Script ZHPFix
ShortcutFix
G2 - GCE: Preference [User Data\Default] [eofcbnmajmjmplflapaojjnihcjkigck] Avast SafePrice v.10.0.2502.149, (Activ�)
M3 - MFPP: Plugins - [Marchand] -- C:\Documents and Settings\Marchand\Application Data\Mozilla\Firefox\Profiles\30qp0ngr.default\searchplugins\YouGoo.xml =>PUP.YouGoo
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 0 => Internet Explorer Proxy GET HTTP1.1 Disabled
O3 - Toolbar: Easy-WebPrint - [HKLM]{327C2873-E90D-4c37-AA9D-10AC9BABA46C} . (.Pas de propri�taire - Easy-WebPrint.) -- C:\Program Files\Canon\Easy-WebPrint\Toolband.dll => Toolbar.Agent*
O3 - Toolbar: &Windows Live Toolbar - [HKLM]{21FA44EF-376D-4D53-9B0F-8A89D3229068} . (.Microsoft Corporation - Windows Live Toolbar Core.) -- C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: (no name) - [HKCU]{1E796980-9CC5-11D1-A83F-00C04FC99D61} Cl� orpheline => Possible Infection BT (Emusic.Adw)
O3 - Toolbar: (no name) - [HKCU]{710EB7A1-45ED-11D0-924A-0020AFC7AC4D} Cl� orpheline => Microsoft Papier Peint pour IE6 et OE6
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} Cl� orpheline => Symantec Norton Antivirus
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{EF99BD32-C1FB-11D2-892F-0090271D4F88} Cl� orpheline => Toolbar.Yahoo
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{21FA44EF-376D-4D53-9B0F-8A89D3229068} Cl� orpheline => Microsoft Windows Live Toolbar
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{01E04581-4EEE-11D0-BFE9-00AA005B4383} Cl� orpheline => Microsoft Internet Explorer Address Bar
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{0E5CBF21-D15F-11D0-8301-00AA005B4383} Cl� orpheline => Internet Explorer Links Bar
OPT:O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\System32\CTFMON.exe
OPT:O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\System32\CTFMON.exe
OPT:O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\System32\CTFMON.exe
OPT:O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\System32\CTFMON.exe
O14 - IERESET.INF: START_PAGE_URL=START_PAGE_URL=http://www.creaf.com
O24 - Desktop Component 0: (no name) - file:file:///C:/DOCUME~1/Marchand/LOCALS~1/Temp/msohtml1/01/clip_image002.jpg => Desktop General Personal WallPaper
[MD5.00000000000000000000000000000000] [APT] [Ad-Aware Update (Weekly)] (...) -- C:\Program Files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe (.not file.) [0] => Lavasoft
O39 - APT: - (..) -- C:\WINDOWS\Tasks\At1.job [458]
O39 - APT: - (..) -- C:\WINDOWS\Tasks\At2.job [458]
O39 - APT: - (..) -- C:\WINDOWS\Tasks\At3.job [458]
O39 - APT: - (..) -- C:\WINDOWS\Tasks\At4.job [458]
O40 - ASIC: Installed Component - S-1-5-21-484763869-57989841-839522115-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 - >{369FA940-F27E-11D2-B31E-00AA00A110B7}S08718 -- Not Hexad�cimal CLSID => PUP.UTorrentControl
O42 - Logiciel: ELIE4 - (...) [HKCU] -- ELIE
O42 - Logiciel: Ma Page Web v2.1 - (...) [HKLM] -- Ma Page Web v2.1
[HKCU\Software\65]
[HKCU\Software\IncrediMail] => Messaging.Incredimail
[HKCU\Software\YahooPartnerToolbar] => Toolbar.Yahoo
[HKLM\Software\ISDNet]
O43 - CFD: 26/02/2005 - 17:57:56 - [] ----D C:\Program Files\Ma Page Web v2.1
O43 - CFD: 14/06/2010 - 08:20:14 - [] ----D C:\Program Files\SavingsKeyFr
O43 - CFD: 25/09/2009 - 20:18:14 - [0] ----D C:\Documents and Settings\All Users\Application Data\{EF63305C-BAD7-4144-9208-D65528260864}
O43 - CFD: 30/06/2013 - 10:41:02 - [] ----D C:\Documents and Settings\All Users\Application Data\APN => Toolbar.Ask
O43 - CFD: 23/10/2009 - 15:42:52 - [0] ----D C:\Documents and Settings\All Users\Menu D�marrer\Programmes\ELIE4
O43 - CFD: 16/05/2007 - 19:06:42 - [] ----D C:\Documents and Settings\Marchand\Application Data\LimeWire => LimeWire Java PeerToPeer
O43 - CFD: 14/06/2010 - 08:20:16 - [] ----D C:\Documents and Settings\Marchand\Application Data\SavingsKeyFr
O43 - CFD: 20/10/2005 - 13:43:40 - [] ----D C:\Documents and Settings\Marchand\Local Settings\Application Data\IM => Messaging.IncrediMail
O44 - LFC:[MD5.092E9505CCC854077B614657F183B12F] - 22/01/2015 - 20:08:38 ---A- . (...) -- C:\RECUP2.DOC [794]
O47 - AAKE:Key Export SP - "C:\Program Files\IncrediMail\bin\IMApp.exe" [Enabled] .(...) -- C:\Program Files\IncrediMail\bin\IMApp.exe (.not file.) => Messaging.Incredimail
O47 - AAKE:Key Export SP - "C:\Program Files\IncrediMail\bin\IncMail.exe" [Enabled] .(...) -- C:\Program Files\IncrediMail\bin\IncMail.exe (.not file.) => Messaging.Incredimail
O47 - AAKE:Key Export SP - "C:\Program Files\IncrediMail\bin\ImpCnt.exe" [Enabled] .(...) -- C:\Program Files\IncrediMail\bin\ImpCnt.exe (.not file.) => Messaging.Incredimail
O47 - AAKE:Key Export SP - "C:\Documents and Settings\Marchand\Bureau\incredimail_install.exe" [Enabled] .(...) -- C:\Documents and Settings\Marchand\Bureau\incredimail_install.exe (.not file.) => Messaging.Incredimail
O47 - AAKE:Key Export SP - "C:\Documents and Settings\Marchand\Local Settings\Temp\is-LOVL9.tmp\is-D5OO4.tmp" [Enabled] .(...) -- C:\Documents and Settings\Marchand\Local Settings\Temp\is-LOVL9.tmp\is-D5OO4.tmp (.not file.) => Fichier absent
O47 - AAKE:Key Export SP - "C:\Program Files\LimeWire\LimeWire.exe" [Enabled] .(...) -- C:\Program Files\LimeWire\LimeWire.exe (.not file.) => LimeWire%Java PeerToPeer
O51 - MPSK:{1a60c9f2-3e32-11de-bd10-001109664ce6}\AutoRun\command. (...) -- C:\WINDOWS\system32\copy.exe (.not file.) => Fichier absent
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules./v1/update/rule/foo.bar.style", "some style"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules./v1/update/rule/foo.bar.url", "testik.bb"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.atlas.cz.style", ".WRCN {display:none} .result .WRCN {display:inline !important; background:[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.atlas.cz.url", "^http\\:\\/\\/searchatlas\\.centrum\\.cz\\/.+"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.atlas.cz\":{.style", ".WRCN {display:none} .results-list .WRCN {display:inline !important; b[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.atlas.cz\":{.url", "^http\\\\:\\\\/\\\\/searchatlas\\\\.centrum\\\\.cz\\\\/.+"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.atlas.sk.style", ".WRCN {display:none} .katalogSponsorItem .WRCN {display:inline !important;[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.atlas.sk.url", "^http\\:\\/\\/hladaj\\.atlas\\.sk\\/.+"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.baidu.com.style", ".WRCN {display:none} .result .f .WRCN {display:inline !important; backgro[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.baidu.com.url", "^http\\:\\/\\/www\\.baidu\\.com\\/.*"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.bing.com.style", ".WRCN {display:none} .sb_tlst .WRCN, .sp_pss .WRCN {display:inline !import[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.bing.com.url", "^http(s)?\\:\\/\\/www\\.bing\\.com\\/(.)*"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.centrum.cz.style", ".WRCN {display:none} .results-list h3 > .WRCN {display:inline !important[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.centrum.cz.url", "^http(s)?\\:\\/\\/search\\.centrum\\.cz\\/(.)*"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.centrum.sk.style", ".WRCN {display:none} .katalogSponsorItem .WRCN {display:inline !importan[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.centrum.sk.url", "^http\\:\\/\\/search\\.centrum\\.sk\\/.+"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.delicious.com.style", ".WRCN {display:none} .taggedlink + .WRCN, .data .full-url .WRCN, .con[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.delicious.com.url", "^http\\\\:\\\\/\\\\/(www\\\\.)?delicious\\\\.com\\\\/(.)*"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.dmoz.org.style", ".WRCN {display:none} ol.site li .WRCN{display:inline !important; backgroun[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.dmoz.org.url", "^http\\:\\/\\/www\\.dmoz\\.org\\/search(.)+"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.excite.com.style", ".WRCN {display:none} .searchResult .resultTitlePane .WRCN {display:inlin[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.excite.com.url", "^http\\\\:\\\\/\\\\/msxml\\\\.excite\\\\.com\\\\/search\\\\/.*"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.facebook.com.style", ".WRCN {display:none} .WRCN {display:none} .uiAttachmentTitle .WRCN, .u[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.facebook.com.url", "^http\\:\\/\\/www\\.facebook\\.com\\/.*"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.fastweb.it.style", ".WRCN {display:none} .gs-title .WRCN {display:inline !important; backgro[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.fastweb.it.url", "^http\\:\\/\\/www\\.fastweb\\.it\\/portale\\/google\\/.+"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.gazeta.pl.style", ".WRCN {display:none} .results-index HEADER .WRCN {display:inline !import[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.gazeta.pl.url", "^http\\\\:\\\\/\\\\/szukaj\\\\.gazeta\\\\.pl\\\\/.+"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.google.com.style", ".WRCN {display:none} .r .WRCN, .osl .WRCN, .bc .WRCN, .fc .WRCN, #rhslin[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.google.com.url", "^http(s)?\\:\\/\\/((.)+\\.)?google\\.(com|[a-z\\.]{2,})\\/(.)*"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.interia.pl.style", ".WRCN {display:none} .row .WRCN {display:inline !important; background: [...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.interia.pl.url", "^http\\:\\/\\/(www\\.)?google\\.interia\\.pl\\/szukaj\\/.+"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.lycos.com.style", ".WRCN {display:none} .result .WRCN {display:block !important; position: a[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.lycos.com.url", "^http\\\\:\\\\/\\\\/search\\\\.lycos\\\\.(com?\\\\.[a-z]{2}|[a-z]{2,})\\\\/[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.onet.pl.style", ".WRCN {display:none} #main .link .WRCN {display:inline !important; backgrou[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.onet.pl.url", "^http\\\\:\\\\/\\\\/szukaj\\\\.onet\\\\.pl\\\\/.+"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.paginegialle.it.style", ".WRCN {display:none} .lnkwww + .WRCN {display:inline !important; ba[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.paginegialle.it.url", "^http\\\\:\\\\/\\\\/www\\\\.paginegialle\\\\.it\\\\/pgol\\\\/.+"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.plus.google.com.style", ".WRCN {display:none} .wm .WRCN, .yF .WRCN {display:inline; backgrou[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.plus.google.com.url", "^http(s)?\\\\:\\\\/\\\\/plus\\\\.?google\\\\.(com?\\\\.[a-z]{2}|[a-z][...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.public.avast.com.style", ".WRCN {display:inline; background: url(\"IMAGE\") right no-repeat}[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.public.avast.com.url", "^http(s)?\\:\\/\\/public\\.avast\\.com\\/(.)*"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.rambler.ru.style", ".WRCN {display:none} .b-serp__list .WRCN {display:inline !important; bac[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.rambler.ru.url", "^http\\\\:\\\\/\\\\/nova\\\\.rambler\\\\.ru\\\\/.+"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.scroogle.org.style", "a + .WRCN {display:inline !important; background: url(\"IMAGE\") right[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.scroogle.org.url", "^http\\:\\/\\/www\\.scroogle\\.org\\/.*"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.seznam.cz.style", ".WRCN {display:none} #results .WRCN, .sklik-title > .WRCN {display:inline[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.seznam.cz.url", "^http(s)?\\:\\/\\/search\\.seznam\\.cz\\/(.)*"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.sky.com.style", ".WRCN {display:none} #results h3 .WRCN, #sponsored_top h3 .WRCN {display:in[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.sky.com.url", "^http\\:\\/\\/search\\.sky\\.com/.+"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.slashdot.org.style", ".WRCN {display:none} .body i .WRCN {display:inline !important; backgro[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.slashdot.org.url", "^http\\:\\/\\/slashdot\\.org\\/.*"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.stackoverflow.com.style", ".WRCN {display:none} .post-text .WRCN {display:inline !important;[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.stackoverflow.com.url", "^http\\\\:\\\\/\\\\/stackoverflow\\\\.com\\\\/."); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.terra.com.br.url", "^http\\\\:\\\\/\\\\/buscador\\\\.terra\\\\.com\\\\.br\\\\/.+"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.tiscali.it.style", ".WRCN {display:none} .gs-title .WRCN {display:inline !important; backgr[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.tiscali.it.url", "^http\\\\:\\\\/\\\\/search\\\\.tiscali\\\\.it\\\\/.+"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.twitter.com.style", ".WRCN {display:none} .entry-content .web + .WRCN, .twtr-tweet-text .twt[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.twitter.com.url", "^http://twitter\\.com\\/.*"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.uol.com.br.style", ".WRCN {display:none} #results dt .WRCN, #results .link .WRCN {display:in[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.uol.com.br.url", "^http\\:\\/\\/(.\\.)?busca\\.uol\\.com\\.br\\/.+"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.virgilio.it.style", ".WRCN {display:none} .record .WRCN {display:inline !important; backgro[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.virgilio.it.url", "^http\\\\:\\\\/\\\\/ricerca\\\\.virgilio\\\\.it\\\\/.+"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.virginmedia.com.style", ".WRCN {display:none} .result .title + .WRCN {display:inline !import[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.virginmedia.com.url", "^http\\\\:\\\\/\\\\/search\\\\.virginmedia\\\\.com\\\\/.+"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.whereis.com.style", ".WRCN {display:none} .priority_url .WRCN {display:inline !important; ba[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.whereis.com.url", "^http\\:\\/\\/www\\.whereis\\.com\\/.*"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.wp.pl.style", ".WRCN {display:none} .rek big .WRCN {display:inline !important; background: u[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.wp.pl.url", "^http\\:\\/\\/szukaj\\.wp\\.pl\\/.+"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.yahoo.com.style", ".WRCN {display:none} .sm-hd .WRCN, .sm-links .WRCN, .res h3 > .WRCN {disp[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.yahoo.com.url", "^http(s)?\\:\\/\\/((.)+\\.)?search\\.yahoo\\.com\\/(.)*"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.yell.com.style", ".WRCN {display:none} .advert-content .WRCN, .other-cta .WRCN {display:inli[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.yell.com.url", "^http\\:\\/\\/www\\.yell\\.com\\/.+"); =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.zoznam.sk.style", ".WRCN {display:none} .box_content .link_right .link_title + .WRCN, .gsc-t[...] =>Toolbar.Ask
O69 - SBI: prefs.js [Marchand - 30qp0ngr.default] user_pref("extensions.wrc.SearchRules.zoznam.sk.url", "^http\\\\:\\\\/\\\\/www\\\\.zoznam\\\\.sk\\\\/.+"); =>Toolbar.Ask
O69 - SBI: SearchScopes [HKCU] {e4a1ece8-ed94-4f93-80ea-75f978ceaf24} - (YouGoo) - http://www.yougoo.fr =>PUP.YouGoo
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}] =>PUP.Eorezo
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}] =>Adware.Bandoo
[HKLM\Software\Classes\CLSID\{08C06D61-F1F3-4799-86F8-BE1A89362C85}] =>Toolbar.Orange
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}] =>Toolbar.Yahoo
[HKLM\Software\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}] =>Toolbar.Yahoo
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{327C2873-E90D-4c37-AA9D-10AC9BABA46C}] =>Toolbar.EasyWebPrint
[HKLM\Software\Classes\CLSID\{327C2873-E90D-4c37-AA9D-10AC9BABA46C}] =>Toolbar.EasyWebPrint
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{669695BC-A811-4A9D-8CDF-BA8C795F261C}] =>Toolbar.Dashlane
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}] =>Toolbar.Yahoo
[HKLM\Software\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}] =>Toolbar.Yahoo
[HKLM\Software\Classes\Toolband.PM_Launcher] =>Toolbar.Agent
[HKLM\Software\Classes\Toolband.PR_BindStatusCallback] =>Toolbar.Agent
[HKLM\Software\Classes\Toolband.TBToolband] =>Toolbar.Agent
[HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]:{EF99BD32-C1FB-11D2-892F-0090271D4F88} =>Toolbar.Yahoo
ProxyFix
EmptyPrefetch
EmptyFlash
SysRestore
FirewallRAZ
EmptyTemp