons: Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{81DA3199-3217-4BD2-AF7C-CA40B347B06A}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{81DA3199-3217-4BD2-AF7C-CA40B347B06A}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS2\Services\Tcpip\..\{81DA3199-3217-4BD2-AF7C-CA40B347B06A}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
~ Domain: Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --
O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll
~ Protocole Additionnel: Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-cl�s Winlogon Notify (autorun) (O20)
O20 - AppInit_DLLs: . (.Discordia, LTD - Data Manager.) - C:\Program Files (x86)\WIA6EB~1\Datamngr\x64\datamngr.dll =>PUP.Datamngr
~ AppInit DLL: Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non d�sactiv�s (O23)
O23 - Service: PC Tools Startup and Shutdown Monitor se (PCToolsSSDMonitorSvc) . (.PC Tools - StartMan Application.) - C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe
O23 - Service: Software Update Service (supdate) (supdate) . (.Boxore OU. - Programme d'installation de Software.) - C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe =>Adware.Boxore
O23 - Service: WajamUpdater (WajamUpdater) . (.Wajam - Auto-updater.) - C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe =>Toolbar.Wajam
~ Services: 18 Legitimates Filtered in 00mn 08s



---\\ T�ches planifi�es en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GinyasBrowserCompanions Chrome Watcher.job [1002] =>PUP.Blabbers
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GinyasBrowserCompanions FireFox Watcher.job [1002] =>PUP.Blabbers
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GinyasBrowserCompanions Stats Report.job [1050] =>PUP.Blabbers
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GinyasBrowserCompanions Update Checker.job [934] =>PUP.Blabbers
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\SoftwareUpdateTaskMachineCore.job [1080]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\SoftwareUpdateTaskMachineUA.job [1084]
[MD5.193A62BC5A4E580E3547BC7270CA74C9] [APT] [GinyasBrowserCompanions Chrome Watcher] (.Blabbers Communications Ltd.) -- C:\ProgramData\GinyasBrowserCompanions\tbhcns.exe [741888] =>PUP.Blabbers
[MD5.193A62BC5A4E580E3547BC7270CA74C9] [APT] [GinyasBrowserCompanions FireFox Watcher] (.Blabbers Communications Ltd.) -- C:\ProgramData\GinyasBrowserCompanions\tbhcns.exe [741888] =>PUP.Blabbers
[MD5.193A62BC5A4E580E3547BC7270CA74C9] [APT] [GinyasBrowserCompanions Stats Report] (.Blabbers Communications Ltd.) -- C:\ProgramData\GinyasBrowserCompanions\tbhcns.exe [741888] =>PUP.Blabbers
[MD5.00000000000000000000000000000000] [APT] [RMSchedule] (...) -- C:\Program Files (x86)\Registry Mechanic\RegMech.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [RMSmartUpdate] (...) -- C:\Program Files (x86)\Registry Mechanic\update.exe (.not file.) [0]
[MD5.2BCD5FE578F82D0C4622EBD0EAFE001C] [APT] [Scheduled Update for Ask Toolbar] (...) -- C:\Program Files (x86)\Ask.com\UpdateTask.exe [137864] =>Toolbar.Ask
[MD5.251A1AED2D4A26A47C0A4A3058AAE4A8] [APT] [SoftwareUpdateTaskMachineCore] (.Boxore OU..) -- C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe [139576] =>Adware.Boxore
[MD5.251A1AED2D4A26A47C0A4A3058AAE4A8] [APT] [SoftwareUpdateTaskMachineUA] (.Boxore OU..) -- C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe [139576] =>Adware.Boxore
[MD5.96261D590C12F5D47DA973AE882C58F0] [APT] [Updater4479.exe] (.FileProperties_CompanyName.) -- C:\Users\Vivie\AppData\Local\Updater4479\Updater4479.exe [206336] =>PUP.CrossRider
[MD5.00000000000000000000000000000000] [APT] [{0E6EF0EA-A34B-490C-A4AC-DB834787A632}] (...) -- C:\Users\Vivie\AppData\Local\Babylon\Setup\Setup.exe (.not file.) [0] =>Toolbar.Babylon
[MD5.00000000000000000000000000000000] [APT] [{22B8ED6E-F722-4C65-B265-8B2F9BFFFF03}] (...) -- H:\EAutorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{4891A602-9F6A-4780-8F2A-A595CED2EE57}] (...) -- H:\Livebox\Setup\Livebox.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{512DDBEF-48B9-4824-A390-C6A9B5161D25}] (...) -- H:\noautorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{5E5AB197-D7BA-40CC-BC4C-7637D7810FD3}] (...) -- H:\noautorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{5EDB34FA-E878-4067-9555-671A61483B3B}] (...) -- C:\Users\Vivie\AppData\Local\Babylon\Setup\Setup.exe (.not file.) [0] =>Toolbar.Babylon
[MD5.00000000000000000000000000000000] [APT] [{60A9200A-691E-4EF1-8E43-B08BFCF591E6}] (...) -- H:\noautorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{766F96F5-4A28-4759-9459-29C97848F925}] (...) -- H:\noautorun.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{76AF1677-8CC4-4376-B10A-F4EA4C157122}] (...) -- H:\TopGun_Install.exe (.not file.) [0]
[MD5.D41D8CD98F00B204E9800998ECF8427E] [APT] [{82B136CE-F21F-4813-8E14-1A501EAE6E3D}] (...) -- C:\Users\Vivie\Downloads\FacebookVideoCallSetup_v1.2.203.0 (1).exe [0]
[MD5.00000000000000000000000000000000] [APT] [{8940135D-8BC9-488F-9916-2156220110A1}] (...) -- H:\Eurodocs\Fran�ais\Acrobat\FRANCAIS.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [{8B39387A-C124-4244-8F81-C9B4BCC734DD}] (...) -- C:\Users\Vivie\AppData\Local\Babylon\Setup\Setup.exe (.not file.) [0] =>Toolbar.Babylon
[MD5.00000000000000000000000000000000] [APT] [{A5E5696E-4049-4B43-B794-86C4E6D46C56}] (...) -- C:\Users\Vivie\AppData\Local\Babylon\Setup\Setup.exe (.not file.) [0] =>Toolbar.Babylon
[MD5.D41D8CD98F00B204E9800998ECF8427E] [APT] [{AA8BA690-4CDA-415B-875D-2FAE508B2A6B}] (...) -- C:\Users\Vivie\Downloads\FacebookVideoCallSetup_v1.2.203.0 (1).exe [0]
[MD5.00000000000000000000000000000000] [APT] [{C89D1B0F-8787-4B7E-BDD4-EB566A567282}] (...) -- H:\noautorun.exe (.not file.) [0]
~ Scheduled Task: 51 Legitimates Filtered in 00mn 06s



---\\ Logiciels install�s (O42)
O42 - Logiciel: Ask Toolbar - (.Ask.com.) [HKLM][64Bits] -- {86D4B82A-ABED-442A-BE86-96357B70F4FE} =>Toolbar.Ask
O42 - Logiciel: Babylon - (.Babylon.) [HKLM][64Bits] -- Babylon =>Toolbar.Babylon
O42 - Logiciel: Babylon toolbar - (.BabylonToolbar.) [HKLM][64Bits] -- BabylonToolbar =>Toolbar.Babylon
O42 - Logiciel: Boxore Client - (.Boxore OU.) [HKLM][64Bits] -- {0E25BB07-62EB-476F-87FC-6AF426AB059E} =>Adware.Boxore
O42 - Logiciel: BrowserCompanion - (...) [HKLM][64Bits] -- BrowserCompanion =>PUP.Blabbers
O42 - Logiciel: Conduit Engine - (.Conduit Ltd..) [HKLM][64Bits] -- conduitEngine =>Toolbar.Conduit
O42 - Logiciel: Elf 1.12 Toolbar - (.Elf 1.12.) [HKLM][64Bits] -- Elf_1.12 Toolbar
O42 - Logiciel: Giant Savings - (.215 Apps.) [HKLM][64Bits] -- Giant Savings =>PUP.SpecialSavings
O42 - Logiciel: GinyasBrowserCompanions - (.Ginyas.) [HKLM][64Bits] -- GinyasBrowserCompanions =>PUP.Blabbers
O42 - Logiciel: IMinent Toolbar - (.IMinent.) [HKLM][64Bits] -- {A76AA284-E52D-47E6-9E4F-B85DBF8E35C3} =>Adware.IMBooster
O42 - Logiciel: Iadah Toolbar - (.DevNet.) [HKCU][64Bits] -- IadahToolbar
O42 - Logiciel: SelectionLinks - (.SelectionLinks.) [HKLM][64Bits] -- sl-apl =>Hijacker.SelectionLinks
O42 - Logiciel: Wajam - (.Wajam.) [HKLM][64Bits] -- Wajam =>Toolbar.Wajam
~ Logic: 129 Legitimates Filtered in 00mn 01s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\APN]
[HKCU\Software\AppDataLow\Software\AskToolbar]
[HKCU\Software\AppDataLow\Software\Crossrider] =>PUP.CrossRider
[HKCU\Software\AppDataLow\Software\Elf_1.12]
[HKCU\Software\AppDataLow\Software\Giant Savings] =>Adware.VidSaver
[HKCU\Software\AppDataLow\Software\PriceGong] =>Adware.PriceGong
[HKCU\Software\AppDataLow\Software\conduitEngine] =>Toolbar.Conduit
[HKCU\Software\AppDataLow\Toolbar]
[HKCU\Software\Ask.com]
[HKCU\Software\BabylonToolbar] =>Toolbar.Babylon
[HKCU\Software\Babylon] =>Toolbar.Babylon
[HKCU\Software\Blabbers] =>PUP.Blabbers
[HKCU\Software\BrowserCompanion] =>PUP.Blabbers
[HKCU\Software\Cr_Installer] =>PUP.CrossRider
[HKCU\Software\DataMngr] =>PUP.Datamngr
[HKCU\Software\DataMngr_Toolbar] =>PUP.Datamngr
[HKCU\Software\Digital-Integration]
[HKCU\Software\GamesBar] =>Adware.GamesBar
[HKCU\Software\Iminent] =>Adware.IMBooster
[HKCU\Software\InstallCore] =>PUP.InstallCore
[HKCU\Software\InstalledBrowserExtensions] =>Adware.VidSaver
[HKCU\Software\PCTools]
[HKCU\Software\SmartbarBackup] =>Hijacker.SmartBar
[HKCU\Software\SmartbarLog] =>Hijacker.SmartBar
[HKCU\Software\Smartbar] =>Hijacker.SmartBar
[HKCU\Software\Softonic]
[HKCU\Software\Wajam] =>Toolbar.Wajam
[HKLM\Software\Wow6432Node\APN]
[HKLM\Software\Wow6432Node\AskToolbar]
[HKLM\Software\Wow6432Node\Bandoo] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Boxore] =>Adware.Boxore
[HKLM\Software\Wow6432Node\BrowserCompanions] =>PUP.Blabbers
[HKLM\Software\Wow6432Node\DataMngr] =>PUP.Datamngr
[HKLM\Software\Wow6432Node\Elf_1.12]
[HKLM\Software\Wow6432Node\GamesBarSetup] =>Adware.GamesBar
[HKLM\Software\Wow6432Node\Iminent] =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Object]
[HKLM\Software\Wow6432Node\PCTools]
[HKLM\Software\Wow6432Node\Productivity_2.2]
[HKLM\Software\Wow6432Node\SearchquMediabarTb] =>PUP.Datamngr
~ Key Software: 270 Legitimates Filtered in 00mn 01s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 24/02/2013 - 17:18:23 - [4,396] ----D C:\Program Files (x86)\Ask.com
O43 - CFD: 17/04/2012 - 13:49:58 - [14,048] ----D C:\Program Files (x86)\Babylon =>Toolbar.Babylon
O43 - CFD: 17/04/2012 - 13:49:25 - [3,799] ----D C:\Program Files (x86)\BabylonToolbar =>Toolbar.Babylon
O43 - CFD: 11/06/2013 - 19:55:47 - [1,278] ----D C:\Program Files (x86)\Boxore =>Adware.Boxore
O43 - CFD: 14/11/2012 - 23:25:05 - [1,974] ----D C:\Program Files (x86)\BrowserCompanion =>PUP.Blabbers
O43 - CFD: 21/01/2011 - 14:46:47 - [4,209] ----D C:\Program Files (x86)\ConduitEngine =>Toolbar.Conduit
O43 - CFD: 21/01/2011 - 14:46:45 - [4,287] ----D C:\Program Files (x86)\Elf_1.12
O43 - CFD: 06/01/2013 - 19:54:15 - [0,296] ----D C:\Program Files (x86)\File Scout
O43 - CFD: 22/08/2010 - 13:56:24 - [1,933] ----D C:\Program Files (x86)\GamesBar =>Adware.GamesBar
O43 - CFD: 30/11/2012 - 16:25:54 - [2,975] ----D C:\Program Files (x86)\Giant Savings =>Adware.VidSaver
O43 - CFD: 10/03/2013 - 17:16:31 - [0,658] ----D C:\Program Files (x86)\GinyasBrowserCompanions =>PUP.Blabbers
O43 - CFD: 10/11/2011 - 21:50:05 - [3,362] ----D C:\Program Files (x86)\IMinent Toolbar =>Adware.IMBooster
O43 - CFD: 22/11/2012 - 22:48:25 - [0,480] ----D C:\Program Files (x86)\OApps
O43 - CFD: 25/07/2011 - 06:45:47 - [0,403] ----D C:\Program Files (x86)\OfferBox =>PUP.OfferBox
O43 - CFD: 24/10/2012 - 17:03:46 - [0,525] ----D C:\Program Files (x86)\Wajam =>Toolbar.Wajam
O43 - CFD: 16/06/2013 - 13:53:55 - [93,761] ----D C:\ProgramData\Babylon =>Toolbar.Babylon
O43 - CFD: 15/05/2011 - 22:22:25 - [0,159] ----D C:\ProgramData\GamesBar =>Adware.GamesBar
O43 - CFD: 16/06/2013 - 14:05:00 - [0,855] ----D C:\ProgramData\GinyasBrowserCompanions =>PUP.Blabbers
O43 - CFD: 06/01/2013 - 19:54:15 - [0,001] ----D C:\ProgramData\IBUpdaterService =>Adware.InstallBrain
O43 - CFD: 26/04/2012 - 21:44:59 - [1,782] ----D C:\Users\Vivie\AppData\Roaming\Babylon =>Toolbar.Babylon
O43 - CFD: 16/06/2013 - 14:02:36 - [0,700] ----D C:\Users\Vivie\AppData\Roaming\BrowserCompanion =>PUP.Blabbers
O43 - CFD: 01/06/2011 - 10:06:09 - [0,268] ----D C:\Users\Vivie\AppData\Roaming\OfferBox =>PUP.OfferBox
O43 - CFD: 24/02/2013 - 20:06:29 - [0] ----D C:\Users\Vivie\AppData\Roaming\PerformerSoft
O43 - CFD: 23/09/2012 - 23:01:08 - [0,158] ----D C:\Users\Vivie\AppData\Local\APN
O43 - CFD: 30/11/2012 - 16:25:43 - [16,680] ----D C:\Users\Vivie\AppData\Local\Babylon =>Toolbar.Babylon
O43 - CFD: 25/01/2013 - 20:06:21 - [0] ----D C:\Users\Vivie\AppData\Local\Giant Savings =>Adware.VidSaver
O43 - CFD: 04/04/2012 - 22:27:07 - [0,012] ----D C:\Users\Vivie\AppData\Local\Linkury
O43 - CFD: 28/05/2013 - 18:11:43 - [18,877] ----D C:\Users\Vivie\AppData\Local\Smartbar =>Hijacker.SmartBar
O43 - CFD: 25/01/2013 - 20:06:22 - [0,197] ----D C:\Users\Vivie\AppData\Local\Updater4479 =>PUP.CrossRider
O43 - CFD: 24/10/2012 - 17:03:33 - [0,054] ----D C:\Users\Vivie\AppData\Local\Wajam =>Toolbar.Wajam
O43 - CFD: 20/08/2011 - 10:25:19 - [0,000] R---D C:\Users\Vivie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jeux - Raccourci
O43 - CFD: 22/10/2010 - 18:22:52 - [0,000] ----D C:\Users\Vivie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Top Gun
O43 - CFD: 24/10/2012 - 17:03:42 - [0,001] ----D C:\Users\Vivie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam =>Toolbar.Wajam
~ 649 Dossiers CLSID vides (CLSID Empty Folders)
~ Program Folder: 970 Legitimates Filtered in 00mn 11s



---\\ Derniers fichiers modifi�s ou cr�es sous Windows et System32 (O44)
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 14/06/2013 - 18:50:21 ---A- . (...) -- C:\END [0]
~ Files: 68 Legitimates Filtered in 00mn 30s



---\\ Derniers fichiers cr��s dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.2F09E2B9A0DEEE9E58248F444D54B20D] - 16/06/2013 - 13:05:01 ---A- - C:\Windows\Prefetch\TBHCNS.EXE-BDCDC274.pf
~ Prefetcher: 72 Legitimates Filtered in 00mn 00s



---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 16 Legitimates Filtered in 00mn 00s



---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
~ MWPE Keys: 3 Legitimates Filtered in 00mn 00s



---\\ Liste des Drivers Syst�me (O58)
O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088]
O58 - SDL:[MD5.1BF91F352D746AD7469FA71783B5FAE8] - 28/11/2006 - 20:46:22 ----- . (.Printing Communications Assoc., Inc. (PCAUS - PCAUSA NDIS 5.0 MPR Protocol Driver.) -- C:\Windows\SysWOW64\drivers\PCAMp50.sys [28224]
~ Drivers: Scanned in 00mn 00s



---\\ Derniers fichiers modifi�s ou cr�es (Utilisateur) (O61)
O61 - LFC: 14/06/2013 - 12:52:26 ---A- C:\Users\Vivie\AppData\Local\Messenger_Plus_Live\CacheIcons\search_{4327FABE-3C22-4689-8DBF-D226CF777FE9}.ico [1150]
O61 - LFC: 15/06/2013 - 11:54:33 ---A- C:\Users\Vivie\AppData\Local\Smartbar\Application\Smartbar.exe.config [13247] =>Hijacker.SmartBar
O61 - LFC: 15/06/2013 - 11:54:33 ---A- C:\Users\Vivie\AppData\Local\Smartbar\Smartbar.exe_StrongName_vuedtbpoockmp1sq45awfxuouevabx0i\1.6.1.949\user.config [600] =>Hijacker.SmartBar
O61 - LFC: 15/06/2013 - 12:13:45 ---A- C:\Users\Vivie\Downloads\avast_free_antivirus_setup.exe [117478104]
O61 - LFC: 15/06/2013 - 13:38:45 ---A- C:\Users\Vivie\AppData\Roaming\Babylon\ocr_cache [190636] =>Toolbar.Babylon
O61 - LFC: 16/06/2013 - 11:26:19 ---A- C:\Users\Vivie\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists [270879]
O61 - LFC: 16/06/2013 - 11:53:51 ---A- C:\Users\Vivie\AppData\Local\Babylon\BabAll.bak [10640] =>Toolbar.Babylon
O61 - LFC: 16/06/2013 - 11:53:53 ---A- C:\Users\Vivie\AppData\Roaming\Babylon\log_file.txt [152398] =>Toolbar.Babylon
O61 - LFC: 16/06/2013 - 11:53:54 ---A- C:\Users\Vivie\AppData\Roaming\Babylon\FLStat.dat [4] =>Toolbar.Babylon
O61 - LFC: 16/06/2013 - 12:45:29 ---A- C:\Users\Vivie\AppData\Local\Google\Chrome\User Data\Local State [45684]
~ 279 Fichiers temporaires (Temporary files)
~ Files: 655 Legitimates Filtered in 01mn 06s



---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
~ ADS: Scanned in 00mn 00s



---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Not Key.)
~ FASS Keys: 19 Legitimates Filtered in 00mn 00s



---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (.Not Key.)
~ Keys: Scanned in 00mn 00s



---\\ Search Browser Infection (O69)
O69 - SBI: C:\Users\Vivie\AppData\Roaming\Mozilla\Firefox\Profiles\y6jc2wt2.default\searchplugins\askcom.xml
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330..clientLogIsEnabled", false);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330..clientLogServiceUrl", "http://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330..uninstallLogServiceUrl", "http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.AboutPrivacyUrl", "http://www.conduit.com/privacy/Default.aspx");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.AppTrackingLastCheckTime", "Wed Aug 31 2011 15:48:47 GMT+0200");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.BrowserCompStateIsOpen_129454256085075876", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.BrowserCompStateIsOpen_129454256085544628", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.BrowserCompStateIsOpen_129723127732942414", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.BrowserCompStateIsOpen_129785985710505237", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.BrowserCompStateIsOpen_1367165287000", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.CTID", "CT2905330");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.CurrentServerDate", "8-5-2013");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.DSChangedManually", false);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.DSProtectChoice", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.DSProtectCount", 1);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.DialogsAlignMode", "LTR");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.DialogsGetterLastCheckTime", "Wed May 08 2013 21:32:04 GMT+0200");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.DownloadReferralCookieData", "");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.FirstServerDate", "20-7-2011");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.FirstTime", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.FirstTimeFF3", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.FixPageNotFoundErrors", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.GroupingServerCheckInterval", 1440);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.GroupingServiceUrl", "http://grouping.services.conduit.com/");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.HPProtectChoice", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.HPProtectCount", 1);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.HasUserGlobalKeys", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.HomePageProtectorEnabled", false);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.HomepageBeforeUnload", "http://www.plusnetwork.com");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.Initialize", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.InitializeCommonPrefs", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.InstallationAndCookieDataSentCount", 3);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.InstallationId", "CT2905330_Messenger_Plus_FR.exe");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.InstallationType", "ConduitIntegration");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.InstalledDate", "Wed Jul 20 2011 20:05:55 GMT+0200");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.InvalidateCache", false);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.IsAlertDBUpdated", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.IsGrouping", false);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.IsInitSetupIni", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.IsMulticommunity", false);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.IsOpenThankYouPage", false);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.IsOpenUninstallPage", false);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.IsProtectorsInit", true); =>PUP.Mocaflix
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.LanguagePackLastCheckTime", "Wed May 08 2013 21:32:04 GMT+0200");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.LanguagePackReloadIntervalMM", 1440);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.LanguagePackServiceUrl", "http://translation.users.conduit.com/Translation.ashx");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.LastLogin_3.5.1.1", "Wed Aug 17 2011 15:05:29 GMT+0200");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.LastLogin_3.6.0.10", "Sun Oct 02 2011 23:30:42 GMT+0200");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.LastLogin_3.7.0.6", "Wed May 08 2013 21:32:03 GMT+0200");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.LatestVersion", "3.18.0.7");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.Locale", "fr-fr");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.MCDetectTooltipHeight", "83");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.MCDetectTooltipUrl", "http://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.MCDetectTooltipWidth", "295");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.MyStuffEnabledAtInstallation", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.OriginalFirstVersion", "3.5.1.1");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.RadioIsPodcast", false);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.RadioLastCheckTime", "Wed May 08 2013 21:32:18 GMT+0200");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.RadioLastUpdateIPServer", "3");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.RadioLastUpdateServer", "129430407431930000");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.RadioMediaID", "21795763");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.RadioMediaType", "Media Player");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.RadioMenuSelectedID", "EBRadioMenu_CT290533021795763");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.RadioShrinked", "shrinked");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.RadioShrinkedFromSetup", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.RadioStationName", "France%20Inter");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.RadioStationURL", "http://radiotime.com/WebTuner.aspx?StationId=24875&");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.SavedHomepage", "chrome://branding/locale/browserconfig.properties");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.SearchEngineBeforeUnload", "Messenger Plus FR Customized Web Search");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.SearchFromAddressBarIsInit", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2905330&SearchSource=2&q=");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.SearchInNewTabEnabled", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.SearchInNewTabIntervalMM", 1440);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.SearchInNewTabLastCheckTime", "Wed May 08 2013 21:32:02 GMT+0200");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.SearchInNewTabServiceUrl", "http://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID&UM=UM_ID");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.SearchInNewTabUsageUrl", "http://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.SearchInNewTabUserEnabled", false);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.SearchProtectorEnabled", false); =>Toolbar.Conduit
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.SearchProtectorToolbarDisabled", false); =>Toolbar.Conduit
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.ServiceMapLastCheckTime", "Wed May 08 2013 21:32:03 GMT+0200");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.SettingsLastCheckTime", "Wed May 08 2013 21:32:02 GMT+0200");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.SettingsLastUpdate", "1368000768");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.ThirdPartyComponentsInterval", 504);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.ThirdPartyComponentsLastCheck", "Wed May 08 2013 21:32:01 GMT+0200");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.ThirdPartyComponentsLastUpdate", "1331805999");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.ToolbarShrinkedFromSetup", false);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.TrusteLinkUrl", "http://trust.conduit.com/CT2905330");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolb[...]
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.UserID", "UN09424321998858132");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.ValidationData_Toolbar", 2);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.alertChannelId", "1297255");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.ct2905330ads1", "25374225323261647325323225334125354225374225323261696425323225334125323231303[...]
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.ct2905330current_term", "");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.ct2905330sdate", "38");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.d_ginyas1", "30");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.d_ginyas1_d", "");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.d_ginyas1_t", "31333137353932313131333235");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.for_aoi", "31333133393630383331");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.for_ccid", "4E6575696C6C792D6C652D6D616C6865726265");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.for_cdtr2", "31333133393630383331");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.for_cdtr5", "31333133393630383331");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.for_cdtr6", "31333135363930313135");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.for_cid", "4652");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.for_ip", "37382E3232322E3138302E313930");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.for_lcut", "31333638303431353533");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.for_pid", "31303132");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.for_rid", "3939");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.for_zoneid", "3130303836");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.ginyasstest", "676F6F64");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.http://cmg1_conduit-widgets_com/pitsi.state", "4F50454E");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.http://rv_ginyas_com/app/conduit.bbrs_affid", "6D7367706C75735F636F6E64756974");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.http://rv_ginyas_com/app/conduit.bbrs_bguid", "6D7367706C75735F636F6E647569742D373834444243443[...]
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.http://rv_ginyas_com/app/conduit.bbrs_lba", "3232353631333239");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.http://rv_ginyas_com/app/conduit.bbrs_lba1", "323031322D31312D3233");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.http://www_blabbers_com/app/conduit.bbrs_affid", "46525F4E6577"); =>PUP.Blabbers
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.http://www_blabbers_com/app/conduit.bbrs_bguid", "46525F4E65772D32413836423841382D364345422D34[...] =>PUP.Blabbers
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.http://www_blabbers_com/app/conduit.bbrs_lba", "3231393636363935"); =>PUP.Blabbers
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.http://www_blabbers_com/app/conduit.bbrs_lba1", "323031312D31302D37"); =>PUP.Blabbers
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.http://www_blabbers_com/app/conduit.bbrs_updatesliststr1", "70726F6D6F766163616E6365732E636F6D[...] =>PUP.Blabbers
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.http://www_blabbers_com/app/conduit.bbrs_updatesliststr1_exp", "3231393539383638"); =>PUP.Blabbers
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.mam_gk_appsdata",
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.mam_gk_currentversion", "312E342E342E36");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.mam_gk_settings1.4.4.6", "7B22537461747573223A22737563636565646564222C2244617461223A7B22696E74[...]
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.youtube_user_first_login_date", "30382F32312F32303131");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.youtube_user_survey_visit", "4E4F545F56495349544544");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.backendstorage.youtubelang", "4652");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;se[...]
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.globalFirstTimeInfoLastCheckTime", "Wed May 08 2013 21:32:05 GMT+0200");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.homepageProtectorEnableByLogin", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.initDone", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.isAppTrackingManagerOn", false);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.isFirstRadioInstallation", false);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.myStuffEnabled", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.myStuffPublihserMinWidth", 400);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.myStuffSearchUrl", "http://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&oct[...]
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.myStuffServiceIntervalMM", 1440);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.myStuffServiceUrl", "http://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE[...]
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.oldAppsList", "129391541264056451,129391541264525205,111,129391541264681456,129785985710505237,12939154126483[...]
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.revertSettingsEnabled", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.searchProtectorDialogDelayInSec", 10); =>Toolbar.Conduit
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.searchProtectorEnableByLogin", true); =>Toolbar.Conduit
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.testingCtid", "");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.toolbarAppMetaDataLastCheckTime", "Wed May 08 2013 21:32:04 GMT+0200");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.toolbarContextMenuLastCheckTime", "Wed May 08 2013 21:32:04 GMT+0200");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CT2905330.usagesFlag", 2);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ConduitHomepagesList", "http://search.conduit.com/?ctid=CT2905330&SearchSource=13");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ConduitSearchList", "Messenger Plus FR Customized Web Search");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://Settings.toolbar.search.conduit.com/root/CT2905330/CT2905330", "\"0e00ea9237622516e7bad256[...]
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://alerts.conduit-services.com/root/1297255/1292926/FR", "\"0\"");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://appsmetadata.toolbar.conduit-services.com/?ctid=CT2905330", "\"1367217760\"");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=fr-fr", "wmxT3la3WNnJ27Qo[...]
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=fr-fr&ctid=CT2905330", "w[...]
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=fr-fr", "baZTA2tXV7T4AAbft[...]
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=fr-fr&ctid=CT2905330", "ba[...]
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=fr-fr", "jKoBOjdPF2fwBUlN[...]
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=fr-fr&ctid=CT2905330", "j[...]
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=fr-fr", "TG4z5eYloz+CZo4B4Z1[...]
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=fr-fr&ctid=CT2905330", "TG4z[...]
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"0ea11bd291bce1:0\"");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.5.1.1", "\"80161a5ed5ccc1:0\"");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.0.10", "\"0ee90707f77cc1:0\"")[...]
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.7.0.6", "\"0343677cfb1cd1:0\"");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://servicemap.conduit-services.com/Toolbar/?ownerId=CT2905330", "\"6341c50648fd59897cde84cfa3[...]
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://settings.toolbar.conduit-services.com/?ctid=CT2905330&octid=CT2905330", "\"1314694064\"");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://settings.toolbar.search.conduit.com/root/CT2905330/CT2905330", "\"1311168859\"");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://storage.conduit.com/BankImages/RadioSkins/Funky/maxi.gif", "\"80feeded4e19c81:0\"");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://storage.conduit.com/BankImages/RadioSkins/Funky/minimize.gif", "\"80feeded4e19c81:0\"");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://storage.conduit.com/BankImages/RadioSkins/Funky/play.gif", "\"09586ee4e19c81:0\"");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://storage.conduit.com/BankImages/RadioSkins/Funky/play_mini.gif", "\"09586ee4e19c81:0\"");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://storage.conduit.com/BankImages/RadioSkins/Funky/stop.gif", "\"09586ee4e19c81:0\"");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://storage.conduit.com/BankImages/RadioSkins/Funky/stopped.GIF", "\"09586ee4e19c81:0\"");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://storage.conduit.com/BankImages/RadioSkins/Funky/vol.gif", "\"09586ee4e19c81:0\"");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ETag.http://translation.toolbar.conduit-services.com/?locale=fr-fr", "\"7b7913f4799cfe242f051e0e5640da[...]
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Vivie\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\y6jc2wt2.def[...]
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.7.0.6");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ToolbarsList", "CT2905330");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ToolbarsList2", "CT2905330");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.ToolbarsList4", "CT2905330");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.globalUserId", "ce79d123-b849-49c3-b51a-f85f5a9c289d");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2905330");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Wed May 08 2013 21:32:05 GMT+0200");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Wed May 08 2013 21:32:10 GMT+0200");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.notifications.clientsServerUrl", "http://alert.client.conduit.com");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.notifications.locale", "en");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Wed May 08 2013 21:32:03 GMT+0200");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.notifications.servicesServerUrl", "http://alert.services.conduit.com");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.notifications.showTrayIcon", false);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("CommunityToolbar.notifications.userId", "36c56399-7e9d-4510-ac4e-3086964f0628");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("browser.babylon.HPOnNewTab", "search.babylon.com"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("browser.search.defaultthis.engineName", "Messenger Plus FR Customized Web Search");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("browser.search.defaulturl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2905330&SearchSource=3&q={searchTerms}");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.admin", false); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.aflt", "babsst"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.babExt", ""); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.babTrack", "affID=10588&tl=gkn110568"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.bbDpng", 23); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.cntry", "FR"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.dfltLng", "en"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.dfltSrch", true); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.excTlbr", false); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.firstRun", false); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.hdrMd5", "CCD35551A5486B6FFBD490E6B1674C33"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.hmpg", true); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.id", "bcbfb8670000000000000019db201b32"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.instlDay", "15674"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.instlRef", "sst"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.keyWordUrl", "http://search.babylon.com/?affID=110824&tl=gkn110568&tt=4812_1&babsrc=KW_ss&mnt[...] =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.lastActv", "7"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.lastDP", 23); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.8.3.815:25:42"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "6.0"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.newTab", false); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.newTabUrl", "http://search.babylon.com/?affID=110824&tl=gkn110568&tt=4812_1&babsrc=NT_ss&mntr[...] =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.noFFXTlbr", false); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.propectorlck", 92239872); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.prtnrId", "babylon"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.ptch_0717", true); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.sg", "tzb"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.smplGrp", "tzb"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.srcExt", "def"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.tlbrId", "irhnew"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "http://search.babylon.com/?babsrc=TB_def&mntrId=bcbfb8670000000000000019db201b[...] =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.vrsn", "1.8.3.8"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.vrsnTs", "1.8.3.815:25:42"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar.vrsni", "1.8.3.8"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.aflt", "babclient"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.babExt", ""); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.babTrack", "affID=10588&tl=gkn110568"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.hardId", "bcbfb8670000000000000019db201b32"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.id", "bcbfb8670000000000000019db201b32"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.instlDay", "15447"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.instlRef", "std"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.newTab", false); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.smplGrp", "none"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.srcExt", "def"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.tlbrId", "base"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.8.3.815:25:42"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17"); =>Toolbar.Babylon
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.InstallDir", "C:\\Program Files (x86)\\Ask.com\\");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.apn_dbr", "cr_21.0.1180.89");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.autofill-text-highlight-enabled", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.cbid", "^ABW");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.config-updated", false);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.cr-o", "APN10398");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.crumb", "2012.09.23+13.59.40-toolbar019iad-FR-Q2FlbixGcmFuY2U%3D");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.default-channel-url-mask", "http://avira-int.ask.com/web?q={query}&qsrc={qsrc}&o={o}&l={l}&gct=bar&loc[...]
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.domain", "avira-int.ask.com");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.domainName", "avira-int.ask.com");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.dtid", "^YYYYYY^YY^FR");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.ff-original-keyword-url", "http://r.orange.fr/r?ref=O_OI_hook_openSearchFF&url=http%3A//rws.search.ke.[...]
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.fresh-install", false);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.guid", "2b8cdd28-3c9c-4307-b378-20c42628f735");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.hpr", "YES");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.http-header-whitelist-hosts", "[\"static-dev.en.dev.ask.com\", \"ask.com\", \"www.facebook.com\", \"ww[...]
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.if", "first");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.keyword-toggled-in-session", false);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.l", "dis");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.last-config-req", "1368041511330");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.locale", "fr_FR");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.localePref", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.location", "Caen,France");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.notification-shown", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.nthp", "YES");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.nthp_prev", "1");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.o", "APN10398");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.overlay-reloaded-using-restart", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.qsrc", "2871");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.r", "20");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.sa", "YES");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.saguid", "7FD78D9B-A0A4-479D-9F69-A5FD8174EFD6");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.search-suggestions-enabled", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.silent-upgrade", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.silent-upgrade-from-pre-newtabs-build", false);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.socialmini-native-on", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.themeid", "");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.timeinstalled", "23/09/2012 23:01:25");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.to", "");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.v", "3.15.18.100015");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.asktb.version", "5.15.18.37268");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossrider.bic", "13e85a1100ee420d9b197fe05deb2b6f"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.InstallationThankYouPage", true); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.InstallationTime", 1354285526); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.searchUserConifrmation", false); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.setHomepage", false); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.setNewTab", false); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.setSearch", false); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.active", true); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.addressbar", ""); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.backgroundjs", "\n\n//\n"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.backgroundver", 42); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.can_run_bg_code", true); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.certdomaininstaller", ""); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.changeprevious", false); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie.InstallationTime.value", "1354285526"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_aoi.value", "1354285526"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_arbitrary_code.expiration", "Wed May 08 2013 23:12:23 GMT+0200"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_arbitrary_code.value", "%22appAPI.db.get%28%5C%22_GPL_ib_disclosure%5C%22[...] =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_blocklist.value", "%22nonexistantdomain.com%22"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_country_code.expiration", "Wed May 15 2013 21:32:22 GMT+0200"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_country_code.value", "%22FR%22"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_crr.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_crr.value", "1368047216"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_currenttime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_currenttime.value", "%221367851711%22"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_hotfix20111102645.value", "%221%22"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_ib_delay.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_ib_delay.value", "24"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_ib_disclosure.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_ib_disclosure.value", "1368047249"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_ib_disclosure_tmp.expiration", "Wed May 08 2013 23:17:23 GMT+0200"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_ib_disclosure_tmp.value", "1368047243"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_ib_list.expiration", "Thu May 09 2013 05:07:29 GMT+0200"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_ib_list.value", "%7B%225a0a78b4cf7a0f072d270b686d9c51f5%22%3A%7B%22p%22%3[...] =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_ib_list_temp.expiration", "Wed May 08 2013 23:17:29 GMT+0200"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_ib_list_temp.value", "1368047249.458"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_installer_params.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_installer_params.value", "%7B%22source_id%22%3A%2258429%22%2C%22sub_id%22[...] =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_installtime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_installtime.value", "%221367851711%22"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_parent_zoneid.value", "%2258429%22"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_pc_20120828.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_pc_20120828.value", "1368047242941"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_product_id.value", "%221242%22"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie._GPL_zoneid.value", "%22113517%22"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie.dbtest.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.cookie.dbtest.value", "1368041540730"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.description", "Save big with Giant Savings! Coupons display instantly while you're sh[...] =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.domain", ""); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.enablesearch", false); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.fbremoteurl", ""); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.group", 0); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.homepage", ""); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.iframe", false); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3A%22328988446AC340B0[...] =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_appVer.value", "97"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_lastVersion.value", "0"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_meta.value", "%7B%7D"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_nextCheck.expiration", "Thu May 09 2013 03:32:16 GMT+0200"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_nextCheck.value", "true"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_queue.value", "%7B%7D"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.internaldb.SoftwareDetected.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.internaldb.SoftwareDetected.value", "%7B%22AnySoftware%22%3Afalse%2C%22Wireshark%22%3[...] =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.js", "\n\nif(\"undefined\"!=typeof _GPL_PLUGIN){var _GPL_=function(){_GPL_PLUGIN.star[...] =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.manifesturl", ""); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.name", "Giant Savings"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.newtab", ""); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.opensearch", ""); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1.code", "appAPI._cr_config={appID:function(){var a=appAPI.appInfo;if([...] =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1.ver", 6); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1000014.code", "Array.prototype.indexOf||(Array.prototype.indexOf=func[...] =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1000014.ver", 15); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1000015.code", "var a=appAPI.db.getList(),cf_ran=!1,_GPL_BG={vars:{},r[...] =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1000015.name", "GPL Background (BG)"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_1000015.ver", 38); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_13.code", "(function(a){a.selectedText=function(e,c){function d(){if(w[...] =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_13.ver", 3); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_14.code", "if(typeof(appAPI)===\"undefined\"){appAPI={};}var CR__bIsIE[...] =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_14.name", "CrossriderUtils"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_14.ver", 3); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_16.code", "if((typeof isBackground===\"undefined\"||isBackground!==tru[...] =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_16.name", "FFAppAPIWrapper"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_16.ver", 7); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_17.code", "if(typeof window!==\"undefined\"){\n/*!\n * jQuery JavaScri[...] =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_17.ver", 4); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_21.code", "var CrossriderDebugManager=(function(h){var f={appId:appAPI[...] =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_21.name", "debug"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_21.ver", 4); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_22.code", "(function(a){appAPI.queueManager={queue:[],register:functio[...] =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_22.ver", 4); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_28.code", "var CrossriderInitializerPlugin=(function(e){var c={appId:a[...] =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_28.name", "initializer"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_28.ver", 3); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_4.code", "var jQuery = $jquery_171 = $jquery = null;\n\nif (document &[...] =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_4.name", "jquery_1_7_1"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_4.ver", 4); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.resources.isRea[...] =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_47.ver", 3); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_64.code", "(function(){var h=\"__CR_EMPTY_CHANNEL__\";var d=function(j[...] =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_64.name", "appApiMessage"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_64.ver", 2); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_72.code", "if(appAPI.__should_activate_validation__===true){(function([...] =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_72.ver", 3); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_78.code", "if(typeof jQuery!==\"undefined\"&&(jQuery)&&typeof navigato[...] =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_78.name", "CrossriderInfo"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_78.ver", 3); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_98.code", "(function(){var b=\"cr_\"+appAPI.appID+\"internalMessage\";[...] =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_98.name", "omniCommands"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins.plugin_98.ver", 2); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins_lists.plugins_0", "4,14,78,16,64,47,72,98,1000015"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.plugins_lists.plugins_1", "17,14,78,13,16,64,4,1,21,22,72,98,1000014,28"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.pluginsurl", "https://w9u6a2p6.ssl.hwcdn.net/plugin/apps/4479/plugins/085/ff/plugins.[...] =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.pluginsversion", 68); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.publisher", "Innovative Apps"); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.searchstatus", 0); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.setnewtab", false); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.settingsurl", ""); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.thankyou", ""); =>PUP.CrossRider
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.4479.updateinterval", 360); =>PUP.CrossRider

O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.apps", "4479");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.bic", "13e85a1100ee420d9b197fe05deb2b6f");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.cid", 4479);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.firstrun", false);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.hadappinstalled", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.installationdate", 1368041526);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.lastcheck", 22800692);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.lastcheckitem", 22800790);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.modetype", "production");
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.crossriderapp4479.reportInstall", true);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.helperbar.DockingPositionDown", false);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.helperbar.SmartbarDisabled", false);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.helperbar.SmartbarStateMinimaized", false);
O69 - SBI: prefs.js [Vivie - y6jc2wt2.default] user_pref("extensions.helperbar.Visibility", false);
O69 - SBI: SearchScopes [HKCU] {006ee092-9658-4fd6-bd8e-a21a348e59f5} - (Messenger Plus Smartbar Search) - http://feed.plusnetwork.com
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} - (Search the web (Babylon)) - http://search.babylon.com
O69 - SBI: SearchScopes [HKCU] {4327FABE-3C22-4689-8DBF-D226CF777FE9} [DefaultScope] - (Plus! Network) - http://plusnetwork.com
O69 - SBI: SearchScopes [HKCU] {62D328FA-F36A-4C69-9BA0-AAC4DF67BD58} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - http://www.google.com
O69 - SBI: SearchScopes [HKCU] {7B002C36-538E-48D7-B0D5-2D3EC2DED52C} - (Ask Search) - http://websearch.ask.com
O69 - SBI: SearchScopes [HKCU] {814C76CB-2623-43F4-AAD0-58A0E5190A20} - (Orange) - http://r.orange.fr
O69 - SBI: SearchScopes [HKCU] {8A96AF9E-4074-43b7-BEA3-87217BDA74C8} - (Web Search) - http://www.searchqu.com
O69 - SBI: SearchScopes [HKCU] {afdbddaa-5d3f-42eeO =>PUP.CrossRider =>PUP.CrossRider-b79c-185a7020515b} - (Messenger Plus FR Customized Web Search) - h =>PUP.CrossRider Keys: Scanned in 00mn 00s



---\\ Recherche particuliere � la racine de certains dossiers (O84)
[MD5.6D9E5361 =>PUP.CrossRiderpData\Local\Temp\7-zip32.dll [506880]
[MD5.B28C334C03CEE7C5E829C43AE75DAE5A] [SP =>PUP.CrossRider [248008]
[MD5.EB434AD9BE1183F169883420C5856045] [SPRF][09/11/2012] (.Sony DADC Austri =>PUP.CrossRiderDAFC3A856B876D0DC] [SPRF][09/11/2012] (.Sony DADC Austria AG - SecuROM dynamic-data module.) - =>PUP.CrossRider2/05/2013] (...) -- C:\Users\Vivie\AppData\Local\Temp\i4jdel0.exe [27411]
[MD5.24F6D923EF6956ABD044 =>PUP.CrossRider2BEF3CDD43F3AE2FD6705B9FED] [SPRF][05/04/2013] (.Oracle Corporation - Java(TM) Platform SE b =>PUP.CrossRider23B93625187] [SPRF][23/02/2013] (.Ask.com - Setup Launcher.) -- C:\Users\Vivie\AppData\Local\Tem>PUP.CrossRiderie\AppData\Local\Temp\nst5240.tmp.exe [156225]
[MD5.96261D590C12F5D47DA973AE882C58F0] [SPRF][17/ =>PUP.CrossRider\ping.exe [206336]
[MD5.D41D8CD98F00B204E9800998ECF8427E] [SPRF][17/04/2013] (...) -- C:\Users\Vivie\AppData\Local\Temp\sca_pxym.dll [0]
[MD5.28DF0219AA78485DF36C4136002F2786] [SPRF][23/02/2013]);

O69 =>Hijacker.SmartBar34A2FA1FF5D6AD3] [SPRF][31/05/2012] (.Skype Technologies S.A. - Skype.) -- C:\Use =>Hijacker.SmartBar] (...) -- C:\Users\Vivie\AppData\Local\Temp\sqlite3.dll [362029]
[MD5.679EAF2CB7A14DF0F56C5C90F0F39557] [SPRF][13/08/2012] (.Yuna Software - Setup of Messenger Plus! 5.) -- C:\Users\Vivie\A =>Hijacker.SmartBarsenger Plus! 6.) -- C:\Users\Vivie\AppData\Local\Temp\Update_4f57.exe [1161584]
[MD5.BFC98F2227FCD46EA5C0E9D3B8184802] [SPRF][24/10/2012] (...) -- C:\Users\Vivie\AppData\Local\Temp\wajam_install.exe [417072]
[MD =>Adware.IMBoosterAE35B747419542C83130107BDCDD6] [SPRF][10/11/2011] (.Bandoo Media Inc. - Bandoo Install.) -- C:\Users\Vivie\Desktop\BandooV6.exe [1578008]
[MD5.15382BEFD84EC2490A588F8BBC624339] [SPRF][06/01/2013] (.Pas de propri�taire - Installer.) -- C:\Users\Vivie\Desktop\bundleSetup.exe [609088]
[MD5.15382BEFD84EC2490A588F8BBC624339] [SPRF][06/01/2013] (.Pas de propri�taire - Installer.) -- C:\Users\Vivie\Desktop\bundleSetup[1].exe [609088]
[MD5.BCC32419174FE2DF114AB3A98DAF688A] [SPRF][06/01/2013] (.Apple Inc. - iTunes Installer.) -- C:\Users\Vivie\Desktop\iTunes64Setup.exe [88946664]
[MD5.BCC32419174FE2DF114AB3A98DAF688A] [SPRF][06/01/2013] (.Apple Inc =>PUP.Datamngr80ED07CF95] [SPRF][13/05/2013] (.AnjoCaido - Free launcher for Minecraft Alpha.) -- C:\Users\Vivie\Desktop\Minecraft.exe [695296]
[MD5.F0B219392A3BDAAA48DF8B62E48075D3] [SPRF][27/01/2013] (...) -- C:\Users\Vivie\Desktop\Pipix_v2.8.1.exe [1115631]
[MD5.D2C19C245E55901F29B338A301145162] [SPRF][20/07/2011] (.Yuna Software - Setup of Messenger Plus! 5.) -- C:\Users\Vivie\Desktop\Setup-MsgPlus-500.exe [7249288]
[MD5.19EF6FE92855D6CC84CDD628D44B2EC5] [SPRF][16/06/2013] (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Vivie\Desktop\ZHPDiag2(1).exe [5678428]
[MD5.1321DC81E317EE48C4D004775FB29AC9] [SPRF][24/02/2013] (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Users\Vivie\Desktop\ZHPhep.exe [1916928]
[MD5.61FB16B6016BCC9AA42E02F787DC87FC] [SPRF][26/01/2010] (.Adobe Systems Incorporated - Adobe� Flash� Player ActiveX Installer.) -- C:\Windows\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe [1955384]
[MD5.80F4A456633F78A26A3C6B16E64EFEC5] [SPRF][28/09/2007] (.Microsoft - Uno Messenger.) -- C:\Windows\Downloaded Program Files\GAME_UNO1.dll [381960]
[MD5.8945CCA5FC4F25168E8B6F401EFAF51F] [SPRF][22/02/2007] (.Microsoft Corporation - Zone.com Stats Client for MSN Messenger.) -- C:\Windows\Downloaded Program Files\MessengerStatsPAClient.dll [304544]
[MD5.E661E91B5929632665683222D509D271] [SPRF][28/02/2007] (.Microsoft Corporation - Zone.com Minesweeper Flags for MSN Messenger.) -- C:\Windows\Downloaded Program Files\MineSweeper.dll [130472]
[MD5.1E5CFDF9AEBDD84305A4C8154277A269] [SPRF][28/02/2007] (.Microsoft Corporation - Zone.com Checkers for MSN Messenger.) -- C:\Windows\Downloaded Program Files\msgrchkr.dll [131472]
[MD5.FEE7BE331AF827DAF4DAF3407EB28647] [SPRF][21/04/2005] (.PopCap Games - PopCapLoader Module.) -- C:\Windows\Downloaded Program Files\popcaploader.dl =>Toolbar.WajamMSN Messenger.) -- C:\Windows\Downloaded Program Files\SolitaireShowdown.dll [142248]
~ Files: Scanned in 00mn 03s



---\\ Firewall Active Exception List (FirewallRules) (O87)
O87 - FAEL: "{1A38C64C-38E4-4809-8DE9-CEA8BCC29A84}" |In - Public - P6 - TRUE | .(...) -- C:\Program Files (x86)\Eidos\Kane and Lynch Dead Men\kaneandlynch.exe (.not file.)
O87 - FAEL: "{AFC5B587-A29E-46B0-8E95-85A5272A3977}" |In - Public - P17 - TRUE | .(...) -- C:\Program Files (x86)\Eidos\Kane and Lynch Dead Men\kaneandlynch.exe (.not file.)
O87 - FAEL: "TCP Query User{33A35422-E520-47C1-8F05-F7B167380092}C:\users\vivie\appdata\roaming\nosibay\bubble dock\bubble dock.exe" |In - Private - P6 - TRUE | .(...) -- C:\users\vivie\appdata\roaming\nosibay\bubble dock\bubble dock.exe (.not file.)
O87 - FAEL: "UDP Query User{9596BF05-1E84-4397-889F-C8356D9F7A67}C:\users\vivie\appdata\roaming\nosibay\bubble dock\bubble dock.exe" |In - Private - P17 - TRUE | .(...) -- C:\users\vivie\appdata\roaming\nosibay\bubble dock\bubble dock.exe (.not file.)
~ Firewall: 269 Legitimates Filtered in 00mn 01s



---\\ Scan Additionnel (O88)
Database Version : v2.12472 - (13/06/2013)
Cl�s trouv�es (Keys found) : 609
Valeurs trouv�es (Values found) : 2
Dossiers trouv�s (Folders found) : 40
Fichiers trouv�s (Files found) : 6

[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{006E6A46-8D55-4F10-BBA8-2C9653B4278B}] =>Adware.Boxore
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}] =>Hijacker.SmartBar
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}] =>Hijacker.SmartBar
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00CBB66B-1D3B-46D3-9577-323A336ACB50}] =>PUP.Blabbers
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00CBB66B-1D3B-46D3-9577-323A336ACB50}] =>PUP.Blabbers
[HKLM\Software\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}] =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}] =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}] =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}] =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}] =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}] =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}] =>Adware.Bandoo
[HKLM\Software\Classes\TypeLib\{095BFD3C-4602-4FE1-96F1-AEFAFBFD067D}] =>Toolbar.Wajam
[HKLM\Software\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}] =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}] =>Adware.IMBooster
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}] =>PUP.RewardsArcade
[HKLM\Software\Classes\AppID\{1301a8a5-3dfb-4731-a162-b357d00c9644}] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Classes\AppID\{1301a8a5-3dfb-4731-a162-b357d00c9644}] =>Adware.Bandoo
[HKLM\Software\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}] =>PUP.RewardsArcade
[HKLM\Software\Classes\AppID\{186E19A3-B909-4F48-B687-BB81EB8BC7CE}] =>Trojan.BHO
[HKLM\Software\Wow6432Node\Classes\AppID\{186E19A3-B909-4F48-B687-BB81EB8BC7CE}] =>Trojan.BHO
[HKLM\Software\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}] =>PUP.RewardsArcade
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1a93c934-025b-4c3a-b38e-9654a7003239}] =>Adware.GamesBar
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\extensions\{1a93c934-025b-4c3a-b38e-9654a7003239}] =>Adware.GamesBar
[HKLM\Software\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}] =>Adware.Bandoo
[HKLM\Software\Classes\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634}] =>Toolbar.Wajam
[HKLM\Software\Wow6432Node\Classes\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634}] =>Toolbar.Wajam
[HKLM\Software\Classes\AppID\{20EDC024-43C5-423E-B7F5-FD93523E0D9F}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\AppID\{20EDC024-43C5-423E-B7F5-FD93523E0D9F}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110011441179}] =>Adware.GamePlayLabs
[HKLM\Software\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}] =>PUP.RewardsArcade
[HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}] =>Adware.AskSBAR
[HKLM\Software\Classes\Interface\{2a42d13c-d427-4787-821b-cf6973855778}] =>Adware.Agent
[HKLM\Software\Wow6432Node\Classes\Interface\{2a42d13c-d427-4787-821b-cf6973855778}] =>Adware.Agent
[HKLM\Software\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}] =>Adware.SocialSkinz
[HKLM\Software\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}] =>PUP.RewardsArcade
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}] =>Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}] =>Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}] =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}] =>Toolbar.Agent
[HKLM\Software\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}] =>Toolbar.Agent
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}] =>Toolbar.Agent
[HKLM\Software\Classes\AppID\{32451DFC-C23B-4E12-866C-FC7982238504}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{32451DFC-C23B-4E12-866C-FC7982238504}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}] =>PUP.RewardsArcade
[HKLM\Software\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}] =>Toolbar.Babylon
[HKLM\Software\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\{373ED12D-B306-43AC-9485-A7C5133DC34C}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\AppID\{373ED12D-B306-43AC-9485-A7C5133DC34C}] =>Toolbar.Agent
[HKLM\Software\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}] =>PUP.RewardsArcade
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3d4d238c-9c48-47cd-a95c-53259acf9e56}] =>Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3d4d238c-9c48-47cd-a95c-53259acf9e56}] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3d4d238c-9c48-47cd-a95c-53259acf9e56}] =>Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3D4D238C-9C48-47CD-A95C-53259ACF9E56}] =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3D4D238C-9C48-47CD-A95C-53259ACF9E56}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3D4D238C-9C48-47CD-A95C-53259ACF9E56}] =>Toolbar.Agent
[HKLM\Software\Classes\Interface\{3d8478aa-7b88-48a9-8bcb-b85d594411ec}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{3d8478aa-7b88-48a9-8bcb-b85d594411ec}] =>Adware.SocialSkinz
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624f4-c5dd-4e1d-bdd0-1e9c9b7799cc}] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624f4-c5dd-4e1d-bdd0-1e9c9b7799cc}] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{42AEFAF9-09D6-4185-87AE-DEDF6E955CB4}] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{42AEFAF9-09D6-4185-87AE-DEDF6E955CB4}] =>Toolbar.Conduit
[HKLM\Software\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}] =>Toolbar.Wajam
[HKLM\Software\Wow6432Node\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}] =>Toolbar.Wajam
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{4327FABE-3C22-4689-8DBF-D226CF777FE9}] =>Toolbar.Agent
[HKLM\Software\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}] =>Toolbar.Babylon
[HKLM\Software\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}] =>Toolbar.Conduit
[HKLM\Software\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{477f210a-2a86-4666-9c4b-1189634d2c84}] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Classes\Interface\{477f210a-2a86-4666-9c4b-1189634d2c84}] =>Adware.Bandoo
[HKLM\Software\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{4897bba6-48d9-468c-8efa-846275d7701b}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{4897bba6-48d9-468c-8efa-846275d7701b}] =>Adware.SocialSkinz
[HKLM\Software\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}] =>Adware.SocialSkinz
[HKLM\Software\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}] =>Toolbar.Babylon
[HKLM\Software\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}] =>Toolbar.Babylon
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{58124A0B-DC32-4180-9BFF-E0E21AE34026}] =>Adware.IMBooster
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{58124A0B-DC32-4180-9BFF-E0E21AE34026}] =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{58124A0B-DC32-4180-9BFF-E0E21AE34026}] =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}] =>PUP.RewardsArcade
[HKLM\Software\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}] =>Hijacker.SmartBar
[HKLM\Software\Classes\Interface\{5F339F0B-716F-408F-A627-DEEB5DEB4020}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{5F339F0B-716F-408F-A627-DEEB5DEB4020}] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}] =>Adware.SocialSkinz
[HKLM\Software\Classes\CLSID\{63E471BB-23F1-3A92-8D43-4079E7B7FA8E}] =>Toolbar.Agent
[HKLM\Software\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}] =>PUP.RewardsArcade
[HKCU\Software\Microsoft\Office\Word\Addins\BabylonOfficeAddin.OfficeAddin] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}] =>Adware.IMBooster
[HKLM\Software\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}] =>Hijacker.SmartBar
[HKLM\Software\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}] =>Adware.Bandoo
[HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}] =>Toolbar.Ask
[HKLM\Software\Wow6432Node\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}] =>Toolbar.Ask
[HKLM\Software\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}] =>Hijacker.SmartBar
[HKLM\Software\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{736EF78E-5A04-46F9-893E-EDEC6EA5DF45}] =>Adware.Agent
[HKCU\Software\Microsoft\Office\PowerPoint\Addins\BabylonOfficeAddin.OfficeAddin] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{7A1BCE27-099C-4628-B63A-AEC00C6376B3}] =>Adware.Agent
[HKLM\Software\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}] =>PUP.RewardsArcade
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7f000001-db8e-f89c-2fec-49bf726f8c12}] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7f000001-db8e-f89c-2fec-49bf726f8c12}] =>Adware.Bandoo
[HKLM\Software\Classes\Interface\{817923CB-4744-4216-B250-CF7EDA8F1767}] =>PUP.Blabbers
[HKLM\Software\Wow6432Node\Classes\Interface\{817923CB-4744-4216-B250-CF7EDA8F1767}] =>PUP.Blabbers
[HKLM\Software\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}] =>Adware.SocialSkinz
[HKLM\Software\Classes\TypeLib\{830B56CB-FD22-44AA-9887-7898F4F4158D}] =>PUP.Blabbers
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}] =>Toolbar.Ask
[HKLM\Software\Classes\TypeLib\{8830DDF0-3042-404D-A62C-384A85E34833}] =>PUP.Blabbers
[HKLM\Software\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}] =>PUP.RewardsArcade
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8a96af9e-4074-43b7-bea3-87217bda74c8}] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{8a96af9e-4074-43b7-bea3-87217bda74c8}] =>Adware.Bandoo
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8A96AF9E-4074-43B7-BEA3-87217BDA74C8}] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{8A96AF9E-4074-43B7-BEA3-87217BDA74C8}] =>Adware.Bandoo
[HKLM\Software\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}] =>PUP.RewardsArcade
[HKLM\Software\Classes\TypeLib\{8F5F1CB6-EA9E-40AF-A5CA-C7FD63CC1971}] =>Adware.Bandoo
[HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}] =>Toolbar.Ask
[HKLM\Software\Wow6432Node\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}] =>Toolbar.Ask
[HKLM\Software\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}] =>Toolbar.Babylon
[HKLM\Software\Classes\TypeLib\{955B782E-CDC8-4CEE-B6F6-AD7D541A8D8A}] =>PUP.Blabbers
[HKLM\Software\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}] =>Adware.SocialSkinz
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{963B125B-8B21-49A2-A3A8-E37092276531}] =>PUP.Blabbers
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{963B125B-8B21-49A2-A3A8-E37092276531}] =>PUP.Blabbers
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}] =>Adware.IMBooster
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}] =>Adware.IMBooster
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99079A25-328F-4BD4-BE04-00955ACAA0A7}] =>Adware.Bandoo
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{99079A25-328F-4BD4-BE04-00955ACAA0A7}] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079A25-328F-4BD4-BE04-00955ACAA0A7}] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99079A25-328F-4BD4-BE04-00955ACAA0A7}] =>Adware.Bandoo
[HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}] =>Adware.AskSBAR
[HKLM\Software\Wow6432Node\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}] =>Adware.AskSBAR
[HKLM\Software\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}] =>PUP.RewardsArcade
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9c8a3ca5-889e-4554-beec-ec0876e4e96a}] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9c8a3ca5-889e-4554-beec-ec0876e4e96a}] =>Adware.Bandoo
[HKLM\Software\Classes\Interface\{9F0C17EB-EF2C-4278-9136-2D547656BC03}] =>PUP.Blabbers
[HKLM\Software\Wow6432Node\Classes\Interface\{9F0C17EB-EF2C-4278-9136-2D547656BC03}] =>PUP.Blabbers
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A047FE02-C91C-41CB-898C-4ED21B86025A}] =>Toolbar.Orange
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}] =>Adware.Bandoo
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}] =>Adware.Bandoo
[HKLM\Software\Classes\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}] =>Adware.Bandoo
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}] =>Adware.Bandoo
[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}] =>Adware.AskSBAR
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}] =>Adware.AskSBAR
[HKLM\Software\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A76AA284-E52D-47E6-9E4F-B85DBF8E35C3}] =>Adware.IMBooster
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}] =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}] =>Toolbar.Agent
[HKLM\Software\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}] =>Toolbar.Ask
[HKLM\Software\Wow6432Node\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}] =>Toolbar.Ask
[HKLM\Software\Classes\TypeLib\{ad76633e-e50d-4844-9e7f-4dfbc7c18467}] =>Adware.GamesBar
[HKLM\Software\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}] =>PUP.RewardsArcade
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ae07101b-46d4-4a98-af68-0333ea26e113}] =>Adware.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ae07101b-46d4-4a98-af68-0333ea26e113}] =>Adware.Agent
[HKLM\Software\Classes\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113}] =>Adware.Agent
[HKLM\Software\Wow6432Node\Classes\Interface\{AF3AFF7C-B9E9-48DD-9002-212B6DEAAC02}] =>Adware.Agent
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}] =>Toolbar.Conduit
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}] =>Toolbar.Conduit
[HKLM\Software\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}] =>Toolbar.Babylon
[HKLM\Software\Classes\CLSID\{B397BC55-576C-39E6-BF64-9E2A96317447}] =>Toolbar.Agent
[HKLM\Software\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}] =>Hijacker.Seeearch
[HKLM\Software\Classes\CLSID\{B973AB12-952F-31C4-A321-E8FA6FE4421E}] =>Toolbar.Agent
[HKLM\Software\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}] =>Adware.SocialSkinz
[HKLM\Software\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}] =>Adware.CDNHelper
[HKLM\Software\Wow6432Node\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}] =>Adware.CDNHelper
[HKLM\Software\Classes\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}] =>PUP.RewardsArcade
[HKLM\Software\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}] =>Hijacker.SmartBar
[HKLM\Software\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}] =>Hijacker.Seeearch
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C9A6357B-25CC-4BCF-96C1-78736985D412}] =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C9A6357B-25CC-4BCF-96C1-78736985D412}] =>Toolbar.Agent
[HKLM\Software\Classes\TypeLib\{c9c5deaf-0a1f-4660-8279-9edfad6fefe1}] =>Adware.PopCap
[HKLM\Software\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}] =>PUP.RewardsArcade
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}] =>Adware.AskSBAR
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}] =>Adware.AskSBAR
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}] =>Adware.AskSBAR
[HKLM\Software\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}] =>Toolbar.Wajam
[HKLM\Software\Wow6432Node\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}] =>Toolbar.Wajam
[HKLM\Software\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] =>Toolbar.Babylon
[HKLM\Software\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}] =>Adware.SocialSkinz
[HKLM\Software\Wow6432Node\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}] =>Adware.SocialSkinz
[HKLM\Software\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}] =>PUP.RewardsArcade
[HKLM\Software\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{DBE82879-914A-422F-BAE9-2ECC80BE536F}] =>Adware.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{df780f87-ff2b-4df8-92d0-73db16a1543a}] =>Adware.PopCap
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{df780f87-ff2b-4df8-92d0-73db16a1543a}] =>Adware.PopCap
[HKLM\Software\Wow6432Node\Microsoft\Code Store Database\Distribution Units\{df780f87-ff2b-4df8-92d0-73db16a1543a}] =>Adware.PopCap
[HKLM\Software\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{E12D7149-73EF-45E4-A1E9-99FD7DAE62D3}] =>Adware.Agent
[HKLM\Software\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{e4e3e0f8-cd30-4380-8ce9-b96904bdefca}] =>Adware.PopCap
[HKLM\Software\Wow6432Node\Classes\Interface\{e4e3e0f8-cd30-4380-8ce9-b96904bdefca}] =>Adware.PopCap
[HKLM\Software\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}] =>Adware.BullseyeToolbar
[HKLM\Software\Wow6432Node\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}] =>Adware.BullseyeToolbar
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}] =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}] =>PUP.RewardsArcade
[HKLM\Software\Classes\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}] =>Adware.SocialSkinz
[HKLM\Software\Classes\CLSID\{EC5983DF-8DE2-31B5-989F-850F265E7F3C}] =>Toolbar.Agent
[HKLM\Software\Classes\AppID\{ED6535E7-F778-48A5-A060-549D30024511}] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\AppID\{ED6535E7-F778-48A5-A060-549D30024511}] =>Toolbar.Agent
[HKLM\Software\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{F2B184F1-547C-4EE9-BFC4-AC489C7077D9}] =>Adware.Agent
[HKLM\Software\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}] =>PUP.RewardsArcade
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f9189560-573a-4fde-b055-ae7b0f4cf080}] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f9189560-573a-4fde-b055-ae7b0f4cf080}] =>Adware.Bandoo
[HKLM\Software\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}] =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}] =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{fe8a736f-4124-4d9c-b4b1-3b12381efabe}] =>Adware.PopCap
[HKLM\Software\Wow6432Node\Classes\Interface\{fe8a736f-4124-4d9c-b4b1-3b12381efabe}] =>Adware.PopCap
[HKLM\Software\Classes\Interface\{ff871e51-2655-4d06-aed5-745962a96b32}] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Classes\Interface\{ff871e51-2655-4d06-aed5-745962a96b32}] =>Adware.Bandoo
[HKLM\Software\Classes\AppID\bandoocore.exe] =>Adware.Bandoo
[HKLM\Software\Classes\AppID\escort.dll] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\escortapp.dll] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\escorteng.dll] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\esrv.EXE] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\GenericAskToolbar.DLL] =>Adware.AskSBAR
[HKLM\Software\Classes\AppID\TbCommonUtils.DLL] =>Toolbar.Agent
[HKLM\Software\Classes\AppID\TbHelper.EXE] =>Toolbar.Agent
[HKLM\Software\Classes\AppID\tdataprotocol.DLL] =>Toolbar.Agent
[HKLM\Software\Classes\AppID\updatebho.DLL] =>Toolbar.Agent
[HKLM\Software\Classes\AppID\wit4ie.DLL] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASMANCS] =>Toolbar.Bing
[HKLM\Software\Classes\b] =>Toolbar.Babylon
[HKLM\Software\Classes\Babylon.dskBnd] =>Toolbar.Babylon
[HKLM\Software\Classes\Babylon.dskBnd.1] =>Toolbar.Babylon
[HKLM\Software\Classes\bbylnApp.appCore] =>Toolbar.Babylon
[HKLM\Software\Classes\bbylnApp.appCore.1] =>Toolbar.Babylon
[HKLM\Software\Classes\comobject.deskbarenabler] =>Toolbar.Agent
[HKLM\Software\Classes\comobject.deskbarenabler.1] =>Toolbar.Agent
[HKLM\Software\Classes\Conduit.Engine] =>Toolbar.Conduit
[HKLM\Software\Classes\escort.escortIEPane] =>PUP.Funmoods
[HKLM\Software\Classes\escort.escortIEPane.1] =>PUP.Funmoods
[HKLM\Software\Classes\escort.escrtBtn.1] =>Toolbar.Babylon
[HKLM\Software\Classes\esrv.BabylonESrvc] =>Toolbar.Babylon
[HKLM\Software\Classes\esrv.BabylonESrvc.1] =>Toolbar.Babylon
[HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd] =>Adware.AskSBAR
[HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd.1] =>Adware.AskSBAR
[HKLM\Software\Classes\LinkurySmartBar.BHO] =>Hijacker.SmartBar
[HKLM\Software\Classes\LinkurySmartBar.DockingPanel] =>Hijacker.SmartBar
[HKLM\Software\Classes\LinkurySmartBar.LinkuryMenuForm] =>Hijacker.SmartBar
[HKLM\Software\Classes\LinkurySmartBar.LinkurySmartBar] =>Hijacker.SmartBar
[HKLM\Software\Classes\LinkurySmartBar.LinkurySmartBarBandObject] =>Hijacker.SmartBar
[HKLM\Software\Classes\oberontb.band] =>Adware.GamesBar
[HKLM\Software\Classes\oberontb.band.1] =>Adware.GamesBar
[HKLM\Software\Classes\oberontb.GamesBarBHO] =>Adware.GamesBar
[HKLM\Software\Classes\oberontb.GamesBarBHO.1] =>Adware.GamesBar
[HKLM\Software\Classes\popcaploader.popcaploaderctrl2] =>Adware.PopCap
[HKLM\Software\Classes\popcaploader.popcaploaderctrl2.1] =>Adware.PopCap
[HKLM\Software\Classes\SearchBar.Client] =>Toolbar.Agent
[HKLM\Software\Classes\SearchQUIEHelper.DNSGuard] =>Adware.Bandoo
[HKLM\Software\Classes\SearchQUIEHelper.DNSGuard.1] =>Adware.Bandoo
[HKLM\Software\Classes\Software.OneClickCtrl.8] =>Adware.Agent
[HKLM\Software\Classes\TbCommonUtils.CommonUtils] =>Toolbar.Agent
[HKLM\Software\Classes\TbCommonUtils.CommonUtils.1] =>Toolbar.Agent
[HKLM\Software\Classes\updatebho.TimerBHO] =>PUP.Blabbers
[HKLM\Software\Classes\updatebho.TimerBHO.1] =>PUP.Blabbers
[HKLM\Software\Classes\URLSearchHook.ToolbarURLSearchHook] =>Toolbar.Agent
[HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook] =>Adware.Agent
[HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook.1] =>Adware.Agent
[HKLM\Software\Classes\wit4ie.WitBHO] =>PUP.Blabbers
[HKLM\Software\Classes\wit4ie.WitBHO.2] =>PUP.Blabbers
[HKLM\Software\Wow6432Node\Google\Chrome\Extensions\bjeikeheijdjdfjbmknpefojickbkmom] =>PUP.OfferBox
[HKLM\Software\Wow6432Node\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp] =>Toolbar.Wajam
[HKLM\Software\Wow6432Node\Google\Chrome\Extensions\kincjchfokkeneeofpeefomkikfkiedl] =>PUP.FCTPlugin
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\1C875DDE39636004CA8CDAEC335B4160] =>Adware.PredictAd
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852] =>Toolbar.Ask
[HKLM\Software\Classes\Installer\Features\482AA67AD25E6E74E9F48BD5FBE8533C] =>Adware.IMBooster
[HKLM\Software\Classes\Installer\Products\482AA67AD25E6E74E9F48BD5FBE8533C] =>Adware.IMBooster
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\482AA67AD25E6E74E9F48BD5FBE8533C] =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Installer\Features\482AA67AD25E6E74E9F48BD5FBE8533C] =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Installer\Products\482AA67AD25E6E74E9F48BD5FBE8533C] =>Adware.IMBooster
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED] =>Toolbar.Ask
[HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF] =>Toolbar.AVGSearch
[HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF] =>Toolbar.AVGSearch
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF] =>Toolbar.AVGSearch
[HKLM\Software\Wow6432Node\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF] =>Toolbar.AVGSearch
[HKLM\Software\Wow6432Node\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF] =>Toolbar.AVGSearch
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\BA086F2D38A8E1A47912955A68B3AD24] =>Adware.PredictAd
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E] =>Toolbar.Ask
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{08C06D61-F1F3-4799-86F8-BE1A89362C85}] =>Toolbar.Orange
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9] =>Adware.MyWebSearch
[HKLM\SYSTEM\CurrentControlSet\Services\WajamUpdater] =>Toolbar.Wajam
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater] =>Toolbar.Wajam
[HKCU\Software\APN] =>Toolbar.Ask
[HKLM\Software\Wow6432Node\APN] =>Toolbar.Ask
[HKCU\Software\Ask.com] =>Toolbar.AskBar
[HKCU\Software\AppDataLow\Software\AskToolbar] =>Toolbar.AskTBar
[HKLM\Software\Wow6432Node\AskToolbar] =>Toolbar.AskTBar
[HKCU\Software\BabylonToolbar] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\BabylonToolbar] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Bandoo] =>Adware.Bandoo
[HKCU\Software\Blabbers] =>PUP.Blabbers
[HKCU\Software\BlabbersToolbar] =>PUP.Blabbers
[HKLM\Software\Wow6432Node\Boxore] =>Adware.Boxore
[HKCU\Software\AppDataLow\Software\conduitEngine] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\conduitEngine] =>Toolbar.Conduit
[HKCU\Software\Cr_Installer] =>PUP.CrossRider
[HKCU\Software\DataMngr] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\DataMngr] =>Adware.Bandoo
[HKCU\Software\DataMngr_Toolbar] =>Toolbar.Agent
[HKCU\Software\gamesbar] =>Adware.GamesBar
[HKLM\Software\Wow6432Node\gamesbar] =>Adware.GamesBar
[HKLM\Software\Wow6432Node\GamesBarSetup] =>Adware.GamesBar
[HKCU\Software\Iminent] =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Iminent] =>Adware.IMBooster
[HKCU\Software\AppDataLow\Software\Messenger_Plus_FR] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Messenger_Plus_FR] =>Toolbar.Conduit
[HKCU\Software\AppDataLow\Software\PriceGong] =>Adware.PriceGong
[HKLM\Software\Wow6432Node\Productivity_2.2] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\SearchquMediabarTb] =>Adware.Bandoo
[HKCU\Software\SmartbarBackup] =>Hijacker.SmartBar
[HKCU\Software\SmartbarLog] =>Hijacker.SmartBar
[HKCU\Software\Softonic] =>Toolbar.Conduit
[HKCU\Software\AppDataLow\Toolbar] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Microsoft\Tracing\Babylon_RASAPI32] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Tracing\Babylon_RASMANCS] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Tracing\Iminent_RASAPI32] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Microsoft\Tracing\Iminent_RASMANCS] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Microsoft\Tracing\MyBabylontb_RASAPI32] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Tracing\MyBabylontb_RASMANCS] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Tracing\SearchquMediaBar_RASAPI32] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Microsoft\Tracing\SearchquMediaBar_RASMANCS] =>Adware.Bandoo
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}] =>Toolbar.AskBar
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BrowserCompanion] =>PUP.Blabbers
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\gamesbar] =>Adware.GamesBar
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Giant Savings] =>Adware.VidSaver
[HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\IadahToolbar] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Messenger_Plus_FR Toolbar] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP] =>Adware.IMBooster
[HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\base64] =>PUP.Blabbers
[HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\Chrome] =>PUP.Blabbers
[HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\Prox] =>PUP.Blabbers
[HKLM\Software\Classes\Prod.cap] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Tracing\offerbox_RASAPI32] =>PUP.OfferBox
[HKLM\Software\Wow6432Node\Microsoft\Tracing\offerbox_RASMANCS] =>PUP.OfferBox
[HKLM\Software\Wow6432Node\Microsoft\Tracing\BingBar_RASAPI32] =>Toolbar.Bing
[HKLM\Software\Classes\AppID\priam_bho.DLL] =>Toolbar.Wajam
[HKLM\Software\Wow6432Node\Google\Chrome\Extensions\bodddioamolcibagionmmobehnbhiakf] =>PUP.Blabbers
[HKLM\Software\Classes\Installer\Features\64A6E60055D801F4BB8AC269354B72B8] =>Adware.Boxore
[HKLM\Software\Classes\Installer\Products\64A6E60055D801F4BB8AC269354B72B8] =>Adware.Boxore
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\64A6E60055D801F4BB8AC269354B72B8] =>Adware.Boxore
[HKLM\Software\Wow6432Node\Classes\Installer\Features\64A6E60055D801F4BB8AC269354B72B8] =>Adware.Boxore
[HKLM\Software\Wow6432Node\Classes\Installer\Products\64A6E60055D801F4BB8AC269354B72B8] =>Adware.Boxore
[HKCU\Software\InstallCore] =>Adware.InstallCore
[HKLM\SYSTEM\CurrentControlSet\Services\supdate] =>Adware.Boxore
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375] =>Toolbar.Agent
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5] =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}] =>Toolbar.Babylon
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}] =>Toolbar.Babylon
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F72841F0-4EF1-4DF5-BCE5-B3AC8ACF5478}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\extensions\{F72841F0-4EF1-4DF5-BCE5-B3AC8ACF5478}] =>Toolbar.Babylon
[HKLM\Software\Classes\BabyDict] =>Toolbar.Babylon
[HKLM\Software\Classes\BabyGloss] =>Toolbar.Babylon
[HKLM\Software\Classes\BabyOptFile] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\{B16632F1-24E0-4D99-A68D-70BFB6447C48}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{B16632F1-24E0-4D99-A68D-70BFB6447C48}] =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\{C0CEA572-2978-4DFC-A672-8100FF0E276A}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{C0CEA572-2978-4DFC-A672-8100FF0E276A}] =>Toolbar.Babylon
[HKLM\Software\Classes\TypeLib\{0C2E529C-A82C-4AC6-8807-0B51F7AD7BB2}] =>Toolbar.Babylon
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C8A3CA5-889E-4554-BEEC-EC0876E4E96A}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C8A3CA5-889E-4554-BEEC-EC0876E4E96A}] =>Toolbar.Babylon
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F000001-DB8E-F89C-2FEC-49BF726F8C12}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F000001-DB8E-F89C-2FEC-49BF726F8C12}] =>Toolbar.Babylon
[HKLM\Software\Classes\TypeLib\{A1489C85-4F6F-48C4-AC9E-18B63AF4703E}] =>Toolbar.Babylon
[HKLM\Software\Classes\TypeLib\{F310F027-15CB-4A7F-B10D-3A4AFB5013A5}] =>Toolbar.Babylon
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F9189560-573A-4FDE-B055-AE7B0F4CF080}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F9189560-573A-4FDE-B055-AE7B0F4CF080}] =>Toolbar.Babylon
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624F4-C5DD-4E1D-BDD0-1E9C9B7799CC}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624F4-C5DD-4E1D-BDD0-1E9C9B7799CC}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{FF871E51-2655-4D06-AED5-745962A96B32}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{FF871E51-2655-4D06-AED5-745962A96B32}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{477F210A-2A86-4666-9C4B-1189634D2C84}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{477F210A-2A86-4666-9C4B-1189634D2C84}] =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{B7EA2226-F876-4BE4-B478-76EBAE2A668A}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{B7EA2226-F876-4BE4-B478-76EBAE2A668A}] =>Toolbar.Babylon
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2] =>Toolbar.Ask
[HKLM\Software\Classes\AppID\ESRV.EXE] =>Adware.Facemoods
[HKLM\Software\Classes\TypeLib\{B00FE392-639D-4688-976E-A1BFF368CB96}] =>Adware.Agent
[HKLM\Software\Classes\Interface\{3AE26843-9171-4F23-A8E5-5421701276A4}] =>Adware.Agent
[HKLM\Software\Wow6432Node\Classes\Interface\{3AE26843-9171-4F23-A8E5-5421701276A4}] =>Adware.Agent
[HKLM\Software\Classes\.bdc] =>Toolbar.Conduit
[HKLM\Software\Classes\.bgl] =>Toolbar.Conduit
[HKLM\Software\Classes\.bof] =>Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D970ED5-3EDA-438D-BFFD-715931E2775B}] =>Toolbar.Sorcim
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1D970ED5-3EDA-438D-BFFD-715931E2775B}] =>Toolbar.Sorcim
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1D970ED5-3EDA-438D-BFFD-715931E2775B}] =>Toolbar.Sorcim
[HKLM\Software\Classes\AppID\{6536801B-F50C-449B-9476-093DFD3789E3}] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{6536801B-F50C-449B-9476-093DFD3789E3}] =>Toolbar.Babylon
[HKCU\Software\AppDataLow\Software\Crossrider] =>PUP.CrossRider
[HKCU\Software\InstalledBrowserExtensions\] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Microsoft\Tracing\boxore_RASAPI32] =>Adware.Boxore
[HKLM\Software\Wow6432Node\Microsoft\Tracing\boxore_RASMANCS] =>Adware.Boxore
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F994E0D9-8335-48F1-99C2-A712C21F8D5F}] =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\464AA55239C100F32AF2D438EDDC0F47] =>Adware.IMBooster
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5652BA3D5FB98AE31B337BF0AF939856] =>Adware.IMBooster
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EB95E1AFCBABE3DB9ECCC669B99494] =>Adware.IMBooster
[HKLM\Software\Classes\AppID\BabylonHelper.EXE] =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\sl-apl] =>Hijacker.SelectionLinks
[HKLM\Software\Classes\CrossriderApp0004479.BHO] =>PUP.CrossRider
[HKLM\Software\Classes\CrossriderApp0004479.BHO.1] =>PUP.CrossRider
[HKLM\Software\Classes\CrossriderApp0004479.Sandbox] =>PUP.CrossRider
[HKLM\Software\Classes\CrossriderApp0004479.Sandbox.1] =>PUP.CrossRider
[HKLM\Software\Classes\TbHelper.TbDownloadManager] =>Toolbar.Agent
[HKLM\Software\Classes\TbHelper.TbDownloadManager.1] =>Toolbar.Agent
[HKLM\Software\Classes\TbHelper.TbPropertyManager] =>Toolbar.Agent
[HKLM\Software\Classes\TbHelper.TbPropertyManager.1] =>Toolbar.Agent
[HKLM\Software\Classes\TbHelper.TbRequest] =>Toolbar.Agent
[HKLM\Software\Classes\TbHelper.TbRequest.1] =>Toolbar.Agent
[HKLM\Software\Classes\TbHelper.TbTask] =>Toolbar.Agent
[HKLM\Software\Classes\TbHelper.TbTask.1] =>Toolbar.Agent
[HKLM\Software\Classes\TbHelper.ToolbarHelper] =>Toolbar.Agent
[HKLM\Software\Classes\TbHelper.ToolbarHelper.1] =>Toolbar.Agent
[HKLM\Software\Classes\TBSB01620.IEToolbar] =>Toolbar.Agent
[HKLM\Software\Classes\TBSB01620.IEToolbar.1] =>Toolbar.Agent
[HKLM\Software\Classes\TBSB01620.TBSB01620] =>Toolbar.Agent
[HKLM\Software\Classes\TBSB01620.TBSB01620.3] =>Toolbar.Agent
[HKLM\Software\Classes\Toolbar3.TBSB01620] =>Toolbar.Agent
[HKLM\Software\Classes\Toolbar3.TBSB01620.1] =>Toolbar.Agent
[HKLM\Software\Classes\Toolbar.CT2857572] =>Toolbar.Conduit
[HKLM\Software\Classes\Toolbar.CT2905330] =>Toolbar.Conduit
[HKLM\Software\Classes\Toolbar3.ContextMenuNotifier] =>Toolbar.Agent
[HKLM\Software\Classes\Toolbar3.ContextMenuNotifier.1] =>Toolbar.Agent
[HKLM\Software\Classes\Toolbar3.CustomInternetSecurityImpl] =>Toolbar.Agent
[HKLM\Software\Classes\Toolbar3.CustomInternetSecurityImpl.1] =>Toolbar.Agent
[HKLM\Software\Classes\wajam.WajamBHO] =>Toolbar.Wajam
[HKLM\Software\Classes\wajam.WajamBHO.1] =>Toolbar.Wajam
[HKLM\Software\Classes\wajam.WajamDownloader] =>Toolbar.Wajam
[HKLM\Software\Classes\wajam.WajamDownloader.1] =>Toolbar.Wajam
[HKLM\Software\Classes\AppID\BandooCore.EXE] =>Adware.Bandoo
[HKLM\Software\Classes\AppID\escort.DLL] =>PUP.Funmoods
[HKLM\Software\Classes\AppID\escortApp.DLL] =>PUP.Funmoods
[HKLM\Software\Classes\AppID\escortEng.DLL] =>PUP.Funmoods
[HKLM\Software\Classes\AppID\escorTlbr.DLL] =>PUP.Funmoods
[HKLM\Software\Wow6432Node\Classes\CrossriderApp0004479.BHO] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Classes\CrossriderApp0004479.BHO.1] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Classes\CrossriderApp0004479.Sandbox] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Classes\CrossriderApp0004479.Sandbox.1] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Classes\escort.escortIEPane] =>PUP.Funmoods
[HKLM\Software\Wow6432Node\Classes\escort.escortIEPane.1] =>PUP.Funmoods
[HKLM\Software\Wow6432Node\Classes\escort.escrtBtn.1] =>PUP.Funmoods
[HKLM\Software\Wow6432Node\Classes\SearchQUIEHelper.DNSGuard] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Classes\SearchQUIEHelper.DNSGuard.1] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Classes\TbHelper.TbDownloadManager] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TbHelper.TbDownloadManager.1] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TbHelper.TbPropertyManager] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TbHelper.TbPropertyManager.1] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TbHelper.TbRequest] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TbHelper.TbRequest.1] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TbHelper.TbTask] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TbHelper.TbTask.1] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TbHelper.ToolbarHelper] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TbHelper.ToolbarHelper.1] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TBSB01620.IEToolbar] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TBSB01620.IEToolbar.1] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TBSB01620.TBSB01620] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\TBSB01620.TBSB01620.3] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\Toolbar3.TBSB01620] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\Toolbar3.TBSB01620.1] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\Toolbar.CT2857572] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Classes\Toolbar.CT2905330] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Classes\Toolbar3.ContextMenuNotifier] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\Toolbar3.ContextMenuNotifier.1] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\Toolbar3.CustomInternetSecurityImpl] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\Toolbar3.CustomInternetSecurityImpl.1] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Classes\wajam.WajamBHO] =>Toolbar.Wajam
[HKLM\Software\Wow6432Node\Classes\wajam.WajamBHO.1] =>Toolbar.Wajam
[HKLM\Software\Wow6432Node\Classes\wajam.WajamDownloader] =>Toolbar.Wajam
[HKLM\Software\Wow6432Node\Classes\wajam.WajamDownloader.1] =>Toolbar.Wajam
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011441179}] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Classes\CLSID\{11111111-1111-1111-1111-110011441179}] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Classes\CLSID\{22222222-2222-2222-2222-220022442279}] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Classes\AppID\BandooCore.EXE] =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Classes\AppID\escort.DLL] =>PUP.Funmoods
[HKLM\Software\Wow6432Node\Classes\AppID\escortApp.DLL] =>PUP.Funmoods
[HKLM\Software\Wow6432Node\Classes\AppID\escortEng.DLL] =>PUP.Funmoods
[HKLM\Software\Wow6432Node\Classes\AppID\escorTlbr.DLL] =>PUP.Funmoods
[HKLM\Software\Wow6432Node\Classes\AppID\TbHelper.EXE] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011441179}] =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110011441179}] =>PUP.CrossRider
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BA71D41F6CC0B6247B05D473850A8AEA] =>Adware.Boxore^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC] =>Adware.Boxore^
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar]:{30F9B915-B755-4826-820B-08FBA6BD249D} =>Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]:Browser Infrastructure Helper =>PUP.Software.Updater
C:\Program Files (x86)\Ask.com =>Toolbar.AskBar
C:\Program Files (x86)\Babylon =>Toolbar.Babylon
C:\Program Files (x86)\BabylonToolbar =>Toolbar.Babylon
C:\Program Files (x86)\Boxore =>Adware.Boxore
C:\Program Files (x86)\BrowserCompanion =>PUP.Blabbers
C:\Program Files (x86)\Conduit =>Toolbar.Conduit
C:\Program Files (x86)\ConduitEngine =>Toolbar.Conduit
C:\Program Files (x86)\GamesBar =>Adware.GamesBar
C:\Program Files (x86)\Giant Savings =>Adware.VidSaver
C:\Program Files (x86)\IMinent Toolbar =>Adware.IMBooster
C:\Program Files (x86)\OfferBox =>PUP.OfferBox
C:\Program Files (x86)\Software =>Adware.Boxore
C:\Program Files (x86)\Windows Searchqu Toolbar =>Adware.Bandoo
C:\Program Files (x86)\OApps =>Toolbar.Agent
C:\ProgramData\Babylon =>Toolbar.Babylon
C:\ProgramData\GamesBar =>Adware.GamesBar
C:\ProgramData\IBUpdaterService =>Adware.IncrediBar
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Babylon =>Toolbar.Babylon
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GamesBar =>Adware.GamesBar
C:\Users\Vivie\AppData\Roaming\Babylon =>Toolbar.Babylon
C:\Users\Vivie\AppData\Roaming\BrowserCompanion =>PUP.Blabbers
C:\Users\Vivie\AppData\Roaming\OfferBox =>PUP.OfferBox
C:\Users\Vivie\AppData\Local\Babylon =>Toolbar.Babylon
C:\Users\Vivie\AppData\Local\Conduit =>Toolbar.Conduit
C:\Users\Vivie\AppData\Local\Giant Savings =>Adware.VidSaver
C:\Users\Vivie\AppData\Local\Linkury =>Hijacker.SmartBar
C:\Users\Vivie\AppData\Local\Smartbar =>Hijacker.SmartBar
C:\Users\Vivie\AppData\Local\Software =>Adware.Boxore
C:\Users\Vivie\AppData\LocalLow\AskToolbar =>Toolbar.AskTBar
C:\Users\Vivie\AppData\LocalLow\bbrs_002.tb =>PUP.Blabbers
C:\Users\Vivie\AppData\LocalLow\Conduit =>Toolbar.Conduit
C:\Users\Vivie\AppData\LocalLow\ConduitEngine =>Toolbar.Conduit
C:\Users\Vivie\AppData\LocalLow\PriceGong =>Adware.PriceGong
C:\Users\Vivie\AppData\LocalLow\searchqutoolbar =>Adware.Bandoo
C:\Users\Vivie\AppData\Local\Temp\AskSearch =>Toolbar.AskBarDis
C:\Users\Vivie\AppData\Local\Temp\Iminent =>Adware.IMBooster
C:\Users\Vivie\AppData\Local\Temp\Smartbar =>Hijacker.SmartBar
C:\Users\Vivie\AppData\Local\Google\Chrome\User Data\Default\Extensions\kincjchfokkeneeofpeefomkikfkiedl =>PUP.FCTPlugin
C:\Users\Vivie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbpohikckhbcljgombipcdoinkaedlfa =>Spyware.SmartDisplay
C:\Users\Vivie\AppData\Roaming\Mozilla\Firefox\Profiles\y6jc2wt2.default\searchqutoolbar =>Adware.Bandoo
C:\Users\Vivie\AppData\Roaming\Mozilla\Firefox\Profiles\y6jc2wt2.default\SearchPlugins\conduit.xml =>Toolbar.Conduit
C:\Users\Vivie\AppData\Roaming\Mozilla\Firefox\Profiles\y6jc2wt2.default\SearchPlugins\SearchquWebSearch.xml =>Adware.Bandoo
C:\Users\Vivie\AppData\Local\Temp\wajam_install.exe =>Toolbar.Wajam
C:\Users\Vivie\AppData\Local\Temp\blabbers-ff-le.xpi =>PUP.Blabbers
C:\Users\Vivie\Desktop\BandooV6.exe =>Adware.Bandoo
~ Additionnel Scan: 299490 Items scanned in 00mn 49s



---\\ Product Upgrade Codes (O90)
O90 - PUC: "482AA67AD25E6E74E9F48BD5FBE8533C" . (.IMinent Toolbar.) -- C:\Documents and Settings\CATA\My Documents\My Received Files\icon.ico
O90 - PUC: "70BB52E0BE26F67478CFA64F62BA50E9" . (.Boxore Client.) -- C:\Windows\Installer\{0E25BB07-62EB-476F-87FC-6AF426AB059E}\boxore.ico
O90 - PUC: "A28B4D68DEBAA244EB686953B7074FEF" . (.Avira SearchFree Toolbar plus Web Protection.) -- c:\program files (x86)\ask.com\cb_fb12.ico
O90 - PUC: "E17A8F77515323848B2BF2E1BD2D0E1F" . (.Bing Bar.) -- C:\Windows\Installer\{77F8A71E-3515-4832-B8B2-2F1EDBD2E0F1}\icon_installer_ico
~ Update Products: 102 Legitimates Filtered in 00mn 00s



---\\ Etat g�n�ral des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SR - | Auto 11/05/2013 65640 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SS - | Demand 16/06/2013 256904 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SR - | Auto 01/04/2013 86752 | (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
SR - | Auto 01/04/2013 110816 | (AntiVirService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
SR - | Auto 13/05/2013 562744 | (AntiVirWebService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.exe
SS - | Auto 21/12/2012 57008 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 09/05/2013 46808 | (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
SS - | Demand 28/02/2011 183560 | (BBSvc) . (.Microsoft Corporation..) - C:\Program Files (x86)\Microsoft\BingBar\BBSvc.exe
SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SS - | Auto 19/02/2011 136176 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 19/02/2011 136176 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 24/08/2012 194032 | (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
SR - | Demand 20/02/2013 641352 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SR - | Auto 22/01/2012 124832 | (MsgPlusService) . (.Yuna Software.) - C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\MsgPlusForS =>Adware.IMBooster0320 | (nvUpdatusService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu =>Adware.Boxorervice\OUCore.exe
SR - | Auto 05/08/2010 583640 | (PCToolsSSDMonitorSvc) . (.PC Tools.) - C:\Program Files (x86)\Common Fil =>Toolbar.AVGSearch\BingBar\SeaPort.exe
SS - | Auto 01/03/2013 161384 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SR - | Auto 18/01/2013 383264 | (Stereo Service) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
SS - | Auto 23/09/2012 139576 | (supdate) . (.Boxore OU..) - C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe
SR - | Auto 01/06/2011 2337144 | (TeamViewer6) . (.TeamViewer GmbH.) - C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
SR - | Auto 05/10/2012 109064 | (WajamUpdater) . (.Wajam.) - C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe
SS - | Demand 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe
SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe