Publicité
Publicité
Format du document : text/plain
Prévisualisation
���������� | Shortcut_Module | g3n-h@ckm@n | 18.03.2014.1
����� XP | Vista | 7 | 8 - 32/64 bits ����� - Start 11:42:56 - 18/03/2014
Mis � jour le : 18/03/2014 | 00.30 par g3n-h@ckm@n
Contact : http://www.sosvirus.net
Boot : Normal
Syst�me : Windows 7 Home Premium (64 bits) HomePremium Service Pack 1
M�moire RAM = Total (MB) : 4054 | Libre (MB) : 1574
Pagefile = Total (MB) : 8106 | Libre (MB) : 5086
Virtuelle = Total (MB) : 4194 | Libre (MB) : 4013
Registre sauvegard� , pour restaurer : C:\Shortcut_Module\Save\Clean\ERDNT.exe
���������� | Mises � jour Windows
Aucune mise � jour d�tect�e !!!
���������� | Navigateurs
IE : 11.0.9600.16521 (� Microsoft Corporation. Tous droits r�serv�s.)
FF : 27.0.1.5156 (�Firefox and Mozilla Developers; available under the MPL 2 license.)
GC : 33.0.1750.154 (Copyright 2012 Google Inc. All rights reserved.)
���������� | Processus tu�s
820 | C:\Windows\system32\nvvsvc.exe (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 327.02.) - (8.17.13.2702) -> "C:\Windows\system32\nvvsvc.exe"
880 | C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) - (7.17.13.2702) -> "C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
1328 | C:\Windows\system32\WLANExt.exe (.Microsoft Corporation - Infrastructure d�extensibilit� pour les services r�seau Windows sans fil 802.11.) - (6.1.7600.16385) -> C:\Windows\system32\WLANExt.exe 1820672
1404 | C:\Windows\System32\spoolsv.exe (.Microsoft Corporation - Application sous-syst�me spouleur.) - (6.1.7601.17777) -> C:\Windows\System32\spoolsv.exe
1604 | C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (.NVIDIA Corporation - NVIDIA User Experience Driver Component.) - (8.17.13.2702) -> "C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
1612 | C:\Windows\system32\nvvsvc.exe (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 327.02.) - (8.17.13.2702) -> C:\Windows\system32\nvvsvc.exe -session -first
1800 | C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - (1.701.3.3014) -> "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
1876 | C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe (.Samsung - AllShareFrameworkManagerDMS Monitoring DMS Service.) - (1.3.0.6) -> "C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe"
1912 | C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe (.Samsung - AllShareFrameworkDMS.) - (1.3.0.23) -> "C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe"
1984 | C:\Program Files (x86)\Launch Manager\dsiwmis.exe (.Dritek System Inc. - Dritek WMI Service.) - (2.1.0.297) -> "C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
1152 | C:\Program Files (x86)\Acer\Registration\GregHSRW.exe (.Acer Incorporated - Global Registration Service.) - (1.0.2001.0) -> "C:\Program Files (x86)\Acer\Registration\GregHSRW.exe"
508 | C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE (. - Inkjet Printer/Scanner/Fax Extended Survey Program Service.) - (4.0.0.0) -> "C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE"
2060 | C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (.Intel Corporation - Local Manageability Service.) - (6.0.30.1202) -> "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
2092 | C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - (1.70.0.0) -> "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe"
2188 | C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe (.NewTech Infosystems, Inc. - Backup Manager Module.) - (2.0.0.55) -> "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe"
2220 | C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe (.NewTech Infosystems, Inc. - NTI Backup Now 5 SchedulerSvc NT Service.) - (5.1.2.610) -> "C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe"
2260 | C:\Program Files (x86)\PC Tools Firewall Plus\FWService.exe (.PC Tools - PC Tools Firewall Plus service.) - (7.0.0.121) -> "C:\Program Files (x86)\PC Tools Firewall Plus\FWService.exe"
2352 | C:\Program Files\Samsung\Samsung Link\Samsung Link.exe (.Copyright 2013 SAMSUNG - Samsung Link Service.) - (1.8.0.5792) -> "C:\Program Files\Samsung\Samsung Link\Samsung Link.exe"
2412 | C:\Program Files\Samsung\Samsung Link\Samsung Link.exe (.Copyright 2013 SAMSUNG - Samsung Link Service.) - (1.8.0.5792) -> "C:\Program Files\Samsung\Samsung Link\Samsung Link.exe" "Samsung Link Service" __i4j_restart
2636 | C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe (.TuneUp Software - TuneUp Utilities Service.) - (9.0.6000.10) -> "C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe"
2128 | C:\Program Files (x86)\Twonky\TwonkyServer\twonkyproxy.exe (. - .) - (0.0.0.0) -> "C:\Program Files (x86)\Twonky\TwonkyServer\twonkyproxy.exe" -start
2184 | C:\Program Files (x86)\Twonky\TwonkyServer\twonkywebdav.exe (. - .) - (0.0.0.0) -> "C:\Program Files (x86)\Twonky\TwonkyServer\twonkywebdav.exe" -start
2624 | C:\Program Files\Acer\Acer Updater\UpdaterService.exe (.Acer - Acer Update Service.) - (1.0.0.6) -> "C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
2956 | C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (.Microsoft Corp. - Microsoft� Windows Live ID Service.) - (7.250.4232.0) -> "C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
2856 | C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (.Intel Corporation - IAStorDataSvc.) - (9.5.6.1002) -> "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
3416 | C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (.Microsoft Corp. - Microsoft� Windows Live ID Service Monitor.) - (7.250.4232.0) -> WLIDSvcM.exe 2956
4224 | C:\Windows\system32\taskhost.exe (.Microsoft Corporation - Processus h�te pour T�ches Windows.) - (6.1.7601.18010) -> "taskhost.exe"
4564 | C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - (1.70.0.0) -> "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
4728 | C:\Windows\Explorer.EXE (.Microsoft Corporation - Explorateur Windows.) - (6.1.7601.17514) -> C:\Windows\Explorer.EXE
3648 | C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (.NVIDIA Corporation - NVIDIA Settings.) - (7.17.13.2702) -> "C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
4288 | C:\Windows\System32\rundll32.exe (.Microsoft Corporation - Processus h�te Windows (Rundll32).) - (6.1.7600.16385) -> C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
1556 | C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) - (1.0.0.465) -> "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
3212 | C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) - (14.0.19.0) -> "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
4012 | C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe (.Copyright 2013 SAMSUNG - Samsung Link Tray Agent.) - (1.8.0.5792) -> "C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe"
4636 | C:\Program Files (x86)\Stardock\CursorFX\CursorFX.exe (.Stardock Corporation - CursorFX.) - (2.0.0.1) -> "C:\Program Files (x86)\Stardock\CursorFX\CursorFX.exe"
4812 | C:\Program Files\Windows Sidebar\sidebar.exe (.Microsoft Corporation - Gadgets du Bureau Windows.) - (6.1.7601.17514) -> "C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
4920 | C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (.Synaptics Incorporated - Synaptics Pointing Device Helper.) - (14.0.19.0) -> "C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
4708 | C:\Program Files (x86)\RocketDock\RocketDock.exe (. - .) - (0.0.0.0) -> "C:\Program Files (x86)\RocketDock\RocketDock.exe"
3844 | C:\Program Files (x86)\SFR\Kit\9props.exe (.SFR - Propri�t�s de la connexion SFR.) - (10.6.29.0) -> "C:\Program Files (x86)\SFR\Kit\9props.exe" /trayicon
2936 | C:\Users\Devilxangel\Desktop\TaskDock\TaskDock.exe (.Villain - Turns your taskbar's centering in to a dock-like centering.) - (1.0.0.0) -> "C:\Users\Devilxangel\Desktop\TaskDock\TaskDock.exe"
3956 | C:\Program Files\Rainmeter\Rainmeter.exe (. - .) - (2.3.3.1522) -> "C:\Program Files\Rainmeter\Rainmeter.exe"
712 | C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (.Intel Corporation - IAStorIcon.) - (9.5.6.1002) -> "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
3192 | C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe (.Egis Technology Inc. - EgisUpdate Release Application.) - (1.0.14.1021) -> "C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe"
4608 | C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe (.NewTech Infosystems, Inc. - Acer Backup Manager.) - (2.0.0.57) -> "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k
4764 | C:\Program Files (x86)\Launch Manager\LManager.exe (.Dritek System Inc. - Launch Manager Keyboard Application.) - (4.0.2.297) -> "C:\Program Files (x86)\Launch Manager\LManager.exe"
4604 | C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe (.PC Tools - PC Tools Firewall GUI.) - (7.0.0.123) -> "C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe" -s
2908 | C:\Program Files (x86)\Twonky\TwonkyServer\twonkytray.exe (.PacketVideo - Twonky Tray Application.) - (6.1.0.0) -> "C:\Program Files (x86)\Twonky\TwonkyServer\twonkytray.exe"
1040 | C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (.Dritek System Inc. - MMDx64Fx Application.) - (1.0.0.828) -> "C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
1180 | C:\Program Files (x86)\Launch Manager\LMworker.exe (.Dritek System Inc. - Launch Manager Worker.) - (1.2.0.297) -> "C:\Program Files (x86)\Launch Manager\LMworker.exe"
5288 | C:\Windows\system32\wbem\unsecapp.exe (.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) - (6.1.7600.16385) -> C:\Windows\system32\wbem\unsecapp.exe -Embedding
3692 | C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (.NVIDIA Corporation - NVIDIA Settings Update Manager.) - (1.14.17.0) -> "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
6048 | C:\Program Files\Windows Media Player\wmpnetwk.exe (.Microsoft Corporation - Service Partage r�seau du Lecteur Windows Media.) - (12.0.7601.17514) -> "C:\Program Files\Windows Media Player\wmpnetwk.exe"
2492 | C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (.Intel Corporation - User Notification Service.) - (6.0.0.1202) -> "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
5508 | C:\Program Files (x86)\Mozilla Firefox\firefox.exe (.Mozilla Corporation - Firefox.) - (27.0.1.5156) -> "C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
3496 | C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe (.Mozilla Corporation - Plugin Container for Firefox.) - (27.0.1.5156) -> "C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=5508.1526d000.563072432 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 5508 "\\.\pipe\gecko-crash-server-pipe.5508" plugin
6076 | C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe (.Adobe Systems, Inc. - Adobe Flash Player 12.0 r0.) - (12.0.0.77) -> "C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe" --proxy-stub-channel=Flash3496.6596C768.30060 --host-broker-channel=Flash3496.6596C768.3208 --host-pid=3496 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll"
1124 | C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe (.Adobe Systems, Inc. - Adobe Flash Player 12.0 r0.) - (12.0.0.77) -> "C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe" --channel=6076.0036F8B0.916431320 --proxy-stub-channel=Flash3496.6596C768.30060 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll" --host-npapi-version=27 --type=renderer
6592 | C:\Windows\servicing\TrustedInstaller.exe (.Microsoft Corporation - Programme d�installation pour les modules Windows.) - (6.1.7601.17514) -> C:\Windows\servicing\TrustedInstaller.exe
���������� | Processus d�marr�s
[14/07/2009 00:36:49] - 560 | C:\Windows\system32\wininit.exe (.Microsoft Corporation - Application de d�marrage de Windows.) - (6.1.7600.16385) -> wininit.exe [96256 Ko]
[14/07/2009 00:19:28] - 752 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) -> C:\Windows\system32\svchost.exe -k DcomLaunch [20992 Ko]
[14/07/2009 00:19:28] - 932 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) -> C:\Windows\system32\svchost.exe -k RPCSS [20992 Ko]
[14/07/2009 00:19:28] - 1008 | C:\Windows\System32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) -> C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted [20992 Ko]
[14/07/2009 00:19:28] - 364 | C:\Windows\System32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) -> C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [20992 Ko]
[14/07/2009 00:19:28] - 484 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) -> C:\Windows\system32\svchost.exe -k LocalService [20992 Ko]
[14/07/2009 00:19:28] - 704 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) -> C:\Windows\system32\svchost.exe -k netsvcs [20992 Ko]
[14/07/2009 00:19:28] - 1128 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) -> C:\Windows\system32\svchost.exe -k GPSvcGroup [20992 Ko]
[14/07/2009 00:19:28] - 1240 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) -> C:\Windows\system32\svchost.exe -k NetworkService [20992 Ko]
[21/11/2012 17:06:45] - 1432 | C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - (14.0.3.336) -> "C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe" [440400 Ko]
[14/07/2009 00:19:28] - 1520 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) -> C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork [20992 Ko]
[21/11/2012 17:06:44] - 1920 | C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - (14.0.3.336) -> "C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe" [440400 Ko]
[14/07/2009 00:19:28] - 2032 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) -> C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [20992 Ko]
[11/09/2012 04:13:56] - 2156 | C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - (1.70.0.0) -> "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe" [701512 Ko]
[14/07/2009 00:19:28] - 2520 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) -> C:\Windows\system32\svchost.exe -k imgsvc [20992 Ko]
[21/11/2012 17:06:44] - 3880 | C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (.Avira Operations GmbH & Co. KG - AntiVir shadow copy service.) - (14.0.2.180) -> "C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_00000780 [601656 Ko]
[14/07/2009 00:19:28] - 3576 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) -> C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted [20992 Ko]
[24/06/2012 10:49:35] - 3816 | C:\Windows\system32\wbem\wmiprvse.exe (.Microsoft Corporation - WMI Provider Host.) - (6.1.7601.17514) -> C:\Windows\system32\wbem\wmiprvse.exe [257536 Ko]
[21/11/2012 17:06:44] - 1888 | C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (.Avira Operations GmbH & Co. KG - Antivirus System Tray Tool (Desktop).) - (14.0.3.332) -> "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min [689744 Ko]
[24/06/2012 10:49:52] - 6048 | C:\Program Files\Windows Media Player\wmpnetwk.exe (.Microsoft Corporation - Service Partage r�seau du Lecteur Windows Media.) - (12.0.7601.17514) -> "C:\Program Files\Windows Media Player\wmpnetwk.exe" [1525248 Ko]
[14/07/2009 00:19:28] - 5708 | C:\Windows\System32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) -> C:\Windows\System32\svchost.exe -k LocalServicePeerNet [20992 Ko]
[14/02/2014 11:05:42] - 5508 | C:\Program Files (x86)\Mozilla Firefox\firefox.exe (.Mozilla Corporation - Firefox.) - (27.0.1.5156) -> "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" [275568 Ko]
[21/11/2012 17:06:44] - 6652 | C:\program files (x86)\avira\antivir desktop\avcenter.exe (.Avira Operations GmbH & Co. KG - Antivirus Control Center (Desktop).) - (14.0.3.332) -> "C:\program files (x86)\avira\antivir desktop\avcenter.exe" [669776 Ko]
[18/03/2014 11:42:02] - 6760 | C:\Users\Devilxangel\Downloads\Shortcut_Module.exe (. - Shortcut_Module.) - (18.3.2014.1) -> "C:\Users\Devilxangel\Downloads\Shortcut_Module.exe" [2173952 Ko]
[24/06/2012 10:49:35] - 6928 | C:\Windows\system32\wbem\wmiprvse.exe (.Microsoft Corporation - WMI Provider Host.) - (6.1.7601.17514) -> C:\Windows\system32\wbem\wmiprvse.exe [257536 Ko]
[09/07/2012 19:33:38] - 5868 | C:\Program Files (x86)\Twonky\TwonkyServer\twonkyproxy.exe (. - .) - (0.0.0.0) -> "C:\Program Files (x86)\Twonky\TwonkyServer\twonkyproxy.exe" -start [545608 Ko]
[09/07/2012 19:33:36] - 3740 | C:\Program Files (x86)\Twonky\TwonkyServer\twonkywebdav.exe (. - .) - (0.0.0.0) -> "C:\Program Files (x86)\Twonky\TwonkyServer\twonkywebdav.exe" -start [271176 Ko]
���������� | Services
Supprim� avec succ�s : HKLM\..\ControlSet001\Services\FLEXnet Licensing Service : "C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe"
Supprim� avec succ�s : HKLM\..\ControlSet002\Services\FLEXnet Licensing Service : "C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe"
���������� | Hosts
C:\Windows\System32\Drivers\etc\hosts : Remis a z�ro avec succ�s
���������� | Registre
Supprim� avec succ�s : [64]HKLM\Software\Classes\COMCTL.Toolbar
Supprim� avec succ�s : [64]HKLM\Software\Classes\COMCTL.Toolbar.1
Supprim� avec succ�s : [64]HKLM\Software\Classes\Google.OneClickCtrl.9
Supprim� avec succ�s : [64]HKLM\Software\Classes\Google.OneClickProcessLauncherMachine.1.0
Supprim� avec succ�s : [64]HKLM\Software\Classes\SVRDownloadButton.DownloadSitesFilter
Supprim� avec succ�s : [64]HKLM\Software\Classes\Google.OneClickProcessLauncherMachine
Supprim� avec succ�s : [64]HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\liveupdate.exe : C:\Program Files (x86)\NewTech Infosystems\NTI Media Maker 8\LiveUpdate\liveupdate.exe
Supprim� avec succ�s : [64]HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\QuickTimeUpdater.exe : C:\PROGRA~2\QUICKT~1\QuickTimeUpdater.exe
Supprim� avec succ�s : [64]HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Microsoft-Windows-CertificateServicesClient : {73370bd6-85e5-430b-b60a-fea1285808a7}
Supprim� avec succ�s : [64]HKLM\Software\Microsoft\Tracing\giant savings-bg_RASAPI32
Supprim� avec succ�s : [64]HKLM\Software\Microsoft\Tracing\GoogleToolbarInstaller_updater_signed_RASAPI32
Supprim� avec succ�s : [64]HKLM\Software\Microsoft\Tracing\GoogleToolbarManager_F91D44FAA5479127_RASAPI32
Supprim� avec succ�s : [64]HKLM\Software\Microsoft\Tracing\GoogleToolbarNotifier_RASAPI32
Supprim� avec succ�s : [64]HKLM\Software\Microsoft\Tracing\OneClick_RASAPI32
Supprim� avec succ�s : [64]HKLM\Software\Microsoft\Tracing\PerformanceOptimizer_RASAPI32
Supprim� avec succ�s : [64]HKLM\Software\Microsoft\Tracing\PMMdatamgr_RASAPI32
Supprim� avec succ�s : [64]HKLM\Software\Microsoft\Tracing\giant savings-bg_RASMANCS
Supprim� avec succ�s : [64]HKLM\Software\Microsoft\Tracing\GoogleToolbarInstaller_updater_signed_RASMANCS
Supprim� avec succ�s : [64]HKLM\Software\Microsoft\Tracing\GoogleToolbarNotifier_RASMANCS
Supprim� avec succ�s : [64]HKLM\Software\Microsoft\Tracing\PerformanceOptimizer_RASMANCS
Supprim� avec succ�s : [64]HKLM\Software\Microsoft\Tracing\PMMdatamgr_RASMANCS
Supprim� avec succ�s : [64]HKLM\SOFTWARE\GoforFiles
Supprim� avec succ�s : [32]HKLM\SOFTWARE\SpeedBit
Supprim� avec succ�s : HKU\S-1-5-21-2623047520-3936694761-1895341269-1001\Software\GoforFiles
Supprim� avec succ�s : HKU\S-1-5-21-2623047520-3936694761-1895341269-1001\Software\SpeedBit
Supprim� avec succ�s : HKU\S-1-5-18\Software\AskToolbar
Supprim� avec succ�s : HKU\S-1-5-18\Software\SpeedBit
Supprim� avec succ�s : HKU\S-1-5-18\Software\AppDataLow\Software\AskToolbar
Supprim� avec succ�s : [64]HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110011441179} : C:\Program Files (x86)\Giant Savings
Supprim� avec succ�s : [64]HKLM\Software\Classes\Installer\Products\07A78D1031D4EBC498445ADA73EBD8E8 : C:\Users\DEVILX~1\AppData\Local\Temp\testnsis\
Supprim� avec succ�s : [64]HKLM\Software\Classes\Installer\Products\1af2a8da7e60d0b429d7e6453b3d0182 : C:\Users\DEVILX~1\AppData\Local\Temp\IXP000.TMP\
Supprim� avec succ�s : [64]HKLM\Software\Classes\Installer\Products\1F9ACB2AC6655084791DF7CD39837632 : c:\users\admini~1\appdata\local\temp\airfcc5.tmp\
Supprim� avec succ�s : [64]HKLM\Software\Classes\Installer\Products\487EA05EEBAFAD641A8FB7B665CD2BE2 : C:\Users\ADMINI~1\AppData\Local\Temp\{B7556FB6-BDF7-424F-A479-0E7DFE81324E}\
Supprim� avec succ�s : [64]HKLM\Software\Classes\Installer\Products\4AFCE782A91734120AB96D1AD25EE404 : C:\Users\Administrator\AppData\Local\Temp\fla12C6.tmp\
Supprim� avec succ�s : [64]HKLM\Software\Classes\Installer\Products\9CA6158A1FAA9F747966302E4DDCCB8F : C:\OEM\Preload\Autorun\APP\PowerDVD v9.0\
Supprim� avec succ�s : [64]HKLM\Software\Classes\Installer\Products\c1c4f01781cc94c4c8fb1542c0981a2a : C:\Windows\TEMP\IXP000.TMP\
Supprim� avec succ�s : [64]HKLM\Software\Classes\Installer\Products\2580801CE560199429063F57E6C31C28 : C:\Users\DEVILX~1\AppData\Local\Temp\miaA41C.tmp\data\
Supprim� avec succ�s : [32]HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\178B0BC2C3D15A951A024572D332152E : C:\Program Files (x86)\Calibre2\resources\viewer\mathjax\jax\output\SVG\autoload\annotation-xml.js
Supprim� avec succ�s : [32]HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2BDB682CD036D545DA33637BC155E194 : C:\Program Files (x86)\Calibre2\resources\quick_start.epub
Supprim� avec succ�s : [32]HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\72798142C6A7CA8AEAFB493E6CA75C3D : C?\Users\DEVILX~1\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAFileUpdate.dll
Supprim� avec succ�s : [32]HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BB790271EE4BE698FFC0E8B57136B94F : C?\Program Files (x86)\EgisTec Egis Software Update\res\images\LiveUpdate.ico
Supprim� avec succ�s : [32]HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC : 02:\Software\Boxore\BoxoreClient\name
Supprim� avec succ�s : HKU\S-1-5-21-2623047520-3936694761-1895341269-1001\Software\Microsoft\Windows\CurrentVersion\Uninstall\GoforFiles : "C:\Program Files (x86)\GoforFiles\uninstall.exe"
���������� | IFEO
���������� | Dossiers
Supprim� avec succ�s : C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
Supprim� avec succ�s : C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
Supprim� avec succ�s : C:\Users\Devilxangel\Documents\Mobogenie
Supprim� avec succ�s : C:\Program Files (x86)\GoforFiles
Supprim� avec succ�s : C:\Program Files (x86)\Common Files\SpeedBit
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Local\Mobogenie
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Local\genienext
Supprim� avec succ�s : C:\Users\All Users\SpeedBit
Supprim� avec succ�s : C:\Users\All Users\Microsoft\Windows\Sqm\Upload\Private_133376_00.sqm
Supprim� avec succ�s : C:\Users\All Users\Microsoft\Windows\Sqm\Upload\Private_133376_01.sqm
Supprim� avec succ�s : C:\Users\All Users\TwonkyServer\db\cache\0646e380ce71bfc9bc679665bc13371f
Supprim� avec succ�s : C:\Users\All Users\TwonkyServer\db\cache\c4dcc7218277b57fa7a06d8748cf1fdc\02 Lollipop.wma.seek
Supprim� avec succ�s : C:\Users\Devilxangel\daemonprocess.txt
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gaiilaahiahdejapggenmdmafpmbipje_0.localstorage
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Local\Mozilla\Firefox\Profiles\gwu1nd19.default\Cache\9\02\C3375d01
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Local\Mozilla\Firefox\Profiles\gwu1nd19.default\Cache\D\4E\83375d01
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Local\Temp\jrt\datamngr_del.reg
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Azureus\active\69AE469116E337B140D8C4DEAD54728FFE51624F.dat
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Azureus\active\69AE469116E337B140D8C4DEAD54728FFE51624F.dat.bak
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Azureus\tmp\AZU5928344073320133703.tmp
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\DZ8DT2S4\secureinclude.ebaystatic.com
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#secureinclude.ebaystatic.com
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Mozilla\Firefox\Profiles\gwu1nd19.default\extensions\feca4b87-3be4-43da-a1b1-137c24220968@jetpack.xpi
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Mozilla\Firefox\Profiles\gwu1nd19.default\extensions\b1ac2ff7-8e51-4bb6-8bf8-87f1d567919a@4bb97481-aead-4c2e-a62b-e25e264651bb.com\extensionData\plugins\102_dealply_m.js
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Mozilla\Firefox\Profiles\gwu1nd19.default\extensions\b1ac2ff7-8e51-4bb6-8bf8-87f1d567919a@4bb97481-aead-4c2e-a62b-e25e264651bb.com\extensionData\plugins\13_CrossriderAppUtils.js
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Mozilla\Firefox\Profiles\gwu1nd19.default\extensions\b1ac2ff7-8e51-4bb6-8bf8-87f1d567919a@4bb97481-aead-4c2e-a62b-e25e264651bb.com\extensionData\plugins\14_CrossriderUtils.js
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Mozilla\Firefox\Profiles\gwu1nd19.default\extensions\b1ac2ff7-8e51-4bb6-8bf8-87f1d567919a@4bb97481-aead-4c2e-a62b-e25e264651bb.com\extensionData\plugins\177_crossriderDashboard.js
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Mozilla\Firefox\Profiles\gwu1nd19.default\extensions\b1ac2ff7-8e51-4bb6-8bf8-87f1d567919a@4bb97481-aead-4c2e-a62b-e25e264651bb.com\extensionData\plugins\78_CrossriderInfo.js
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Mozilla\Firefox\Profiles\gwu1nd19.default\extensions\foxmarks@kei.com\chrome\content\newuser.js
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Mozilla\Firefox\Profiles\gwu1nd19.default\lwtheme\lightweighttheme-footer-1024x768
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Mozilla\Firefox\Profiles\gwu1nd19.default\lwtheme\lightweighttheme-header-1024x768
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Mozilla\Firefox\Profiles\gwu1nd19.default\searchplugins\speedbit.xml
Supprim� avec succ�s : C:\Users\Devilxangel\Downloads\BREED Alienware\The Best 1500 Font Collection\Babylon-27-Babylon-27.ttf
Supprim� avec succ�s : C:\Users\Devilxangel\Downloads\BREED Alienware\The Best 1500 Font Collection\Babylon5-Hollow-Regular.ttf
Supprim� avec succ�s : C:\Users\Devilxangel\Downloads\BREED Alienware\The Best 1500 Font Collection\Babylon5Credits-Regular.ttf
Supprim� avec succ�s : C:\Users\Devilxangel\Downloads\BREED Alienware\The Best 1500 Font Collection\FifthCopySSK-Regular.ttf
Supprim� avec succ�s : C:\Users\Devilxangel\Downloads\Tor Browser\Browser\browser\searchplugins\eBay.xml
Supprim� avec succ�s : C:\Users\Little Devilxangel\AppData\Local\Mozilla\Firefox\Profiles\70iqy1p6.default\Cache\1\05\54337m01
Supprim� avec succ�s : C:\Users\Mini Devilxangel\AppData\Local\Mozilla\Firefox\Profiles\qk5it0ug.default\Cache\D\4C\B6337d01
Supprim� avec succ�s : C:\Users\Mini Devilxangel\AppData\Local\Mozilla\Firefox\Profiles\qk5it0ug.default\jumpListCache\ekRR3yffLgfA5v9Vt2nJaQ==.ico
Supprim� avec succ�s : C:\Users\Mini Devilxangel\AppData\Local\Mozilla\Firefox\Profiles\qk5it0ug.default\jumpListCache\LHV9IwGjE3xvJ1B6VKqdNQ==.ico
Supprim� avec succ�s : C:\Users\Mini Devilxangel\AppData\Local\Mozilla\Firefox\Profiles\qk5it0ug.default\jumpListCache\Tle2zJ8zV96zAlykTHFumw==.ico
Supprim� avec succ�s : C:\Users\Mini Devilxangel\AppData\Local\Mozilla\Firefox\Profiles\qk5it0ug.default\jumpListCache\_tGc1iwv95OhpXCPqovJ4A==.ico
Supprim� avec succ�s : C:\Users\Public\Documents\Speedbit
Supprim� avec succ�s : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\eBay-france.xml
���������� | D�tournements de raccourcis
���������� | Proxy
R�par� : [HKU\S-1-5-21-2623047520-3936694761-1895341269-1001\Software\Microsoft\Windows\CurrentVersion\Internet settings]|[WarnonZoneCrossing] : 0 -> 1
���������� | D�tournement internet Explorer
R�par� : [HKU\S-1-5-21-2623047520-3936694761-1895341269-1001\Software\Microsoft\Internet Explorer\Main]|[Search Bar] : http://g.msn.fr/0SEFRFR/SAOS02 -> http://www.google.com/
R�par� : [HKU\S-1-5-21-2623047520-3936694761-1895341269-1001\Software\Microsoft\Internet Explorer\Main]|[Start Page] : http://www.google.com -> http://www.google.com/
R�par� : [HKU\S-1-5-21-2623047520-3936694761-1895341269-1001\Software\Microsoft\Internet Explorer\Main]|[Local Page] : C:\Windows\system32\blank.htm -> C:\Windows\SysWOW64\blank.htm
R�par� : [HKU\S-1-5-21-2623047520-3936694761-1895341269-1001\Software\Microsoft\Internet Explorer\Main]|[Search Page] : http://home.microsoft.com/access/allinone.asp -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R�par� : [HKU\S-1-5-21-2623047520-3936694761-1895341269-1001\Software\Microsoft\Internet Explorer\Main]|[Default_Page_URL] : http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&m=aspire_5741g&r=27360612j425l0404z1m5t4502k02r -> http://go.microsoft.com/fwlink/?LinkId=69157
R�par� : [64][HKLM\Software\Microsoft\Internet Explorer\Search]|[SearchAssistant] : http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm -> http://www.google.com/ie
R�par� : [64][HKLM\Software\Microsoft\Internet Explorer\Main]|[Start Page] : http://go.microsoft.com/fwlink/p/?LinkId=255141 -> http://go.microsoft.com/fwlink/?LinkId=69157
R�par� : [64][HKLM\Software\Microsoft\Internet Explorer\Main]|[Default_Search_URL] : http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> http://go.microsoft.com/fwlink/?LinkId=54896
R�par� : [64][HKLM\Software\Microsoft\Internet Explorer\Main]|[Default_Page_URL] : http://go.microsoft.com/fwlink/p/?LinkId=255141 -> http://go.microsoft.com/fwlink/?LinkId=69157
R�par� : [32][HKLM\Software\Microsoft\Internet Explorer\Main]|[Start Page] : http://go.microsoft.com/fwlink/p/?LinkId=255141 -> http://go.microsoft.com/fwlink/?LinkId=69157
R�par� : [32][HKLM\Software\Microsoft\Internet Explorer\Main]|[Local Page] : C:\Windows\System32\blank.htm -> C:\Windows\SysWOW64\blank.htm
R�par� : [32][HKLM\Software\Microsoft\Internet Explorer\Main]|[Default_Page_URL] : http://go.microsoft.com/fwlink/p/?LinkId=255141 -> http://go.microsoft.com/fwlink/?LinkId=69157
���������� | D�tournement Google Chrome
[Little Devilxangel] Remis a z�ro avec succ�s : SearchURL
[Little Devilxangel] Remis a z�ro avec succ�s : Preferences
[Mini Devilxangel] Remis a z�ro avec succ�s : SearchURL
[Mini Devilxangel] Remis a z�ro avec succ�s : Preferences
[Devilxangel] Remis a z�ro avec succ�s : SearchURL
[Devilxangel] Remis a z�ro avec succ�s : Preferences
���������� | D�tournement Firefox
[Little Devilxangel] Supprim� avec succ�s : C:\Users\Little Devilxangel\AppData\Roaming\Mozilla\Firefox\Profiles\70iqy1p6.default\sessionstore.js
[Mini Devilxangel] Supprim� avec succ�s : C:\Users\Mini Devilxangel\AppData\Roaming\Mozilla\Firefox\Profiles\qk5it0ug.default\sessionstore.js
[Mini Devilxangel] Remplac� : user_pref("browser.startup.homepage", "www.googl.com"); -> user_pref("browser.startup.homepage", "http://www.google.fr");
[Mini Devilxangel] Supprim� avec succ�s : user_pref("extensions.metacert.toolbaritem.added", true);
[Devilxangel] Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Mozilla\Firefox\Profiles\gwu1nd19.default\sessionstore.js
[Devilxangel] Supprim� avec succ�s : user_pref("browser.newtabpage.blocked", "{\"amqcY8pS797RnnxoFhM3vA==\":1,\"RtamdakdyJbCv+NvvY6O4A==\":1,\"6XqLhauu2cn8H8s9SYQkLA==\":1,\"Gxos0dRysMJKtoGso8optg==\":1,\"bBfTnMPiiH+HCvPDk3Wx/g==\":1,\"SgneC/NdCQCKCE05Xefzcw==\":1,\"pf3sIwo5IQTJocSlI4dW4w==\":1,\"/GL9ZXaPdpCcTa10b8l/bQ==\":1,\"Mql1WNCmaoRIV8dLplHgLg==\":1,\"RlBSvhtAXDuMfwS2uY4m2w==\":1,\"fKn1QprEwyuGK3pSPkkc/Q==\":1,\"70BstoSOX2B6rpClEOWxfg==\":1,\"iJL25VsVsxggvoH+mrklnw==\":1,\"5Q+bZrpqt70ZA04l7mTFKQ==\":1,\"fR1JsQAemvND/YvWUQfT6w==\":1,\"rdW6s9f3AOvymiu0qs2kjA==\":1,\"p4IbzUSzoUbb11JbnrVR9w==\":1,\"tUrB4QMx9qH9ILoglOm4nw==\":1,\"bMHFghjSEhjmXQh5GoUeIQ==\":1,\"473oEHQ38bJ7teTRzQ6dKQ==\":1,\"546/y1vyXaFUovFfOnBmzA==\":1,\"JHN0uRwqOgvwjd+LPV0jxg==\":1,\"G+PfrYp17C75zXj5QGy5DA==\":1,\"q3JRZZFau71sqicErdwN/g==\":1,\"+wvA8ZwC5Px9HqukToIksA==\":1,\"hovOrh1873MmJmKdTqJgZg==\":1,\"JX4XVtNO1AMpyEutsrSywQ==\":1,\"PySBkc6LD1SFBC/aH6vDVw==\":1,\"GmVV5Y3RZqHU3J3Ng6yY8A==\":1,\"GSIh/rhq5M3xEMV+ZiXUrw==\":1,\"2o17UiRf8UF4XF3vPYQ1lg==\":1,\"L9Al4FLYns1tC0EDmZCmkQ==\":1,\"HNUWr69cRnpzGXQ1o9LvZQ==\":1,\"b75F2ljkB1/xAwsgCoSzXQ==\":1,\"AIsKAJzLJO+OwAPF76PhYw==\":1,\"jQiCSRv2kczxuPSDKswVbw==\":1,\"2cJMOZO2uX9z0oKADYGePA==\":1,\"ssrq+86iupmwi8Yu79jFMg==\":1,\"rGLIvYik8z/maRnu+YzYXw==\":1,\"9wexFwW4JEw4MnMDgneFHA==\":1,\"DYUiN81MukFj1YrWZVXHyA==\":1,\"7KMcskDQo8Z54fAIZPuxYA==\":1,\"vs7fYhBa97eVVE/qSzgX3g==\":1,\"Kkte7EWeOoqmigdvO8W/sQ==\":1,\"RiHtwvnZEF1iTEe0RhAZag==\":1,\"1xtq9J8lXy8Y0o0poxXrfw==\":1,\"JQ4G5H5UnkatAzXv1NIWaw==\":1,\"I+V+7KVxnxSTMwAm61DUMA==\":1,\"xZlyifSotpZajsjAKcOwdw==\":1,\"V+bP/Cnn7Uh2Dux50AGKuw==\":1,\"UOW5gPW8MMVr4ODOpVClSw==\":1,\"qW2V5SSM8EG3tEjKxZ1NaQ==\":1,\"w+ZDPLWAlppF9ptaniv+2w==\":1,\"phlMoR5cpxcnBAmk5JRIZA==\":1,\"ggGh/jgX+0mvH6x4qUyPGg==\":1,\"xZmE4Agb0R2q1QndcmI/Sg==\":1,\"ddBG01+BFbsVzBOvzB1qHw==\":1,\"7fZ8fHtSS2fr/Hnjwu3jCQ==\":1,\"ZHkyv6jzKTmQ76SuSEVZlg==\":1,\"7ZDRnWRtCmmmE4uywC+OLA==\":1,\"Mc4RvtiIVxqxFnYKG+neeQ==\":1,\"HnkRaz0s6mD2OduYKRA4ug==\":1,\"dTCdFjwp5z3An+g56fpuxA==\":1,\"EGIMklTW79f9X7bJNMRcMQ==\":1,\"PZVv/X58pepZcbDPN533fQ==\":1,\"tyViRIr2spjY8WAFV3BJTQ==\":1,\"Vja+kWpntnqm4lUaTE4XKQ==\":1,\"ratu48QllO6wWev+5GWVBg==\":1,\"tpNgoRJ/9Jyg8hEE0LTVDQ==\":1,\"gKMSuZODG3Civj6nDNTEWA==\":1,\"6U9ZfGaG1a8oWc48ZW6Ckw==\":1,\"CvOUq1rvTsprmNgr8UTJDg==\":1,\"mqadAuCKZeeWlgE5Gd7bTQ==\":1,\"T7L2O9emRxhANaFHYd1WEQ==\":1,\"x5tvpRwLoHT9IqON9eegAw==\":1,\"Q2u9PIs70bl1UaQfm3n5Eg==\":1,\"1tlODF+0pvrbD/uxoYw7uA==\":1,\"0wvRHZf9HyZaG6mSXPw23A==\":1,\"EiadYnqHQeMOiaDt4SFHyg==\":1,\"xqoX2cwP3idmnf6Xx7yZ5Q==\":1,\"Y89yAWpIwOnj6KOcUSseKQ==\":1,\"OGGBfJzDU8S2rKNpPvOqIw==\":1,\"pZDZd7Y+R3GziebYJq/heA==\":1,\"z21K6UebRdbtkMv8aQfwPw==\":1,\"60CMwovUVuvl8W7HAScUDw==\":1,\"/w6pmX5iiSavPPovzbI5UQ==\":1,\"aFf4kA5l//PohPmaUUjmyQ==\":1,\"hmPE+JL6f7qVHsuHn9vQvA==\":1,\"lq1P8WeD0mwdFlozra1RbA==\":1,\"EN5cZTIZL2yzYltSrz8zIA==\":1,\"5FoIXOyYZeqk+KdP0aSGDg==\":1,\"0xMpyBhmfUWPMDmXL8xO4g==\":1,\"4cRASwlja0q06VrYGLHJhA==\":1,\"711IqYZSbRv69q2+JeBC2w==\":1,\"+GnGxts5m/XODOWDQ3lvnQ==\":1,\"bRqwck8ZBQ6kekMUQ/wgtw==\":1,\"MFpdfJ85S91lb9zGN947Kg==\":1,\"qEsUj1dXMLh9Um5pOLob7g==\":1,\"I+nSKtI420Np1DtSzgD5QQ==\":1,\"2Eh6H4lmaVOFiSh/ZOzDJg==\":1,\"sCiJsTyo23pBlp4nRcZREQ==\":1,\"HOPMKYHLbKUYnsJthaw3uA==\":1,\"dupy7B1r9j+5aCAPVJyEOA==\":1,\"Ywg6FDrAC2qwRquObY/pWg==\":1,\"mMKFjTgzyFTMENjz3rgPQg==\":1,\"PnyHSNfG32bzfaMX+wylVg==\":1,\"3RuvSQPbus+wmjc3Lzovuw==\":1,\"m2G1nVksHlSJZBwsEwp8Ew==\":1,\"MFJpH+T8BWtZSS+tvlHlyw==\":1,\"snn94fG40W2x/4opKIgBmg==\":1,\"U9FBwtBkGPyOLiZdmk2rIw==\":1,\"v3WifIGXSPlJDJZYZmE+nA==\":1,\"OcyDYoHrNZkzWjYpIATZlw==\":1,\"PDRQdie0gA0U1jZk9fTHXQ==\":1,\"YaDLcDQmpwIeGgS5cbKIGQ==\":1,\"PHzCVQ2SgbAJq8TWJyIuhA==\":1,\"mGAU/ztUSSyIUb42kJoHTg==\":1,\"ItpfcdM2BAiNiGTPDcVLgQ==\":1,\"RpZBcmVqyqkeyPpqsF9KYA==\":1,\"ztvCErGT5xa9l/nrrEiDfg==\":1}");
[Devilxangel] Supprim� avec succ�s : user_pref("browser.newtabpage.pinned", "[null,null,{\"url\":\"http://du112w.dub112.mail.live.com/default.aspx\",\"title\":\"Accueil - Windows Live\"},{\"url\":\"http://france.meteofrance.com/france/meteo?PREVISIONS_PORTLET.path=previsionsdept/DEPT57\",\"title\":\"M�t�o-France \"},{\"url\":\"http://www.youtube.com/\",\"title\":\"YouTube \"},{\"url\":\"http://www.allocine.fr/\",\"title\":\"AlloCin� \"},{\"url\":\"http://www.emule-island.ru/nouveautes-emule\",\"title\":\"eMule-Island\"},{\"url\":\"http://devilsilver.labrute.fr/arene\",\"title\":\"devilsilver La Brute\"},{\"url\":\"http://my.ebay.fr/ws/eBayISAPI.dll?MyEbayBeta#GoTo240\",\"title\":\"Mon eBay\"}]");
[Devilxangel] Remplac� : user_pref("browser.startup.homepage", "http://www.shinysearch.com/myhome.php?theme=dark-angel<ext=DevilXAngel"); -> user_pref("browser.startup.homepage", "http://www.google.fr");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.cookie.CrossriderNotifier_channels.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.cookie.CrossriderNotifier_channels.value", "%7B%22app0%22%3A%22app0%22%2C%22app49074%22%3A%22app49074%22%2C%22NA%22%3A%22NA%22%2C%22FR%22%3A%22FR%22%7D");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.cookie.CrossriderNotifier_geolocation.expiration", "Sat Mar 22 2014 14:00:21 GMT+0100");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.cookie.CrossriderNotifier_geolocation.value", "%22FR%22");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.cookie.CrossriderNotifier_metadata.expiration", "Tue Mar 18 2014 14:50:29 GMT+0100");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.cookie.CrossriderNotifier_metadata.value", "%7B%22appId%22%3A49074%2C%22appName%22%3A%22The%20weDownload%20Manager%22%2C%22lastMessageId%22%3A0%2C%22nextCheck%22%3A1440%7D");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.description", "Enhance your search results with direct download links and information for apps and games.");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.internaldb.Resources_meta.value", "%7B%22extension.css%22%3A%7B%22id%22%3A479259%2C%22ver%22%3A1%2C%22status%22%3A1%2C%22name%22%3A%22extension.css%22%2C%22url%22%3A%22http%3A//resources.crossrider.com/system/resources/apps/49074/479259%22%7D%7D");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.internaldb.Resources_resource_479259.value", "%22.crossrider-nofity-34345-body-theme-white-black%20a%2C%5Cn.crossrider-nofity-34344-body-theme-white-black%20a%20%7B%5Cn%5Cttext-decoration%3A%20none%3B%5Cn%7D%5Cn%5Cn.crossrider-nofity-34345-body-theme-white-black%20a%3Ahover%2C%5Cn.crossrider-nofity-34344-body-theme-white-black%20a%3Ahover%20%7B%5Cn%5Cttext-decoration%3A%20underline%3B%5Cn%7D%5Cn%5Cn.crossrider-nofity-34345-body-theme-white-black%20a.button%2C%5Cn.crossrider-nofity-34344-body-theme-white-black%20a.button%20%7B%5Cn%5Cttext-decoration%3A%20none%3B%5Cn%7D%5Cn%5Cn.crossrider-nofity-34345-body-theme-white-black%20.button%2C%5Cn.crossrider-nofity-34344-body-theme-white-black%20.button%20%7B%5Cn%5Ctbackground%3A%20url%28http%3A//d28me8o1j6adyz.cloudfront.net/landing/main/images/buttons-green.png%3Fv%3D1373447692%29%20right%20-210px%20no-repeat%3B%5Cn%5Ctdisplay%3A%20inline-block%3B%5Cn%5Ctheight%3A%2030px%3B%5Cn%5Ctpadding-right%3A%2010px%3B%5Cn%5Cttext-decoration%3A%20none%3B%5Cn%5Ctmargin-top%3A%205px%3B%5Cn%7D%5Cn%5Cn.crossrider-nofity-34345-body-theme-white-black%20.button%20span%2C%5Cn.crossrider-nofity-34344-body-theme-white-black%20.button%20span%20%7B%5Cn%5Ctbackground%3A%20url%28http%3A//d28me8o1j6adyz.cloudfront.net/landing/main/images/buttons-green.png%3Fv%3D1373447692%29%20left%20-210px%20no-repeat%3B%5Cn%5Ctdisplay%3A%20inline-block%3B%5Cn%5Ctheight%3A%2030px%3B%5Cn%5Ctline-height%3A%2030px%3B%5Cn%5Ctpadding%3A%200%205px%200%2015px%3B%5Cn%5Ctcolor%3A%20%23fff%3B%5Cn%5Ctfloat%3A%20left%3B%5Cn%5Ctfont-size%3A%2013px%3B%5Cn%5Cttext-shadow%3A%200%201px%200%20%23585858%3B%5Cn%5Ctfont-weight%3A%20normal%3B%5Cn%7D%5Cn%5Cn.crossrider-nofity-34345-body-theme-white-black%20.button%20span%20strong%2C%5Cn.crossrider-nofity-34344-body-theme-white-black%20.button%20span%20strong%20%7B%5Cn%5Ctfont-weight%3A%20normal%3B%5Cn%5Ctfloat%3A%20left%3B%5Cn%5Ctcolor%3A%20%23fff%3B%5Cn%7D%5Cn%5Cn.crossrider-nofity-34345-body-theme-white-black%20.button%3Ahover%2C%5Cn.crossrider-nofity-34344-body-theme-white-black%20.button%3Ahover%20%7B%5Cn%5Ctbackground-position%3A%20right%20-240px%3B%5Cn%7D%5Cn%5Cn.crossrider-nofity-34345-body-theme-white-black%20.button%3Ahover%20span%2C%5Cn.crossrider-nofity-34344-body-theme-white-black%20.button%3Ahover%20span%20%7B%5Cn%5Ctbackground-position%3A%20left%20-240px%3B%5Cn%7D%5Cn%5Cn.crossrider-nofity-34345-body-theme-white-black%20.button%20small%2C%5Cn.crossrider-nofity-34344-body-theme-white-black%20.buttin%20small%20%7B%5Cn%5Ctmargin%3A%207px%200%200%2010px%3B%5Cn%5Ctbackground%3A%20url%28http%3A//d28me8o1j6adyz.cloudfront.net/landing/main/images/button-arrow-small.png%29%200%200%20no-repeat%3B%5Cn%5Ctwidth%3A%2010px%3B%5Cn%5Ctheight%3A%2016px%3B%5Cn%5Cttext-indent%3A%20-999px%3B%5Cn%5Ctdisplay%3A%20inline-block%3B%5Cn%5Ctfloat%3A%20left%3B%5Cn%7D%5Cn%5Cn.crossrider-nofity-34345-title-theme-white-black%2C%5Cn.crossrider-nofity-34344-title-theme-white-black%20%7B%5Cn%5Ctmargin-right%3A%2013px%3B%5Cn%7D%5Cn%5Cn.crossrider-nofity-34345-icon-theme-white-black%2C%5Cn.crossrider-nofity-34344-icon-theme-white-black%20%7B%5Cn%5Ctwidth%3A%2032px%20%21important%3B%5Cn%5Ctheight%3A%2032px%20%21important%3B%5Cn%5Ctmargin-top%3A%205px%3B%5Cn%7D%5Cn%5Cn.crossrider-nofity-34345-body-theme-white-black%20.info%2C%5Cn.crossrider-nofity-34344-body-theme-white-black%20.info%20%7B%5Cn%5Ctmargin-top%3A%205px%3B%5Cn%7D%5Cn%5Cn.crossrider-nofity-34345-body-theme-white-black%20.mirrors%2C%5Cn.crossrider-nofity-34344-body-theme-white-black%20.mirrors%20%7B%5Cn%5Ctmargin-top%3A%205px%3B%5Cn%5Ctpadding-left%3A%200%3B%5Cn%7D%5Cn%5Cn.crossrider-nofity-34345-body-theme-white-black%20.mirrors%20li%2C%5Cn.crossrider-nofity-34344-body-theme-white-black%20.mirrors%20li%20%7B%5Cn%5Ctdisplay%3A%20block%3B%5Cn%5Ctclear%3A%20both%3B%5Cn%5Ctmargin%3A%200%200%200%206px%3B%5Cn%7D%5Cn%5Cn.crossrider-nofity-34345-body-theme-white-black%20.mirrors%20li%20a%2C%5Cn.crossrider-nofity-34344-body-theme-white-black%20.mirrors%20li%20a%20%7B%5Cn%5Ctdisplay%3A%20block%3B%5Cn%5Ctpadding-left%3A%2022px%3B%5Cn%5Ctline-height%3A%2025px%3B%5Cn%5Ctheight%3A%2024px%3B%5Cn%5Ctwhite-space%3A%20nowrap%3B%5Cn%5Ctbackground%3A%20url%28http%3A//d28me8o1j6adyz.cloudfront.net/organic/main/images/download.png%29%20left%205px%20no-repeat%3B%5Cn%5Ctcolor%3A%20%231491cc%3B%5Cn%7D%22");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssfiles.com%22%5D%7D%2C%2250onred_s%22%3A%7B%22urls%22%3A%5B%22giganticsavings-a.akamaihd.net/loaders/%5BA-Z%2Ca-z%2C0-9%5D+/l.js%22%5D%7D%2C%2250onred_v%22%3A%7B%22urls%22%3A%5B%22beecoup-a.akamaihd.net/loaders/%5BA-Z%2Ca-z%2C0-9%5D+/l.js%22%5D%7D%2C%22revizer_s%22%3A%7B%22urls%22%3A%5B%22gim.mapopti.net%22%5D%7D%2C%22sterkly_s%22%3A%7B%22urls%22%3A%5B%22wac.edgecastcdn.net/800952/4d2cc865-d951-4ee0-addf-e4a06284de74%22%5D%7D%7D");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.bootstrappedAddons", "{\"feca4b87-3be4-43da-a1b1-137c24220968@jetpack\":{\"version\":\"0.3.0\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\feca4b87-3be4-43da-a1b1-137c24220968@jetpack.xpi\"},\"{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}\":{\"version\":\"7.0\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi\"},\"{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}\":{\"version\":\"2.1.2\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi\"}}");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.crossrider.bic", "13b0e1e9994d3a1ca97cc4ab247a0260");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.feca4b87-3be4-43da-a1b1-137c24220968@jetpack.ccode", "[\"w\",8,\"s\",2,\"r\",\"w\",52]");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.feca4b87-3be4-43da-a1b1-137c24220968@jetpack.newVer", "");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.feca4b87-3be4-43da-a1b1-137c24220968@jetpack.nextSibling", "home-button");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.feca4b87-3be4-43da-a1b1-137c24220968@jetpack.player", "ima-vfl1LZyZ5");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.feca4b87-3be4-43da-a1b1-137c24220968@jetpack.showInstruction", true);
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.installCache", "[{\"name\":\"app-global\",\"addons\":{\"{972ce4c6-7e08-4474-a285-3208198ce6fd}\":{\"descriptor\":\"C:\\\\Program Files (x86)\\\\Mozilla Firefox\\\\browser\\\\extensions\\\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\",\"mtime\":1392372348247,\"rdfTime\":1392372348172}}},{\"name\":\"app-profile\",\"addons\":{\"artur.dubovoy@gmail.com\":{\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\artur.dubovoy@gmail.com.xpi\",\"mtime\":1364707481147},\"b1ac2ff7-8e51-4bb6-8bf8-87f1d567919a@4bb97481-aead-4c2e-a62b-e25e264651bb.com\":{\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\b1ac2ff7-8e51-4bb6-8bf8-87f1d567919a@4bb97481-aead-4c2e-a62b-e25e264651bb.com\",\"mtime\":1394740268663,\"rdfTime\":1391779332701},\"feca4b87-3be4-43da-a1b1-137c24220968@jetpack\":{\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\feca4b87-3be4-43da-a1b1-137c24220968@jetpack.xpi\",\"mtime\":1380968896614},\"firedownload@mozilla.org\":{\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\firedownload@mozilla.org.xpi\",\"mtime\":1353151100085},\"foxmarks@kei.com\":{\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\foxmarks@kei.com\",\"mtime\":1340477733282,\"rdfTime\":1338489417000},\"paulsaintuzb@gmail.com\":{\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\paulsaintuzb@gmail.com.xpi\",\"mtime\":1378560740552},\"personas@christopher.beard\":{\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\personas@christopher.beard.xpi\",\"mtime\":1368774708869},\"unplug@compunach\":{\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\unplug@compunach.xpi\",\"mtime\":1348050441159},\"{0b457cAA-602d-484a-8fe7-c1d894a011ba}\":{\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\{0b457cAA-602d-484a-8fe7-c1d894a011ba}\",\"mtime\":1392372386447,\"rdfTime\":1392372386111},\"{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\":{\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi\",\"mtime\":1340724860941},\"{7a88e876-d715-4503-a7bf-a8eba13ca3f9}\":{\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\{7a88e876-d715-4503-a7bf-a8eba13ca3f9}.xpi\",\"mtime\":1340610335027},\"{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}\":{\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi\",\"mtime\":1375962186817},\"{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}\":{\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi\",\"mtime\":1343242337668}}}]");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.personas.toolbarButtonInstalled", true);
[Devilxangel] Supprim� avec succ�s : user_pref("fireshot.toolbarCreated", true);
[Devilxangel] Supprim� avec succ�s : user_pref("lightweightThemes.usedThemes", "[{\"id\":\"18983\",\"name\":\"alienware style\",\"headerURL\":\"https://addons.mozilla.org/_files/23890/aliewareskin.JPG?1242330118\",\"footerURL\":\"https://addons.mozilla.org/_files/23890/Copyofaliewareskin.JPG?1242330118\",\"textcolor\":\"#2799d6\",\"accentcolor\":\"#268fcc\",\"iconURL\":\"https://addons.mozilla.org/_files/23890/preview_small.jpg?1242330118\",\"previewURL\":\"https://addons.mozilla.org/_files/23890/preview.jpg?1242330118\",\"author\":\"ldblack\",\"updateURL\":\"https://versioncheck.addons.mozilla.org/en-US/themes/update-check/18983?src=gp\",\"version\":\"0\",\"updateDate\":1374908884824,\"installDate\":1367591337654},{\"id\":\"473283\",\"name\":\"Mozilla Firefox Persona...animated\",\"headerURL\":\"http://www.getpersonas.com/static/8/3/473283/headeranigif.png\",\"footerURL\":\"http://www.getpersonas.com/static/8/3/473283/MozillaFirefox_footer_byLisa.jpg\",\"textcolor\":\"#336666\",\"accentcolor\":\"#ffffff\",\"iconURL\":\"https://www.getpersonas.com/static/8/3/473283/preview_small.jpg\",\"previewURL\":\"https://www.getpersonas.com/static/8/3/473283/preview.jpg\",\"author\":\"LisaAtTheBeach\",\"description\":\"Mozilla Firefox logo, fox, earth, paint roller brush, paint splotches, free web browser, best Firefox persona, animated, animation\\n\\nchild friendly persona\\n\\nPersonas by LisaAtTheBeach\",\"updateURL\":\"https://www.getpersonas.com/update_check/473283\"}]");
[Devilxangel] Supprim� avec succ�s : user_pref("samfind.toolbar.layout", "just-websites");
[Devilxangel] Supprim� avec succ�s : user_pref("samfind.toolbar.topics.and.websites.opened", "31");
[Devilxangel] Supprim� avec succ�s : user_pref("smartbar.machineId", "BVVAIJTELJXUPF9P5FI6QIVWTC5QSJEV2BUPHHQOEQLOSGXCHDSQIWO0QZUYX3/Y9I8J/VSSPSS79LCK7PICAQ");
���������� | D�tournement des cl�s StartMenuInternet
R�par� : [64][HKLM\Software\Clients\StartMenuInternet\IExplore.exe\shell\open\command] : C:\Program Files\Internet Explorer\iexplore.exe -> "C:\Program Files (x86)\Internet Explorer\iexplore.exe"
���������� | AppInit_DLLs
[64][HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]|[LoadAppInit_DLLs] : 1
[32][HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]|[LoadAppInit_DLLs] : 1
���������� | D�tournement Javascript
���������� | Firewall
���������� | Fichiers temporaires
[Default User] Fichiers temporaires Supprim�s : 356 Ko
[All Users] Fichiers temporaires Supprim�s : 0 Ko
[Default] Fichiers temporaires Supprim�s : 0 Ko
[Public] Fichiers temporaires Supprim�s : 0 Ko
[Little Devilxangel] Fichiers temporaires Supprim�s : 138040 Ko
[Mini Devilxangel] Fichiers temporaires Supprim�s : 288100 Ko
[UpdatusUser] Fichiers temporaires Supprim�s : 356 Ko
[Devilxangel] Fichiers temporaires Supprim�s : 378797 Ko
Autre rapport
���������� |EOF| ���������� | 12:11:09
����� XP | Vista | 7 | 8 - 32/64 bits ����� - Start 11:42:56 - 18/03/2014
Mis � jour le : 18/03/2014 | 00.30 par g3n-h@ckm@n
Contact : http://www.sosvirus.net
Boot : Normal
Syst�me : Windows 7 Home Premium (64 bits) HomePremium Service Pack 1
M�moire RAM = Total (MB) : 4054 | Libre (MB) : 1574
Pagefile = Total (MB) : 8106 | Libre (MB) : 5086
Virtuelle = Total (MB) : 4194 | Libre (MB) : 4013
Registre sauvegard� , pour restaurer : C:\Shortcut_Module\Save\Clean\ERDNT.exe
���������� | Mises � jour Windows
Aucune mise � jour d�tect�e !!!
���������� | Navigateurs
IE : 11.0.9600.16521 (� Microsoft Corporation. Tous droits r�serv�s.)
FF : 27.0.1.5156 (�Firefox and Mozilla Developers; available under the MPL 2 license.)
GC : 33.0.1750.154 (Copyright 2012 Google Inc. All rights reserved.)
���������� | Processus tu�s
820 | C:\Windows\system32\nvvsvc.exe (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 327.02.) - (8.17.13.2702) -> "C:\Windows\system32\nvvsvc.exe"
880 | C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (.NVIDIA Corporation - Stereo Vision Control Panel API Server.) - (7.17.13.2702) -> "C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
1328 | C:\Windows\system32\WLANExt.exe (.Microsoft Corporation - Infrastructure d�extensibilit� pour les services r�seau Windows sans fil 802.11.) - (6.1.7600.16385) -> C:\Windows\system32\WLANExt.exe 1820672
1404 | C:\Windows\System32\spoolsv.exe (.Microsoft Corporation - Application sous-syst�me spouleur.) - (6.1.7601.17777) -> C:\Windows\System32\spoolsv.exe
1604 | C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (.NVIDIA Corporation - NVIDIA User Experience Driver Component.) - (8.17.13.2702) -> "C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
1612 | C:\Windows\system32\nvvsvc.exe (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 327.02.) - (8.17.13.2702) -> C:\Windows\system32\nvvsvc.exe -session -first
1800 | C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - (1.701.3.3014) -> "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
1876 | C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe (.Samsung - AllShareFrameworkManagerDMS Monitoring DMS Service.) - (1.3.0.6) -> "C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkManagerDMS.exe"
1912 | C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe (.Samsung - AllShareFrameworkDMS.) - (1.3.0.23) -> "C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AllShareFrameworkDMS.exe"
1984 | C:\Program Files (x86)\Launch Manager\dsiwmis.exe (.Dritek System Inc. - Dritek WMI Service.) - (2.1.0.297) -> "C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
1152 | C:\Program Files (x86)\Acer\Registration\GregHSRW.exe (.Acer Incorporated - Global Registration Service.) - (1.0.2001.0) -> "C:\Program Files (x86)\Acer\Registration\GregHSRW.exe"
508 | C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE (. - Inkjet Printer/Scanner/Fax Extended Survey Program Service.) - (4.0.0.0) -> "C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE"
2060 | C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (.Intel Corporation - Local Manageability Service.) - (6.0.30.1202) -> "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
2092 | C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - (1.70.0.0) -> "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe"
2188 | C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe (.NewTech Infosystems, Inc. - Backup Manager Module.) - (2.0.0.55) -> "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe"
2220 | C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe (.NewTech Infosystems, Inc. - NTI Backup Now 5 SchedulerSvc NT Service.) - (5.1.2.610) -> "C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe"
2260 | C:\Program Files (x86)\PC Tools Firewall Plus\FWService.exe (.PC Tools - PC Tools Firewall Plus service.) - (7.0.0.121) -> "C:\Program Files (x86)\PC Tools Firewall Plus\FWService.exe"
2352 | C:\Program Files\Samsung\Samsung Link\Samsung Link.exe (.Copyright 2013 SAMSUNG - Samsung Link Service.) - (1.8.0.5792) -> "C:\Program Files\Samsung\Samsung Link\Samsung Link.exe"
2412 | C:\Program Files\Samsung\Samsung Link\Samsung Link.exe (.Copyright 2013 SAMSUNG - Samsung Link Service.) - (1.8.0.5792) -> "C:\Program Files\Samsung\Samsung Link\Samsung Link.exe" "Samsung Link Service" __i4j_restart
2636 | C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe (.TuneUp Software - TuneUp Utilities Service.) - (9.0.6000.10) -> "C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe"
2128 | C:\Program Files (x86)\Twonky\TwonkyServer\twonkyproxy.exe (. - .) - (0.0.0.0) -> "C:\Program Files (x86)\Twonky\TwonkyServer\twonkyproxy.exe" -start
2184 | C:\Program Files (x86)\Twonky\TwonkyServer\twonkywebdav.exe (. - .) - (0.0.0.0) -> "C:\Program Files (x86)\Twonky\TwonkyServer\twonkywebdav.exe" -start
2624 | C:\Program Files\Acer\Acer Updater\UpdaterService.exe (.Acer - Acer Update Service.) - (1.0.0.6) -> "C:\Program Files\Acer\Acer Updater\UpdaterService.exe"
2956 | C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (.Microsoft Corp. - Microsoft� Windows Live ID Service.) - (7.250.4232.0) -> "C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
2856 | C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (.Intel Corporation - IAStorDataSvc.) - (9.5.6.1002) -> "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
3416 | C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (.Microsoft Corp. - Microsoft� Windows Live ID Service Monitor.) - (7.250.4232.0) -> WLIDSvcM.exe 2956
4224 | C:\Windows\system32\taskhost.exe (.Microsoft Corporation - Processus h�te pour T�ches Windows.) - (6.1.7601.18010) -> "taskhost.exe"
4564 | C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - (1.70.0.0) -> "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
4728 | C:\Windows\Explorer.EXE (.Microsoft Corporation - Explorateur Windows.) - (6.1.7601.17514) -> C:\Windows\Explorer.EXE
3648 | C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (.NVIDIA Corporation - NVIDIA Settings.) - (7.17.13.2702) -> "C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
4288 | C:\Windows\System32\rundll32.exe (.Microsoft Corporation - Processus h�te Windows (Rundll32).) - (6.1.7600.16385) -> C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
1556 | C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) - (1.0.0.465) -> "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
3212 | C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) - (14.0.19.0) -> "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
4012 | C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe (.Copyright 2013 SAMSUNG - Samsung Link Tray Agent.) - (1.8.0.5792) -> "C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe"
4636 | C:\Program Files (x86)\Stardock\CursorFX\CursorFX.exe (.Stardock Corporation - CursorFX.) - (2.0.0.1) -> "C:\Program Files (x86)\Stardock\CursorFX\CursorFX.exe"
4812 | C:\Program Files\Windows Sidebar\sidebar.exe (.Microsoft Corporation - Gadgets du Bureau Windows.) - (6.1.7601.17514) -> "C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
4920 | C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (.Synaptics Incorporated - Synaptics Pointing Device Helper.) - (14.0.19.0) -> "C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
4708 | C:\Program Files (x86)\RocketDock\RocketDock.exe (. - .) - (0.0.0.0) -> "C:\Program Files (x86)\RocketDock\RocketDock.exe"
3844 | C:\Program Files (x86)\SFR\Kit\9props.exe (.SFR - Propri�t�s de la connexion SFR.) - (10.6.29.0) -> "C:\Program Files (x86)\SFR\Kit\9props.exe" /trayicon
2936 | C:\Users\Devilxangel\Desktop\TaskDock\TaskDock.exe (.Villain - Turns your taskbar's centering in to a dock-like centering.) - (1.0.0.0) -> "C:\Users\Devilxangel\Desktop\TaskDock\TaskDock.exe"
3956 | C:\Program Files\Rainmeter\Rainmeter.exe (. - .) - (2.3.3.1522) -> "C:\Program Files\Rainmeter\Rainmeter.exe"
712 | C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (.Intel Corporation - IAStorIcon.) - (9.5.6.1002) -> "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
3192 | C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe (.Egis Technology Inc. - EgisUpdate Release Application.) - (1.0.14.1021) -> "C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe"
4608 | C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe (.NewTech Infosystems, Inc. - Acer Backup Manager.) - (2.0.0.57) -> "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k
4764 | C:\Program Files (x86)\Launch Manager\LManager.exe (.Dritek System Inc. - Launch Manager Keyboard Application.) - (4.0.2.297) -> "C:\Program Files (x86)\Launch Manager\LManager.exe"
4604 | C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe (.PC Tools - PC Tools Firewall GUI.) - (7.0.0.123) -> "C:\Program Files (x86)\PC Tools Firewall Plus\FirewallGUI.exe" -s
2908 | C:\Program Files (x86)\Twonky\TwonkyServer\twonkytray.exe (.PacketVideo - Twonky Tray Application.) - (6.1.0.0) -> "C:\Program Files (x86)\Twonky\TwonkyServer\twonkytray.exe"
1040 | C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (.Dritek System Inc. - MMDx64Fx Application.) - (1.0.0.828) -> "C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
1180 | C:\Program Files (x86)\Launch Manager\LMworker.exe (.Dritek System Inc. - Launch Manager Worker.) - (1.2.0.297) -> "C:\Program Files (x86)\Launch Manager\LMworker.exe"
5288 | C:\Windows\system32\wbem\unsecapp.exe (.Microsoft Corporation - Sink to receive asynchronous callbacks for WMI client application.) - (6.1.7600.16385) -> C:\Windows\system32\wbem\unsecapp.exe -Embedding
3692 | C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (.NVIDIA Corporation - NVIDIA Settings Update Manager.) - (1.14.17.0) -> "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"
6048 | C:\Program Files\Windows Media Player\wmpnetwk.exe (.Microsoft Corporation - Service Partage r�seau du Lecteur Windows Media.) - (12.0.7601.17514) -> "C:\Program Files\Windows Media Player\wmpnetwk.exe"
2492 | C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (.Intel Corporation - User Notification Service.) - (6.0.0.1202) -> "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
5508 | C:\Program Files (x86)\Mozilla Firefox\firefox.exe (.Mozilla Corporation - Firefox.) - (27.0.1.5156) -> "C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
3496 | C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe (.Mozilla Corporation - Plugin Container for Firefox.) - (27.0.1.5156) -> "C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=5508.1526d000.563072432 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 5508 "\\.\pipe\gecko-crash-server-pipe.5508" plugin
6076 | C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe (.Adobe Systems, Inc. - Adobe Flash Player 12.0 r0.) - (12.0.0.77) -> "C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe" --proxy-stub-channel=Flash3496.6596C768.30060 --host-broker-channel=Flash3496.6596C768.3208 --host-pid=3496 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll"
1124 | C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe (.Adobe Systems, Inc. - Adobe Flash Player 12.0 r0.) - (12.0.0.77) -> "C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe" --channel=6076.0036F8B0.916431320 --proxy-stub-channel=Flash3496.6596C768.30060 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll" --host-npapi-version=27 --type=renderer
6592 | C:\Windows\servicing\TrustedInstaller.exe (.Microsoft Corporation - Programme d�installation pour les modules Windows.) - (6.1.7601.17514) -> C:\Windows\servicing\TrustedInstaller.exe
���������� | Processus d�marr�s
[14/07/2009 00:36:49] - 560 | C:\Windows\system32\wininit.exe (.Microsoft Corporation - Application de d�marrage de Windows.) - (6.1.7600.16385) -> wininit.exe [96256 Ko]
[14/07/2009 00:19:28] - 752 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) -> C:\Windows\system32\svchost.exe -k DcomLaunch [20992 Ko]
[14/07/2009 00:19:28] - 932 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) -> C:\Windows\system32\svchost.exe -k RPCSS [20992 Ko]
[14/07/2009 00:19:28] - 1008 | C:\Windows\System32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) -> C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted [20992 Ko]
[14/07/2009 00:19:28] - 364 | C:\Windows\System32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) -> C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [20992 Ko]
[14/07/2009 00:19:28] - 484 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) -> C:\Windows\system32\svchost.exe -k LocalService [20992 Ko]
[14/07/2009 00:19:28] - 704 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) -> C:\Windows\system32\svchost.exe -k netsvcs [20992 Ko]
[14/07/2009 00:19:28] - 1128 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) -> C:\Windows\system32\svchost.exe -k GPSvcGroup [20992 Ko]
[14/07/2009 00:19:28] - 1240 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) -> C:\Windows\system32\svchost.exe -k NetworkService [20992 Ko]
[21/11/2012 17:06:45] - 1432 | C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - (14.0.3.336) -> "C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe" [440400 Ko]
[14/07/2009 00:19:28] - 1520 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) -> C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork [20992 Ko]
[21/11/2012 17:06:44] - 1920 | C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - (14.0.3.336) -> "C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe" [440400 Ko]
[14/07/2009 00:19:28] - 2032 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) -> C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [20992 Ko]
[11/09/2012 04:13:56] - 2156 | C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - (1.70.0.0) -> "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe" [701512 Ko]
[14/07/2009 00:19:28] - 2520 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) -> C:\Windows\system32\svchost.exe -k imgsvc [20992 Ko]
[21/11/2012 17:06:44] - 3880 | C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (.Avira Operations GmbH & Co. KG - AntiVir shadow copy service.) - (14.0.2.180) -> "C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe" avshadowcontrol0_00000780 [601656 Ko]
[14/07/2009 00:19:28] - 3576 | C:\Windows\system32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) -> C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted [20992 Ko]
[24/06/2012 10:49:35] - 3816 | C:\Windows\system32\wbem\wmiprvse.exe (.Microsoft Corporation - WMI Provider Host.) - (6.1.7601.17514) -> C:\Windows\system32\wbem\wmiprvse.exe [257536 Ko]
[21/11/2012 17:06:44] - 1888 | C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (.Avira Operations GmbH & Co. KG - Antivirus System Tray Tool (Desktop).) - (14.0.3.332) -> "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min [689744 Ko]
[24/06/2012 10:49:52] - 6048 | C:\Program Files\Windows Media Player\wmpnetwk.exe (.Microsoft Corporation - Service Partage r�seau du Lecteur Windows Media.) - (12.0.7601.17514) -> "C:\Program Files\Windows Media Player\wmpnetwk.exe" [1525248 Ko]
[14/07/2009 00:19:28] - 5708 | C:\Windows\System32\svchost.exe (.Microsoft Corporation - Processus h�te pour les services Windows.) - (6.1.7600.16385) -> C:\Windows\System32\svchost.exe -k LocalServicePeerNet [20992 Ko]
[14/02/2014 11:05:42] - 5508 | C:\Program Files (x86)\Mozilla Firefox\firefox.exe (.Mozilla Corporation - Firefox.) - (27.0.1.5156) -> "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" [275568 Ko]
[21/11/2012 17:06:44] - 6652 | C:\program files (x86)\avira\antivir desktop\avcenter.exe (.Avira Operations GmbH & Co. KG - Antivirus Control Center (Desktop).) - (14.0.3.332) -> "C:\program files (x86)\avira\antivir desktop\avcenter.exe" [669776 Ko]
[18/03/2014 11:42:02] - 6760 | C:\Users\Devilxangel\Downloads\Shortcut_Module.exe (. - Shortcut_Module.) - (18.3.2014.1) -> "C:\Users\Devilxangel\Downloads\Shortcut_Module.exe" [2173952 Ko]
[24/06/2012 10:49:35] - 6928 | C:\Windows\system32\wbem\wmiprvse.exe (.Microsoft Corporation - WMI Provider Host.) - (6.1.7601.17514) -> C:\Windows\system32\wbem\wmiprvse.exe [257536 Ko]
[09/07/2012 19:33:38] - 5868 | C:\Program Files (x86)\Twonky\TwonkyServer\twonkyproxy.exe (. - .) - (0.0.0.0) -> "C:\Program Files (x86)\Twonky\TwonkyServer\twonkyproxy.exe" -start [545608 Ko]
[09/07/2012 19:33:36] - 3740 | C:\Program Files (x86)\Twonky\TwonkyServer\twonkywebdav.exe (. - .) - (0.0.0.0) -> "C:\Program Files (x86)\Twonky\TwonkyServer\twonkywebdav.exe" -start [271176 Ko]
���������� | Services
Supprim� avec succ�s : HKLM\..\ControlSet001\Services\FLEXnet Licensing Service : "C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe"
Supprim� avec succ�s : HKLM\..\ControlSet002\Services\FLEXnet Licensing Service : "C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe"
���������� | Hosts
C:\Windows\System32\Drivers\etc\hosts : Remis a z�ro avec succ�s
���������� | Registre
Supprim� avec succ�s : [64]HKLM\Software\Classes\COMCTL.Toolbar
Supprim� avec succ�s : [64]HKLM\Software\Classes\COMCTL.Toolbar.1
Supprim� avec succ�s : [64]HKLM\Software\Classes\Google.OneClickCtrl.9
Supprim� avec succ�s : [64]HKLM\Software\Classes\Google.OneClickProcessLauncherMachine.1.0
Supprim� avec succ�s : [64]HKLM\Software\Classes\SVRDownloadButton.DownloadSitesFilter
Supprim� avec succ�s : [64]HKLM\Software\Classes\Google.OneClickProcessLauncherMachine
Supprim� avec succ�s : [64]HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\liveupdate.exe : C:\Program Files (x86)\NewTech Infosystems\NTI Media Maker 8\LiveUpdate\liveupdate.exe
Supprim� avec succ�s : [64]HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\QuickTimeUpdater.exe : C:\PROGRA~2\QUICKT~1\QuickTimeUpdater.exe
Supprim� avec succ�s : [64]HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Microsoft-Windows-CertificateServicesClient : {73370bd6-85e5-430b-b60a-fea1285808a7}
Supprim� avec succ�s : [64]HKLM\Software\Microsoft\Tracing\giant savings-bg_RASAPI32
Supprim� avec succ�s : [64]HKLM\Software\Microsoft\Tracing\GoogleToolbarInstaller_updater_signed_RASAPI32
Supprim� avec succ�s : [64]HKLM\Software\Microsoft\Tracing\GoogleToolbarManager_F91D44FAA5479127_RASAPI32
Supprim� avec succ�s : [64]HKLM\Software\Microsoft\Tracing\GoogleToolbarNotifier_RASAPI32
Supprim� avec succ�s : [64]HKLM\Software\Microsoft\Tracing\OneClick_RASAPI32
Supprim� avec succ�s : [64]HKLM\Software\Microsoft\Tracing\PerformanceOptimizer_RASAPI32
Supprim� avec succ�s : [64]HKLM\Software\Microsoft\Tracing\PMMdatamgr_RASAPI32
Supprim� avec succ�s : [64]HKLM\Software\Microsoft\Tracing\giant savings-bg_RASMANCS
Supprim� avec succ�s : [64]HKLM\Software\Microsoft\Tracing\GoogleToolbarInstaller_updater_signed_RASMANCS
Supprim� avec succ�s : [64]HKLM\Software\Microsoft\Tracing\GoogleToolbarNotifier_RASMANCS
Supprim� avec succ�s : [64]HKLM\Software\Microsoft\Tracing\PerformanceOptimizer_RASMANCS
Supprim� avec succ�s : [64]HKLM\Software\Microsoft\Tracing\PMMdatamgr_RASMANCS
Supprim� avec succ�s : [64]HKLM\SOFTWARE\GoforFiles
Supprim� avec succ�s : [32]HKLM\SOFTWARE\SpeedBit
Supprim� avec succ�s : HKU\S-1-5-21-2623047520-3936694761-1895341269-1001\Software\GoforFiles
Supprim� avec succ�s : HKU\S-1-5-21-2623047520-3936694761-1895341269-1001\Software\SpeedBit
Supprim� avec succ�s : HKU\S-1-5-18\Software\AskToolbar
Supprim� avec succ�s : HKU\S-1-5-18\Software\SpeedBit
Supprim� avec succ�s : HKU\S-1-5-18\Software\AppDataLow\Software\AskToolbar
Supprim� avec succ�s : [64]HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110011441179} : C:\Program Files (x86)\Giant Savings
Supprim� avec succ�s : [64]HKLM\Software\Classes\Installer\Products\07A78D1031D4EBC498445ADA73EBD8E8 : C:\Users\DEVILX~1\AppData\Local\Temp\testnsis\
Supprim� avec succ�s : [64]HKLM\Software\Classes\Installer\Products\1af2a8da7e60d0b429d7e6453b3d0182 : C:\Users\DEVILX~1\AppData\Local\Temp\IXP000.TMP\
Supprim� avec succ�s : [64]HKLM\Software\Classes\Installer\Products\1F9ACB2AC6655084791DF7CD39837632 : c:\users\admini~1\appdata\local\temp\airfcc5.tmp\
Supprim� avec succ�s : [64]HKLM\Software\Classes\Installer\Products\487EA05EEBAFAD641A8FB7B665CD2BE2 : C:\Users\ADMINI~1\AppData\Local\Temp\{B7556FB6-BDF7-424F-A479-0E7DFE81324E}\
Supprim� avec succ�s : [64]HKLM\Software\Classes\Installer\Products\4AFCE782A91734120AB96D1AD25EE404 : C:\Users\Administrator\AppData\Local\Temp\fla12C6.tmp\
Supprim� avec succ�s : [64]HKLM\Software\Classes\Installer\Products\9CA6158A1FAA9F747966302E4DDCCB8F : C:\OEM\Preload\Autorun\APP\PowerDVD v9.0\
Supprim� avec succ�s : [64]HKLM\Software\Classes\Installer\Products\c1c4f01781cc94c4c8fb1542c0981a2a : C:\Windows\TEMP\IXP000.TMP\
Supprim� avec succ�s : [64]HKLM\Software\Classes\Installer\Products\2580801CE560199429063F57E6C31C28 : C:\Users\DEVILX~1\AppData\Local\Temp\miaA41C.tmp\data\
Supprim� avec succ�s : [32]HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\178B0BC2C3D15A951A024572D332152E : C:\Program Files (x86)\Calibre2\resources\viewer\mathjax\jax\output\SVG\autoload\annotation-xml.js
Supprim� avec succ�s : [32]HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2BDB682CD036D545DA33637BC155E194 : C:\Program Files (x86)\Calibre2\resources\quick_start.epub
Supprim� avec succ�s : [32]HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\72798142C6A7CA8AEAFB493E6CA75C3D : C?\Users\DEVILX~1\AppData\Local\Temp\MarkAny\ContentSafer\UpdateClient\MAFileUpdate.dll
Supprim� avec succ�s : [32]HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BB790271EE4BE698FFC0E8B57136B94F : C?\Program Files (x86)\EgisTec Egis Software Update\res\images\LiveUpdate.ico
Supprim� avec succ�s : [32]HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC : 02:\Software\Boxore\BoxoreClient\name
Supprim� avec succ�s : HKU\S-1-5-21-2623047520-3936694761-1895341269-1001\Software\Microsoft\Windows\CurrentVersion\Uninstall\GoforFiles : "C:\Program Files (x86)\GoforFiles\uninstall.exe"
���������� | IFEO
���������� | Dossiers
Supprim� avec succ�s : C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
Supprim� avec succ�s : C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
Supprim� avec succ�s : C:\Users\Devilxangel\Documents\Mobogenie
Supprim� avec succ�s : C:\Program Files (x86)\GoforFiles
Supprim� avec succ�s : C:\Program Files (x86)\Common Files\SpeedBit
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Local\Mobogenie
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Local\genienext
Supprim� avec succ�s : C:\Users\All Users\SpeedBit
Supprim� avec succ�s : C:\Users\All Users\Microsoft\Windows\Sqm\Upload\Private_133376_00.sqm
Supprim� avec succ�s : C:\Users\All Users\Microsoft\Windows\Sqm\Upload\Private_133376_01.sqm
Supprim� avec succ�s : C:\Users\All Users\TwonkyServer\db\cache\0646e380ce71bfc9bc679665bc13371f
Supprim� avec succ�s : C:\Users\All Users\TwonkyServer\db\cache\c4dcc7218277b57fa7a06d8748cf1fdc\02 Lollipop.wma.seek
Supprim� avec succ�s : C:\Users\Devilxangel\daemonprocess.txt
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gaiilaahiahdejapggenmdmafpmbipje_0.localstorage
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Local\Mozilla\Firefox\Profiles\gwu1nd19.default\Cache\9\02\C3375d01
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Local\Mozilla\Firefox\Profiles\gwu1nd19.default\Cache\D\4E\83375d01
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Local\Temp\jrt\datamngr_del.reg
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Azureus\active\69AE469116E337B140D8C4DEAD54728FFE51624F.dat
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Azureus\active\69AE469116E337B140D8C4DEAD54728FFE51624F.dat.bak
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Azureus\tmp\AZU5928344073320133703.tmp
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\DZ8DT2S4\secureinclude.ebaystatic.com
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#secureinclude.ebaystatic.com
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Mozilla\Firefox\Profiles\gwu1nd19.default\extensions\feca4b87-3be4-43da-a1b1-137c24220968@jetpack.xpi
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Mozilla\Firefox\Profiles\gwu1nd19.default\extensions\b1ac2ff7-8e51-4bb6-8bf8-87f1d567919a@4bb97481-aead-4c2e-a62b-e25e264651bb.com\extensionData\plugins\102_dealply_m.js
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Mozilla\Firefox\Profiles\gwu1nd19.default\extensions\b1ac2ff7-8e51-4bb6-8bf8-87f1d567919a@4bb97481-aead-4c2e-a62b-e25e264651bb.com\extensionData\plugins\13_CrossriderAppUtils.js
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Mozilla\Firefox\Profiles\gwu1nd19.default\extensions\b1ac2ff7-8e51-4bb6-8bf8-87f1d567919a@4bb97481-aead-4c2e-a62b-e25e264651bb.com\extensionData\plugins\14_CrossriderUtils.js
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Mozilla\Firefox\Profiles\gwu1nd19.default\extensions\b1ac2ff7-8e51-4bb6-8bf8-87f1d567919a@4bb97481-aead-4c2e-a62b-e25e264651bb.com\extensionData\plugins\177_crossriderDashboard.js
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Mozilla\Firefox\Profiles\gwu1nd19.default\extensions\b1ac2ff7-8e51-4bb6-8bf8-87f1d567919a@4bb97481-aead-4c2e-a62b-e25e264651bb.com\extensionData\plugins\78_CrossriderInfo.js
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Mozilla\Firefox\Profiles\gwu1nd19.default\extensions\foxmarks@kei.com\chrome\content\newuser.js
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Mozilla\Firefox\Profiles\gwu1nd19.default\lwtheme\lightweighttheme-footer-1024x768
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Mozilla\Firefox\Profiles\gwu1nd19.default\lwtheme\lightweighttheme-header-1024x768
Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Mozilla\Firefox\Profiles\gwu1nd19.default\searchplugins\speedbit.xml
Supprim� avec succ�s : C:\Users\Devilxangel\Downloads\BREED Alienware\The Best 1500 Font Collection\Babylon-27-Babylon-27.ttf
Supprim� avec succ�s : C:\Users\Devilxangel\Downloads\BREED Alienware\The Best 1500 Font Collection\Babylon5-Hollow-Regular.ttf
Supprim� avec succ�s : C:\Users\Devilxangel\Downloads\BREED Alienware\The Best 1500 Font Collection\Babylon5Credits-Regular.ttf
Supprim� avec succ�s : C:\Users\Devilxangel\Downloads\BREED Alienware\The Best 1500 Font Collection\FifthCopySSK-Regular.ttf
Supprim� avec succ�s : C:\Users\Devilxangel\Downloads\Tor Browser\Browser\browser\searchplugins\eBay.xml
Supprim� avec succ�s : C:\Users\Little Devilxangel\AppData\Local\Mozilla\Firefox\Profiles\70iqy1p6.default\Cache\1\05\54337m01
Supprim� avec succ�s : C:\Users\Mini Devilxangel\AppData\Local\Mozilla\Firefox\Profiles\qk5it0ug.default\Cache\D\4C\B6337d01
Supprim� avec succ�s : C:\Users\Mini Devilxangel\AppData\Local\Mozilla\Firefox\Profiles\qk5it0ug.default\jumpListCache\ekRR3yffLgfA5v9Vt2nJaQ==.ico
Supprim� avec succ�s : C:\Users\Mini Devilxangel\AppData\Local\Mozilla\Firefox\Profiles\qk5it0ug.default\jumpListCache\LHV9IwGjE3xvJ1B6VKqdNQ==.ico
Supprim� avec succ�s : C:\Users\Mini Devilxangel\AppData\Local\Mozilla\Firefox\Profiles\qk5it0ug.default\jumpListCache\Tle2zJ8zV96zAlykTHFumw==.ico
Supprim� avec succ�s : C:\Users\Mini Devilxangel\AppData\Local\Mozilla\Firefox\Profiles\qk5it0ug.default\jumpListCache\_tGc1iwv95OhpXCPqovJ4A==.ico
Supprim� avec succ�s : C:\Users\Public\Documents\Speedbit
Supprim� avec succ�s : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\eBay-france.xml
���������� | D�tournements de raccourcis
���������� | Proxy
R�par� : [HKU\S-1-5-21-2623047520-3936694761-1895341269-1001\Software\Microsoft\Windows\CurrentVersion\Internet settings]|[WarnonZoneCrossing] : 0 -> 1
���������� | D�tournement internet Explorer
R�par� : [HKU\S-1-5-21-2623047520-3936694761-1895341269-1001\Software\Microsoft\Internet Explorer\Main]|[Search Bar] : http://g.msn.fr/0SEFRFR/SAOS02 -> http://www.google.com/
R�par� : [HKU\S-1-5-21-2623047520-3936694761-1895341269-1001\Software\Microsoft\Internet Explorer\Main]|[Start Page] : http://www.google.com -> http://www.google.com/
R�par� : [HKU\S-1-5-21-2623047520-3936694761-1895341269-1001\Software\Microsoft\Internet Explorer\Main]|[Local Page] : C:\Windows\system32\blank.htm -> C:\Windows\SysWOW64\blank.htm
R�par� : [HKU\S-1-5-21-2623047520-3936694761-1895341269-1001\Software\Microsoft\Internet Explorer\Main]|[Search Page] : http://home.microsoft.com/access/allinone.asp -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R�par� : [HKU\S-1-5-21-2623047520-3936694761-1895341269-1001\Software\Microsoft\Internet Explorer\Main]|[Default_Page_URL] : http://homepage.acer.com/rdr.aspx?b=ACAW&l=040c&m=aspire_5741g&r=27360612j425l0404z1m5t4502k02r -> http://go.microsoft.com/fwlink/?LinkId=69157
R�par� : [64][HKLM\Software\Microsoft\Internet Explorer\Search]|[SearchAssistant] : http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm -> http://www.google.com/ie
R�par� : [64][HKLM\Software\Microsoft\Internet Explorer\Main]|[Start Page] : http://go.microsoft.com/fwlink/p/?LinkId=255141 -> http://go.microsoft.com/fwlink/?LinkId=69157
R�par� : [64][HKLM\Software\Microsoft\Internet Explorer\Main]|[Default_Search_URL] : http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch -> http://go.microsoft.com/fwlink/?LinkId=54896
R�par� : [64][HKLM\Software\Microsoft\Internet Explorer\Main]|[Default_Page_URL] : http://go.microsoft.com/fwlink/p/?LinkId=255141 -> http://go.microsoft.com/fwlink/?LinkId=69157
R�par� : [32][HKLM\Software\Microsoft\Internet Explorer\Main]|[Start Page] : http://go.microsoft.com/fwlink/p/?LinkId=255141 -> http://go.microsoft.com/fwlink/?LinkId=69157
R�par� : [32][HKLM\Software\Microsoft\Internet Explorer\Main]|[Local Page] : C:\Windows\System32\blank.htm -> C:\Windows\SysWOW64\blank.htm
R�par� : [32][HKLM\Software\Microsoft\Internet Explorer\Main]|[Default_Page_URL] : http://go.microsoft.com/fwlink/p/?LinkId=255141 -> http://go.microsoft.com/fwlink/?LinkId=69157
���������� | D�tournement Google Chrome
[Little Devilxangel] Remis a z�ro avec succ�s : SearchURL
[Little Devilxangel] Remis a z�ro avec succ�s : Preferences
[Mini Devilxangel] Remis a z�ro avec succ�s : SearchURL
[Mini Devilxangel] Remis a z�ro avec succ�s : Preferences
[Devilxangel] Remis a z�ro avec succ�s : SearchURL
[Devilxangel] Remis a z�ro avec succ�s : Preferences
���������� | D�tournement Firefox
[Little Devilxangel] Supprim� avec succ�s : C:\Users\Little Devilxangel\AppData\Roaming\Mozilla\Firefox\Profiles\70iqy1p6.default\sessionstore.js
[Mini Devilxangel] Supprim� avec succ�s : C:\Users\Mini Devilxangel\AppData\Roaming\Mozilla\Firefox\Profiles\qk5it0ug.default\sessionstore.js
[Mini Devilxangel] Remplac� : user_pref("browser.startup.homepage", "www.googl.com"); -> user_pref("browser.startup.homepage", "http://www.google.fr");
[Mini Devilxangel] Supprim� avec succ�s : user_pref("extensions.metacert.toolbaritem.added", true);
[Devilxangel] Supprim� avec succ�s : C:\Users\Devilxangel\AppData\Roaming\Mozilla\Firefox\Profiles\gwu1nd19.default\sessionstore.js
[Devilxangel] Supprim� avec succ�s : user_pref("browser.newtabpage.blocked", "{\"amqcY8pS797RnnxoFhM3vA==\":1,\"RtamdakdyJbCv+NvvY6O4A==\":1,\"6XqLhauu2cn8H8s9SYQkLA==\":1,\"Gxos0dRysMJKtoGso8optg==\":1,\"bBfTnMPiiH+HCvPDk3Wx/g==\":1,\"SgneC/NdCQCKCE05Xefzcw==\":1,\"pf3sIwo5IQTJocSlI4dW4w==\":1,\"/GL9ZXaPdpCcTa10b8l/bQ==\":1,\"Mql1WNCmaoRIV8dLplHgLg==\":1,\"RlBSvhtAXDuMfwS2uY4m2w==\":1,\"fKn1QprEwyuGK3pSPkkc/Q==\":1,\"70BstoSOX2B6rpClEOWxfg==\":1,\"iJL25VsVsxggvoH+mrklnw==\":1,\"5Q+bZrpqt70ZA04l7mTFKQ==\":1,\"fR1JsQAemvND/YvWUQfT6w==\":1,\"rdW6s9f3AOvymiu0qs2kjA==\":1,\"p4IbzUSzoUbb11JbnrVR9w==\":1,\"tUrB4QMx9qH9ILoglOm4nw==\":1,\"bMHFghjSEhjmXQh5GoUeIQ==\":1,\"473oEHQ38bJ7teTRzQ6dKQ==\":1,\"546/y1vyXaFUovFfOnBmzA==\":1,\"JHN0uRwqOgvwjd+LPV0jxg==\":1,\"G+PfrYp17C75zXj5QGy5DA==\":1,\"q3JRZZFau71sqicErdwN/g==\":1,\"+wvA8ZwC5Px9HqukToIksA==\":1,\"hovOrh1873MmJmKdTqJgZg==\":1,\"JX4XVtNO1AMpyEutsrSywQ==\":1,\"PySBkc6LD1SFBC/aH6vDVw==\":1,\"GmVV5Y3RZqHU3J3Ng6yY8A==\":1,\"GSIh/rhq5M3xEMV+ZiXUrw==\":1,\"2o17UiRf8UF4XF3vPYQ1lg==\":1,\"L9Al4FLYns1tC0EDmZCmkQ==\":1,\"HNUWr69cRnpzGXQ1o9LvZQ==\":1,\"b75F2ljkB1/xAwsgCoSzXQ==\":1,\"AIsKAJzLJO+OwAPF76PhYw==\":1,\"jQiCSRv2kczxuPSDKswVbw==\":1,\"2cJMOZO2uX9z0oKADYGePA==\":1,\"ssrq+86iupmwi8Yu79jFMg==\":1,\"rGLIvYik8z/maRnu+YzYXw==\":1,\"9wexFwW4JEw4MnMDgneFHA==\":1,\"DYUiN81MukFj1YrWZVXHyA==\":1,\"7KMcskDQo8Z54fAIZPuxYA==\":1,\"vs7fYhBa97eVVE/qSzgX3g==\":1,\"Kkte7EWeOoqmigdvO8W/sQ==\":1,\"RiHtwvnZEF1iTEe0RhAZag==\":1,\"1xtq9J8lXy8Y0o0poxXrfw==\":1,\"JQ4G5H5UnkatAzXv1NIWaw==\":1,\"I+V+7KVxnxSTMwAm61DUMA==\":1,\"xZlyifSotpZajsjAKcOwdw==\":1,\"V+bP/Cnn7Uh2Dux50AGKuw==\":1,\"UOW5gPW8MMVr4ODOpVClSw==\":1,\"qW2V5SSM8EG3tEjKxZ1NaQ==\":1,\"w+ZDPLWAlppF9ptaniv+2w==\":1,\"phlMoR5cpxcnBAmk5JRIZA==\":1,\"ggGh/jgX+0mvH6x4qUyPGg==\":1,\"xZmE4Agb0R2q1QndcmI/Sg==\":1,\"ddBG01+BFbsVzBOvzB1qHw==\":1,\"7fZ8fHtSS2fr/Hnjwu3jCQ==\":1,\"ZHkyv6jzKTmQ76SuSEVZlg==\":1,\"7ZDRnWRtCmmmE4uywC+OLA==\":1,\"Mc4RvtiIVxqxFnYKG+neeQ==\":1,\"HnkRaz0s6mD2OduYKRA4ug==\":1,\"dTCdFjwp5z3An+g56fpuxA==\":1,\"EGIMklTW79f9X7bJNMRcMQ==\":1,\"PZVv/X58pepZcbDPN533fQ==\":1,\"tyViRIr2spjY8WAFV3BJTQ==\":1,\"Vja+kWpntnqm4lUaTE4XKQ==\":1,\"ratu48QllO6wWev+5GWVBg==\":1,\"tpNgoRJ/9Jyg8hEE0LTVDQ==\":1,\"gKMSuZODG3Civj6nDNTEWA==\":1,\"6U9ZfGaG1a8oWc48ZW6Ckw==\":1,\"CvOUq1rvTsprmNgr8UTJDg==\":1,\"mqadAuCKZeeWlgE5Gd7bTQ==\":1,\"T7L2O9emRxhANaFHYd1WEQ==\":1,\"x5tvpRwLoHT9IqON9eegAw==\":1,\"Q2u9PIs70bl1UaQfm3n5Eg==\":1,\"1tlODF+0pvrbD/uxoYw7uA==\":1,\"0wvRHZf9HyZaG6mSXPw23A==\":1,\"EiadYnqHQeMOiaDt4SFHyg==\":1,\"xqoX2cwP3idmnf6Xx7yZ5Q==\":1,\"Y89yAWpIwOnj6KOcUSseKQ==\":1,\"OGGBfJzDU8S2rKNpPvOqIw==\":1,\"pZDZd7Y+R3GziebYJq/heA==\":1,\"z21K6UebRdbtkMv8aQfwPw==\":1,\"60CMwovUVuvl8W7HAScUDw==\":1,\"/w6pmX5iiSavPPovzbI5UQ==\":1,\"aFf4kA5l//PohPmaUUjmyQ==\":1,\"hmPE+JL6f7qVHsuHn9vQvA==\":1,\"lq1P8WeD0mwdFlozra1RbA==\":1,\"EN5cZTIZL2yzYltSrz8zIA==\":1,\"5FoIXOyYZeqk+KdP0aSGDg==\":1,\"0xMpyBhmfUWPMDmXL8xO4g==\":1,\"4cRASwlja0q06VrYGLHJhA==\":1,\"711IqYZSbRv69q2+JeBC2w==\":1,\"+GnGxts5m/XODOWDQ3lvnQ==\":1,\"bRqwck8ZBQ6kekMUQ/wgtw==\":1,\"MFpdfJ85S91lb9zGN947Kg==\":1,\"qEsUj1dXMLh9Um5pOLob7g==\":1,\"I+nSKtI420Np1DtSzgD5QQ==\":1,\"2Eh6H4lmaVOFiSh/ZOzDJg==\":1,\"sCiJsTyo23pBlp4nRcZREQ==\":1,\"HOPMKYHLbKUYnsJthaw3uA==\":1,\"dupy7B1r9j+5aCAPVJyEOA==\":1,\"Ywg6FDrAC2qwRquObY/pWg==\":1,\"mMKFjTgzyFTMENjz3rgPQg==\":1,\"PnyHSNfG32bzfaMX+wylVg==\":1,\"3RuvSQPbus+wmjc3Lzovuw==\":1,\"m2G1nVksHlSJZBwsEwp8Ew==\":1,\"MFJpH+T8BWtZSS+tvlHlyw==\":1,\"snn94fG40W2x/4opKIgBmg==\":1,\"U9FBwtBkGPyOLiZdmk2rIw==\":1,\"v3WifIGXSPlJDJZYZmE+nA==\":1,\"OcyDYoHrNZkzWjYpIATZlw==\":1,\"PDRQdie0gA0U1jZk9fTHXQ==\":1,\"YaDLcDQmpwIeGgS5cbKIGQ==\":1,\"PHzCVQ2SgbAJq8TWJyIuhA==\":1,\"mGAU/ztUSSyIUb42kJoHTg==\":1,\"ItpfcdM2BAiNiGTPDcVLgQ==\":1,\"RpZBcmVqyqkeyPpqsF9KYA==\":1,\"ztvCErGT5xa9l/nrrEiDfg==\":1}");
[Devilxangel] Supprim� avec succ�s : user_pref("browser.newtabpage.pinned", "[null,null,{\"url\":\"http://du112w.dub112.mail.live.com/default.aspx\",\"title\":\"Accueil - Windows Live\"},{\"url\":\"http://france.meteofrance.com/france/meteo?PREVISIONS_PORTLET.path=previsionsdept/DEPT57\",\"title\":\"M�t�o-France \"},{\"url\":\"http://www.youtube.com/\",\"title\":\"YouTube \"},{\"url\":\"http://www.allocine.fr/\",\"title\":\"AlloCin� \"},{\"url\":\"http://www.emule-island.ru/nouveautes-emule\",\"title\":\"eMule-Island\"},{\"url\":\"http://devilsilver.labrute.fr/arene\",\"title\":\"devilsilver La Brute\"},{\"url\":\"http://my.ebay.fr/ws/eBayISAPI.dll?MyEbayBeta#GoTo240\",\"title\":\"Mon eBay\"}]");
[Devilxangel] Remplac� : user_pref("browser.startup.homepage", "http://www.shinysearch.com/myhome.php?theme=dark-angel<ext=DevilXAngel"); -> user_pref("browser.startup.homepage", "http://www.google.fr");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.cookie.CrossriderNotifier_channels.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.cookie.CrossriderNotifier_channels.value", "%7B%22app0%22%3A%22app0%22%2C%22app49074%22%3A%22app49074%22%2C%22NA%22%3A%22NA%22%2C%22FR%22%3A%22FR%22%7D");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.cookie.CrossriderNotifier_geolocation.expiration", "Sat Mar 22 2014 14:00:21 GMT+0100");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.cookie.CrossriderNotifier_geolocation.value", "%22FR%22");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.cookie.CrossriderNotifier_metadata.expiration", "Tue Mar 18 2014 14:50:29 GMT+0100");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.cookie.CrossriderNotifier_metadata.value", "%7B%22appId%22%3A49074%2C%22appName%22%3A%22The%20weDownload%20Manager%22%2C%22lastMessageId%22%3A0%2C%22nextCheck%22%3A1440%7D");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.description", "Enhance your search results with direct download links and information for apps and games.");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.internaldb.Resources_meta.value", "%7B%22extension.css%22%3A%7B%22id%22%3A479259%2C%22ver%22%3A1%2C%22status%22%3A1%2C%22name%22%3A%22extension.css%22%2C%22url%22%3A%22http%3A//resources.crossrider.com/system/resources/apps/49074/479259%22%7D%7D");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.internaldb.Resources_resource_479259.value", "%22.crossrider-nofity-34345-body-theme-white-black%20a%2C%5Cn.crossrider-nofity-34344-body-theme-white-black%20a%20%7B%5Cn%5Cttext-decoration%3A%20none%3B%5Cn%7D%5Cn%5Cn.crossrider-nofity-34345-body-theme-white-black%20a%3Ahover%2C%5Cn.crossrider-nofity-34344-body-theme-white-black%20a%3Ahover%20%7B%5Cn%5Cttext-decoration%3A%20underline%3B%5Cn%7D%5Cn%5Cn.crossrider-nofity-34345-body-theme-white-black%20a.button%2C%5Cn.crossrider-nofity-34344-body-theme-white-black%20a.button%20%7B%5Cn%5Cttext-decoration%3A%20none%3B%5Cn%7D%5Cn%5Cn.crossrider-nofity-34345-body-theme-white-black%20.button%2C%5Cn.crossrider-nofity-34344-body-theme-white-black%20.button%20%7B%5Cn%5Ctbackground%3A%20url%28http%3A//d28me8o1j6adyz.cloudfront.net/landing/main/images/buttons-green.png%3Fv%3D1373447692%29%20right%20-210px%20no-repeat%3B%5Cn%5Ctdisplay%3A%20inline-block%3B%5Cn%5Ctheight%3A%2030px%3B%5Cn%5Ctpadding-right%3A%2010px%3B%5Cn%5Cttext-decoration%3A%20none%3B%5Cn%5Ctmargin-top%3A%205px%3B%5Cn%7D%5Cn%5Cn.crossrider-nofity-34345-body-theme-white-black%20.button%20span%2C%5Cn.crossrider-nofity-34344-body-theme-white-black%20.button%20span%20%7B%5Cn%5Ctbackground%3A%20url%28http%3A//d28me8o1j6adyz.cloudfront.net/landing/main/images/buttons-green.png%3Fv%3D1373447692%29%20left%20-210px%20no-repeat%3B%5Cn%5Ctdisplay%3A%20inline-block%3B%5Cn%5Ctheight%3A%2030px%3B%5Cn%5Ctline-height%3A%2030px%3B%5Cn%5Ctpadding%3A%200%205px%200%2015px%3B%5Cn%5Ctcolor%3A%20%23fff%3B%5Cn%5Ctfloat%3A%20left%3B%5Cn%5Ctfont-size%3A%2013px%3B%5Cn%5Cttext-shadow%3A%200%201px%200%20%23585858%3B%5Cn%5Ctfont-weight%3A%20normal%3B%5Cn%7D%5Cn%5Cn.crossrider-nofity-34345-body-theme-white-black%20.button%20span%20strong%2C%5Cn.crossrider-nofity-34344-body-theme-white-black%20.button%20span%20strong%20%7B%5Cn%5Ctfont-weight%3A%20normal%3B%5Cn%5Ctfloat%3A%20left%3B%5Cn%5Ctcolor%3A%20%23fff%3B%5Cn%7D%5Cn%5Cn.crossrider-nofity-34345-body-theme-white-black%20.button%3Ahover%2C%5Cn.crossrider-nofity-34344-body-theme-white-black%20.button%3Ahover%20%7B%5Cn%5Ctbackground-position%3A%20right%20-240px%3B%5Cn%7D%5Cn%5Cn.crossrider-nofity-34345-body-theme-white-black%20.button%3Ahover%20span%2C%5Cn.crossrider-nofity-34344-body-theme-white-black%20.button%3Ahover%20span%20%7B%5Cn%5Ctbackground-position%3A%20left%20-240px%3B%5Cn%7D%5Cn%5Cn.crossrider-nofity-34345-body-theme-white-black%20.button%20small%2C%5Cn.crossrider-nofity-34344-body-theme-white-black%20.buttin%20small%20%7B%5Cn%5Ctmargin%3A%207px%200%200%2010px%3B%5Cn%5Ctbackground%3A%20url%28http%3A//d28me8o1j6adyz.cloudfront.net/landing/main/images/button-arrow-small.png%29%200%200%20no-repeat%3B%5Cn%5Ctwidth%3A%2010px%3B%5Cn%5Ctheight%3A%2016px%3B%5Cn%5Cttext-indent%3A%20-999px%3B%5Cn%5Ctdisplay%3A%20inline-block%3B%5Cn%5Ctfloat%3A%20left%3B%5Cn%7D%5Cn%5Cn.crossrider-nofity-34345-title-theme-white-black%2C%5Cn.crossrider-nofity-34344-title-theme-white-black%20%7B%5Cn%5Ctmargin-right%3A%2013px%3B%5Cn%7D%5Cn%5Cn.crossrider-nofity-34345-icon-theme-white-black%2C%5Cn.crossrider-nofity-34344-icon-theme-white-black%20%7B%5Cn%5Ctwidth%3A%2032px%20%21important%3B%5Cn%5Ctheight%3A%2032px%20%21important%3B%5Cn%5Ctmargin-top%3A%205px%3B%5Cn%7D%5Cn%5Cn.crossrider-nofity-34345-body-theme-white-black%20.info%2C%5Cn.crossrider-nofity-34344-body-theme-white-black%20.info%20%7B%5Cn%5Ctmargin-top%3A%205px%3B%5Cn%7D%5Cn%5Cn.crossrider-nofity-34345-body-theme-white-black%20.mirrors%2C%5Cn.crossrider-nofity-34344-body-theme-white-black%20.mirrors%20%7B%5Cn%5Ctmargin-top%3A%205px%3B%5Cn%5Ctpadding-left%3A%200%3B%5Cn%7D%5Cn%5Cn.crossrider-nofity-34345-body-theme-white-black%20.mirrors%20li%2C%5Cn.crossrider-nofity-34344-body-theme-white-black%20.mirrors%20li%20%7B%5Cn%5Ctdisplay%3A%20block%3B%5Cn%5Ctclear%3A%20both%3B%5Cn%5Ctmargin%3A%200%200%200%206px%3B%5Cn%7D%5Cn%5Cn.crossrider-nofity-34345-body-theme-white-black%20.mirrors%20li%20a%2C%5Cn.crossrider-nofity-34344-body-theme-white-black%20.mirrors%20li%20a%20%7B%5Cn%5Ctdisplay%3A%20block%3B%5Cn%5Ctpadding-left%3A%2022px%3B%5Cn%5Ctline-height%3A%2025px%3B%5Cn%5Ctheight%3A%2024px%3B%5Cn%5Ctwhite-space%3A%20nowrap%3B%5Cn%5Ctbackground%3A%20url%28http%3A//d28me8o1j6adyz.cloudfront.net/organic/main/images/download.png%29%20left%205px%20no-repeat%3B%5Cn%5Ctcolor%3A%20%231491cc%3B%5Cn%7D%22");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.ab1ac2ff78e514bb68bf887f1d567919a4bb97481aead4c2ea62be25e264651bbcom49074.49074.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssfiles.com%22%5D%7D%2C%2250onred_s%22%3A%7B%22urls%22%3A%5B%22giganticsavings-a.akamaihd.net/loaders/%5BA-Z%2Ca-z%2C0-9%5D+/l.js%22%5D%7D%2C%2250onred_v%22%3A%7B%22urls%22%3A%5B%22beecoup-a.akamaihd.net/loaders/%5BA-Z%2Ca-z%2C0-9%5D+/l.js%22%5D%7D%2C%22revizer_s%22%3A%7B%22urls%22%3A%5B%22gim.mapopti.net%22%5D%7D%2C%22sterkly_s%22%3A%7B%22urls%22%3A%5B%22wac.edgecastcdn.net/800952/4d2cc865-d951-4ee0-addf-e4a06284de74%22%5D%7D%7D");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.bootstrappedAddons", "{\"feca4b87-3be4-43da-a1b1-137c24220968@jetpack\":{\"version\":\"0.3.0\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\feca4b87-3be4-43da-a1b1-137c24220968@jetpack.xpi\"},\"{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}\":{\"version\":\"7.0\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi\"},\"{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}\":{\"version\":\"2.1.2\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi\"}}");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.crossrider.bic", "13b0e1e9994d3a1ca97cc4ab247a0260");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.feca4b87-3be4-43da-a1b1-137c24220968@jetpack.ccode", "[\"w\",8,\"s\",2,\"r\",\"w\",52]");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.feca4b87-3be4-43da-a1b1-137c24220968@jetpack.newVer", "");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.feca4b87-3be4-43da-a1b1-137c24220968@jetpack.nextSibling", "home-button");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.feca4b87-3be4-43da-a1b1-137c24220968@jetpack.player", "ima-vfl1LZyZ5");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.feca4b87-3be4-43da-a1b1-137c24220968@jetpack.showInstruction", true);
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.installCache", "[{\"name\":\"app-global\",\"addons\":{\"{972ce4c6-7e08-4474-a285-3208198ce6fd}\":{\"descriptor\":\"C:\\\\Program Files (x86)\\\\Mozilla Firefox\\\\browser\\\\extensions\\\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\",\"mtime\":1392372348247,\"rdfTime\":1392372348172}}},{\"name\":\"app-profile\",\"addons\":{\"artur.dubovoy@gmail.com\":{\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\artur.dubovoy@gmail.com.xpi\",\"mtime\":1364707481147},\"b1ac2ff7-8e51-4bb6-8bf8-87f1d567919a@4bb97481-aead-4c2e-a62b-e25e264651bb.com\":{\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\b1ac2ff7-8e51-4bb6-8bf8-87f1d567919a@4bb97481-aead-4c2e-a62b-e25e264651bb.com\",\"mtime\":1394740268663,\"rdfTime\":1391779332701},\"feca4b87-3be4-43da-a1b1-137c24220968@jetpack\":{\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\feca4b87-3be4-43da-a1b1-137c24220968@jetpack.xpi\",\"mtime\":1380968896614},\"firedownload@mozilla.org\":{\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\firedownload@mozilla.org.xpi\",\"mtime\":1353151100085},\"foxmarks@kei.com\":{\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\foxmarks@kei.com\",\"mtime\":1340477733282,\"rdfTime\":1338489417000},\"paulsaintuzb@gmail.com\":{\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\paulsaintuzb@gmail.com.xpi\",\"mtime\":1378560740552},\"personas@christopher.beard\":{\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\personas@christopher.beard.xpi\",\"mtime\":1368774708869},\"unplug@compunach\":{\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\unplug@compunach.xpi\",\"mtime\":1348050441159},\"{0b457cAA-602d-484a-8fe7-c1d894a011ba}\":{\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\{0b457cAA-602d-484a-8fe7-c1d894a011ba}\",\"mtime\":1392372386447,\"rdfTime\":1392372386111},\"{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}\":{\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi\",\"mtime\":1340724860941},\"{7a88e876-d715-4503-a7bf-a8eba13ca3f9}\":{\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\{7a88e876-d715-4503-a7bf-a8eba13ca3f9}.xpi\",\"mtime\":1340610335027},\"{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}\":{\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi\",\"mtime\":1375962186817},\"{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}\":{\"descriptor\":\"C:\\\\Users\\\\Devilxangel\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\gwu1nd19.default\\\\extensions\\\\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi\",\"mtime\":1343242337668}}}]");
[Devilxangel] Supprim� avec succ�s : user_pref("extensions.personas.toolbarButtonInstalled", true);
[Devilxangel] Supprim� avec succ�s : user_pref("fireshot.toolbarCreated", true);
[Devilxangel] Supprim� avec succ�s : user_pref("lightweightThemes.usedThemes", "[{\"id\":\"18983\",\"name\":\"alienware style\",\"headerURL\":\"https://addons.mozilla.org/_files/23890/aliewareskin.JPG?1242330118\",\"footerURL\":\"https://addons.mozilla.org/_files/23890/Copyofaliewareskin.JPG?1242330118\",\"textcolor\":\"#2799d6\",\"accentcolor\":\"#268fcc\",\"iconURL\":\"https://addons.mozilla.org/_files/23890/preview_small.jpg?1242330118\",\"previewURL\":\"https://addons.mozilla.org/_files/23890/preview.jpg?1242330118\",\"author\":\"ldblack\",\"updateURL\":\"https://versioncheck.addons.mozilla.org/en-US/themes/update-check/18983?src=gp\",\"version\":\"0\",\"updateDate\":1374908884824,\"installDate\":1367591337654},{\"id\":\"473283\",\"name\":\"Mozilla Firefox Persona...animated\",\"headerURL\":\"http://www.getpersonas.com/static/8/3/473283/headeranigif.png\",\"footerURL\":\"http://www.getpersonas.com/static/8/3/473283/MozillaFirefox_footer_byLisa.jpg\",\"textcolor\":\"#336666\",\"accentcolor\":\"#ffffff\",\"iconURL\":\"https://www.getpersonas.com/static/8/3/473283/preview_small.jpg\",\"previewURL\":\"https://www.getpersonas.com/static/8/3/473283/preview.jpg\",\"author\":\"LisaAtTheBeach\",\"description\":\"Mozilla Firefox logo, fox, earth, paint roller brush, paint splotches, free web browser, best Firefox persona, animated, animation\\n\\nchild friendly persona\\n\\nPersonas by LisaAtTheBeach\",\"updateURL\":\"https://www.getpersonas.com/update_check/473283\"}]");
[Devilxangel] Supprim� avec succ�s : user_pref("samfind.toolbar.layout", "just-websites");
[Devilxangel] Supprim� avec succ�s : user_pref("samfind.toolbar.topics.and.websites.opened", "31");
[Devilxangel] Supprim� avec succ�s : user_pref("smartbar.machineId", "BVVAIJTELJXUPF9P5FI6QIVWTC5QSJEV2BUPHHQOEQLOSGXCHDSQIWO0QZUYX3/Y9I8J/VSSPSS79LCK7PICAQ");
���������� | D�tournement des cl�s StartMenuInternet
R�par� : [64][HKLM\Software\Clients\StartMenuInternet\IExplore.exe\shell\open\command] : C:\Program Files\Internet Explorer\iexplore.exe -> "C:\Program Files (x86)\Internet Explorer\iexplore.exe"
���������� | AppInit_DLLs
[64][HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]|[LoadAppInit_DLLs] : 1
[32][HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]|[LoadAppInit_DLLs] : 1
���������� | D�tournement Javascript
���������� | Firewall
���������� | Fichiers temporaires
[Default User] Fichiers temporaires Supprim�s : 356 Ko
[All Users] Fichiers temporaires Supprim�s : 0 Ko
[Default] Fichiers temporaires Supprim�s : 0 Ko
[Public] Fichiers temporaires Supprim�s : 0 Ko
[Little Devilxangel] Fichiers temporaires Supprim�s : 138040 Ko
[Mini Devilxangel] Fichiers temporaires Supprim�s : 288100 Ko
[UpdatusUser] Fichiers temporaires Supprim�s : 356 Ko
[Devilxangel] Fichiers temporaires Supprim�s : 378797 Ko
Autre rapport
���������� |EOF| ���������� | 12:11:09