Publicité
Publicité
Format du document : text/plain
Prévisualisation
# AdwCleaner v5.110 - Rapport créé le 13/04/2016 à 17:24:53
# Mis à jour le 10/04/2016 par Xplode
# Base de données : 2016-04-11.4 [Serveur]
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (X64)
# Nom d'utilisateur : DUS - DUS-PC
# Exécuté depuis : C:\Users\DUS\Downloads\adwcleaner_5.110.exe
# Option : Nettoyer
# Support : http://toolslib.net/forum
***** [ Services ] *****
[-] Service supprimé : Update AdvanceElite
***** [ Dossiers ] *****
[-] Dossier supprimé : C:\Program Files (x86)\AdvanceElite
[-] Dossier supprimé : C:\Program Files (x86)\AskPartnerNetwork
[-] Dossier supprimé : C:\Program Files (x86)\PC Speed Maximizer
[#] Dossier supprimé : C:\Program Files (x86)\AdvanceElite
[-] Dossier supprimé : C:\ProgramData\apn
[-] Dossier supprimé : C:\ProgramData\Ask
[#] Dossier supprimé : C:\ProgramData\Application Data\apn
[#] Dossier supprimé : C:\ProgramData\Application Data\Ask
[-] Dossier supprimé : C:\Users\DUS\AppData\Local\Temp\apn
[-] Dossier supprimé : C:\Users\Marie-Reine\AppData\Local\apn
[-] Dossier supprimé : C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\extensions\toolbar@secure-surf.com
[-] Dossier supprimé : C:\Users\Marie-Reine\Documents\PC Speed Maximizer
[-] Dossier supprimé : C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\extensions\staged\{ad7ce998-a77b-4062-9ffb-1d0b7cb23183}
***** [ Fichiers ] *****
[-] Fichier supprimé : C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pfkfdlcdbajamklbneflfbcmfgddmpae_0.localstorage
[-] Fichier supprimé : C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_hdapp1008-a.akamaihd.net_0.localstorage
[-] Fichier supprimé : C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_hdapp1008-a.akamaihd.net_0.localstorage-journal
[-] Fichier supprimé : C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage
[-] Fichier supprimé : C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage-journal
[-] Fichier supprimé : C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.secure-surf.com_0.localstorage
[-] Fichier supprimé : C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.secure-surf.com_0.localstorage-journal
[-] Fichier supprimé : C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
[-] Fichier supprimé : C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
[-] Fichier supprimé : C:\Users\Public\Desktop\iLivid.lnk
***** [ DLLs ] *****
***** [ Raccourcis ] *****
***** [ Tâches planifiées ] *****
***** [ Registre ] *****
[-] Clé supprimée : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
[-] Clé supprimée : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
[-] Clé supprimée : HKLM\SOFTWARE\Classes\protector_dll.Protector
[-] Clé supprimée : HKLM\SOFTWARE\Classes\protector_dll.Protector.1
[-] Clé supprimée : HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho
[-] Clé supprimée : HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho.1
[-] Clé supprimée : HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib
[-] Clé supprimée : HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1
[-] Clé supprimée : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
[-] Clé supprimée : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
[-] Clé supprimée : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
[-] Clé supprimée : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
[-] Clé supprimée : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
[-] Clé supprimée : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
[-] Clé supprimée : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
[-] Clé supprimée : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
[-] Clé supprimée : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
[-] Clé supprimée : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
[-] Clé supprimée : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
[-] Clé supprimée : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
[-] Valeur supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{21FA44EF-376D-4D53-9B0F-8A89D3229068}]
[-] Clé supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
[-] Clé supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
[-] Clé supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
[-] Clé supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
[-] Clé supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
[-] Clé supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
[-] Clé supprimée : HKCU\Software\APN
[-] Clé supprimée : HKU\.DEFAULT\Software\AskPartnerNetwork
[-] Clé supprimée : HKU\S-1-5-21-2288382528-3121403105-3010336668-1003\Software\YahooPartnerToolbar
[-] Clé supprimée : HKU\S-1-5-21-2288382528-3121403105-3010336668-1004\Software\APN
[-] Donnée restaurée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
[-] Donnée restaurée : HKU\S-1-5-21-2288382528-3121403105-3010336668-1003\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Donnée restaurée : HKU\S-1-5-21-2288382528-3121403105-3010336668-1003\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Clé supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9CB96984-43C3-4D44-90EF-01466EFCF7BB}
[-] Donnée restaurée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Clé supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
[-] Donnée restaurée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Clé supprimée : HKU\S-1-5-21-2288382528-3121403105-3010336668-1003\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
[-] Clé supprimée : HKU\S-1-5-21-2288382528-3121403105-3010336668-1003\Software\Microsoft\Internet Explorer\SearchScopes\{7043D7D2-3FF0-4135-A155-04AACBCD9D15}
[-] Clé supprimée : HKU\S-1-5-21-2288382528-3121403105-3010336668-1003\Software\Microsoft\Internet Explorer\SearchScopes\{9CB96984-43C3-4D44-90EF-01466EFCF7BB}
[-] Clé supprimée : HKU\S-1-5-21-2288382528-3121403105-3010336668-1003\Software\Microsoft\Internet Explorer\SearchScopes\{EC644A48-026D-4780-84C3-83229A26FA0F}
[-] Donnée restaurée : HKU\S-1-5-21-2288382528-3121403105-3010336668-1003\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\akamaihd.net
[-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com
[-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\chatango.com
[-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\cloudfront.net
[-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\d16fk4ms6rqz1v.cloudfront.net
[-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\d1y544kxfoms0z.cloudfront.net
[-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\d22j4fzzszoii2.cloudfront.net
[-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\d30ke5tqu2tkyx.cloudfront.net
[-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\st.chatango.com
[-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
***** [ Navigateurs ] *****
[-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\prefs.js] [Preference] supprimée : user_pref("browser.search.defaultengine", "Ask.com");
[-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\prefs.js] [Preference] supprimée : user_pref("browser.search.order.1", "Ask.com");
[-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\prefs.js] [Preference] supprimée : user_pref("browser.search.selectedEngine", "Astromenda");
[-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\prefs.js] [Preference] supprimée : user_pref("datareporting.sessions.previous.703", "{\"s\":1460291692345,\"a\":5,\"t\":35,\"c\":true,\"m\":717,\"fp\":5863,\"sr\":6125}");
[-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\prefs.js] [Preference] supprimée : user_pref("extensions.asktb.ff-original-keyword-url", "");
[-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.hmpgUrl", "hxxp://astromenda.com/?f=1&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytD[...]
[-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.newTabUrl", "hxxp://astromenda.com/?f=2&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzy[...]
[-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.prtnrId", "WSE_Astromenda");
[-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.srchPrvdr", "Astromenda");
[-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.tlbrSrchUrl", "hxxp://astromenda.com/?f=3&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtB[...]
[-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.hmpgUrl", "hxxp://astromenda.com/?f=1&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytD[...]
[-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.srchPrvdr", "Astromenda");
[-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.newTabUrl", "hxxp://astromenda.com/?f=2&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzy[...]
[-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.tlbrSrchUrl", "hxxp://astromenda.com/?f=3&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtB[...]
[-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.prtnrId", "WSE_Astromenda");
[-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\prefs.js] [Preference] supprimée : user_pref("browser.search.order.1", "Ask.com");
[-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\prefs.js] [Preference] supprimée : user_pref("browser.search.selectedEngine", "secure-surf");
[-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\prefs.js] [Preference] supprimée : user_pref("browser.startup.homepage", "hxxp://www.secure-surf.com/");
[-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.hmpgUrl", "hxxp://astromenda.com/?f=1&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytD[...]
[-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.newTabUrl", "hxxp://astromenda.com/?f=2&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzy[...]
[-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.prtnrId", "WSE_Astromenda");
[-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.srchPrvdr", "Astromenda");
[-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.tlbrSrchUrl", "hxxp://astromenda.com/?f=3&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtB[...]
[-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\prefs.js] [Preference] supprimée : user_pref("extensions.enabledAddons", "toolbar%40secure-surf.com:1.04.5,%7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:41.0.2");
[-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\prefs.js] [Preference] supprimée : user_pref("keyword.URL", "hxxp://www.secure-surf.com/web?q=");
[-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.hmpgUrl", "hxxp://astromenda.com/?f=1&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytD[...]
[-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.srchPrvdr", "Astromenda");
[-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.newTabUrl", "hxxp://astromenda.com/?f=2&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzy[...]
[-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.tlbrSrchUrl", "hxxp://astromenda.com/?f=3&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtB[...]
[-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.prtnrId", "WSE_Astromenda");
[-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\prefs.js] [Preference] supprimée : user_pref("browser.search.defaultengine", "Ask.com");
[-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\prefs.js] [Preference] supprimée : user_pref("browser.search.order.1", "Ask.com");
[-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\prefs.js] [Preference] supprimée : user_pref("browser.search.selectedEngine", "Astromenda");
[-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\prefs.js] [Preference] supprimée : user_pref("extensions.asktb.ff-original-keyword-url", "");
[-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.hmpgUrl", "hxxp://astromenda.com/?f=1&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytD[...]
[-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.newTabUrl", "hxxp://astromenda.com/?f=2&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzy[...]
[-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.prtnrId", "WSE_Astromenda");
[-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.srchPrvdr", "Astromenda");
[-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.tlbrSrchUrl", "hxxp://astromenda.com/?f=3&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtB[...]
[-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.hmpgUrl", "hxxp://astromenda.com/?f=1&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytD[...]
[-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.srchPrvdr", "Astromenda");
[-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.newTabUrl", "hxxp://astromenda.com/?f=2&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzy[...]
[-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.tlbrSrchUrl", "hxxp://astromenda.com/?f=3&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtB[...]
[-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.prtnrId", "WSE_Astromenda");
[-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\prefs.js] [Preference] supprimée : user_pref("browser.search.defaultengine", "Ask.com");
[-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\prefs.js] [Preference] supprimée : user_pref("browser.search.defaultenginename", "Ask.com");
[-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\prefs.js] [Preference] supprimée : user_pref("browser.search.order.1", "Ask.com");
[-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\prefs.js] [Preference] supprimée : user_pref("browser.search.selectedEngine", "Astromenda");
[-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\prefs.js] [Preference] supprimée : user_pref("extensions.asktb.ff-original-keyword-url", "");
[-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\prefs.js] [Preference] supprimée : user_pref("keyword.URL", "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=ORJ&o=100000027&locale=fr_FR&apn_uid=54B0589B-F052-4565-92A1-8ADF5D69E6EE&apn_ptnrs=U3&apn_sauid=180C43DE-C393-4900-9B1B[...]
[-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.hmpgUrl", "hxxp://astromenda.com/?f=1&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytD[...]
[-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.srchPrvdr", "Astromenda");
[-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.newTabUrl", "hxxp://astromenda.com/?f=2&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzy[...]
[-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.tlbrSrchUrl", "hxxp://astromenda.com/?f=3&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtB[...]
[-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.prtnrId", "WSE_Astromenda");
[-] [C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] supprimé : ask.com
[-] [C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] supprimé : astromenda.com
[-] [C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] supprimé : fr.search.yahoo.com
[-] [C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] supprimé : www.yahoo.com
[-] [C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] supprimé : secure-surf
[-] [C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] supprimé : hxxp://www.secure-surf.com/
[-] [C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Default_Search_Provider_Data] supprimé : hxxp://www.secure-surf.com/web?q={searchTerms}
[-] [C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] supprimé : hxxp://www.secure-surf.com/
*************************
:: Clés "Tracing" supprimées
:: Paramètres Winsock réinitialisés
*************************
C:\AdwCleaner\AdwCleaner[C1].txt - [22891 octets] - [13/04/2016 17:24:53]
C:\AdwCleaner\AdwCleaner[S1].txt - [23500 octets] - [13/04/2016 17:14:52]
########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [23041 octets] ##########
# Mis à jour le 10/04/2016 par Xplode
# Base de données : 2016-04-11.4 [Serveur]
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (X64)
# Nom d'utilisateur : DUS - DUS-PC
# Exécuté depuis : C:\Users\DUS\Downloads\adwcleaner_5.110.exe
# Option : Nettoyer
# Support : http://toolslib.net/forum
***** [ Services ] *****
[-] Service supprimé : Update AdvanceElite
***** [ Dossiers ] *****
[-] Dossier supprimé : C:\Program Files (x86)\AdvanceElite
[-] Dossier supprimé : C:\Program Files (x86)\AskPartnerNetwork
[-] Dossier supprimé : C:\Program Files (x86)\PC Speed Maximizer
[#] Dossier supprimé : C:\Program Files (x86)\AdvanceElite
[-] Dossier supprimé : C:\ProgramData\apn
[-] Dossier supprimé : C:\ProgramData\Ask
[#] Dossier supprimé : C:\ProgramData\Application Data\apn
[#] Dossier supprimé : C:\ProgramData\Application Data\Ask
[-] Dossier supprimé : C:\Users\DUS\AppData\Local\Temp\apn
[-] Dossier supprimé : C:\Users\Marie-Reine\AppData\Local\apn
[-] Dossier supprimé : C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\extensions\toolbar@secure-surf.com
[-] Dossier supprimé : C:\Users\Marie-Reine\Documents\PC Speed Maximizer
[-] Dossier supprimé : C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\extensions\staged\{ad7ce998-a77b-4062-9ffb-1d0b7cb23183}
***** [ Fichiers ] *****
[-] Fichier supprimé : C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pfkfdlcdbajamklbneflfbcmfgddmpae_0.localstorage
[-] Fichier supprimé : C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_hdapp1008-a.akamaihd.net_0.localstorage
[-] Fichier supprimé : C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_hdapp1008-a.akamaihd.net_0.localstorage-journal
[-] Fichier supprimé : C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage
[-] Fichier supprimé : C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage-journal
[-] Fichier supprimé : C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.secure-surf.com_0.localstorage
[-] Fichier supprimé : C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.secure-surf.com_0.localstorage-journal
[-] Fichier supprimé : C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
[-] Fichier supprimé : C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
[-] Fichier supprimé : C:\Users\Public\Desktop\iLivid.lnk
***** [ DLLs ] *****
***** [ Raccourcis ] *****
***** [ Tâches planifiées ] *****
***** [ Registre ] *****
[-] Clé supprimée : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
[-] Clé supprimée : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
[-] Clé supprimée : HKLM\SOFTWARE\Classes\protector_dll.Protector
[-] Clé supprimée : HKLM\SOFTWARE\Classes\protector_dll.Protector.1
[-] Clé supprimée : HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho
[-] Clé supprimée : HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho.1
[-] Clé supprimée : HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib
[-] Clé supprimée : HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1
[-] Clé supprimée : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
[-] Clé supprimée : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
[-] Clé supprimée : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
[-] Clé supprimée : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
[-] Clé supprimée : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
[-] Clé supprimée : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
[-] Clé supprimée : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
[-] Clé supprimée : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
[-] Clé supprimée : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
[-] Clé supprimée : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
[-] Clé supprimée : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
[-] Clé supprimée : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
[-] Valeur supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{21FA44EF-376D-4D53-9B0F-8A89D3229068}]
[-] Clé supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
[-] Clé supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
[-] Clé supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
[-] Clé supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
[-] Clé supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
[-] Clé supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
[-] Clé supprimée : HKCU\Software\APN
[-] Clé supprimée : HKU\.DEFAULT\Software\AskPartnerNetwork
[-] Clé supprimée : HKU\S-1-5-21-2288382528-3121403105-3010336668-1003\Software\YahooPartnerToolbar
[-] Clé supprimée : HKU\S-1-5-21-2288382528-3121403105-3010336668-1004\Software\APN
[-] Donnée restaurée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
[-] Donnée restaurée : HKU\S-1-5-21-2288382528-3121403105-3010336668-1003\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Donnée restaurée : HKU\S-1-5-21-2288382528-3121403105-3010336668-1003\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Clé supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9CB96984-43C3-4D44-90EF-01466EFCF7BB}
[-] Donnée restaurée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Clé supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
[-] Donnée restaurée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Clé supprimée : HKU\S-1-5-21-2288382528-3121403105-3010336668-1003\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
[-] Clé supprimée : HKU\S-1-5-21-2288382528-3121403105-3010336668-1003\Software\Microsoft\Internet Explorer\SearchScopes\{7043D7D2-3FF0-4135-A155-04AACBCD9D15}
[-] Clé supprimée : HKU\S-1-5-21-2288382528-3121403105-3010336668-1003\Software\Microsoft\Internet Explorer\SearchScopes\{9CB96984-43C3-4D44-90EF-01466EFCF7BB}
[-] Clé supprimée : HKU\S-1-5-21-2288382528-3121403105-3010336668-1003\Software\Microsoft\Internet Explorer\SearchScopes\{EC644A48-026D-4780-84C3-83229A26FA0F}
[-] Donnée restaurée : HKU\S-1-5-21-2288382528-3121403105-3010336668-1003\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\akamaihd.net
[-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com
[-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\chatango.com
[-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\cloudfront.net
[-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\d16fk4ms6rqz1v.cloudfront.net
[-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\d1y544kxfoms0z.cloudfront.net
[-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\d22j4fzzszoii2.cloudfront.net
[-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\d30ke5tqu2tkyx.cloudfront.net
[-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\st.chatango.com
[-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
***** [ Navigateurs ] *****
[-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\prefs.js] [Preference] supprimée : user_pref("browser.search.defaultengine", "Ask.com");
[-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\prefs.js] [Preference] supprimée : user_pref("browser.search.order.1", "Ask.com");
[-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\prefs.js] [Preference] supprimée : user_pref("browser.search.selectedEngine", "Astromenda");
[-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\prefs.js] [Preference] supprimée : user_pref("datareporting.sessions.previous.703", "{\"s\":1460291692345,\"a\":5,\"t\":35,\"c\":true,\"m\":717,\"fp\":5863,\"sr\":6125}");
[-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\prefs.js] [Preference] supprimée : user_pref("extensions.asktb.ff-original-keyword-url", "");
[-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.hmpgUrl", "hxxp://astromenda.com/?f=1&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytD[...]
[-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.newTabUrl", "hxxp://astromenda.com/?f=2&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzy[...]
[-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.prtnrId", "WSE_Astromenda");
[-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.srchPrvdr", "Astromenda");
[-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.tlbrSrchUrl", "hxxp://astromenda.com/?f=3&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtB[...]
[-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.hmpgUrl", "hxxp://astromenda.com/?f=1&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytD[...]
[-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.srchPrvdr", "Astromenda");
[-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.newTabUrl", "hxxp://astromenda.com/?f=2&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzy[...]
[-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.tlbrSrchUrl", "hxxp://astromenda.com/?f=3&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtB[...]
[-] [C:\Users\DUS\AppData\Roaming\Mozilla\Firefox\Profiles\u1u6wlsu.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.prtnrId", "WSE_Astromenda");
[-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\prefs.js] [Preference] supprimée : user_pref("browser.search.order.1", "Ask.com");
[-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\prefs.js] [Preference] supprimée : user_pref("browser.search.selectedEngine", "secure-surf");
[-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\prefs.js] [Preference] supprimée : user_pref("browser.startup.homepage", "hxxp://www.secure-surf.com/");
[-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.hmpgUrl", "hxxp://astromenda.com/?f=1&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytD[...]
[-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.newTabUrl", "hxxp://astromenda.com/?f=2&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzy[...]
[-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.prtnrId", "WSE_Astromenda");
[-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.srchPrvdr", "Astromenda");
[-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.tlbrSrchUrl", "hxxp://astromenda.com/?f=3&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtB[...]
[-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\prefs.js] [Preference] supprimée : user_pref("extensions.enabledAddons", "toolbar%40secure-surf.com:1.04.5,%7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:41.0.2");
[-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\prefs.js] [Preference] supprimée : user_pref("keyword.URL", "hxxp://www.secure-surf.com/web?q=");
[-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.hmpgUrl", "hxxp://astromenda.com/?f=1&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytD[...]
[-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.srchPrvdr", "Astromenda");
[-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.newTabUrl", "hxxp://astromenda.com/?f=2&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzy[...]
[-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.tlbrSrchUrl", "hxxp://astromenda.com/?f=3&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtB[...]
[-] [C:\Users\Marie-Reine\AppData\Roaming\Mozilla\Firefox\Profiles\1gxyonzk.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.prtnrId", "WSE_Astromenda");
[-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\prefs.js] [Preference] supprimée : user_pref("browser.search.defaultengine", "Ask.com");
[-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\prefs.js] [Preference] supprimée : user_pref("browser.search.order.1", "Ask.com");
[-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\prefs.js] [Preference] supprimée : user_pref("browser.search.selectedEngine", "Astromenda");
[-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\prefs.js] [Preference] supprimée : user_pref("extensions.asktb.ff-original-keyword-url", "");
[-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.hmpgUrl", "hxxp://astromenda.com/?f=1&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytD[...]
[-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.newTabUrl", "hxxp://astromenda.com/?f=2&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzy[...]
[-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.prtnrId", "WSE_Astromenda");
[-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.srchPrvdr", "Astromenda");
[-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\prefs.js] [Preference] supprimée : user_pref("extensions.astrmndasr.tlbrSrchUrl", "hxxp://astromenda.com/?f=3&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtB[...]
[-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.hmpgUrl", "hxxp://astromenda.com/?f=1&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytD[...]
[-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.srchPrvdr", "Astromenda");
[-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.newTabUrl", "hxxp://astromenda.com/?f=2&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzy[...]
[-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.tlbrSrchUrl", "hxxp://astromenda.com/?f=3&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtB[...]
[-] [C:\Users\Anne-Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\hmidmbln.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.prtnrId", "WSE_Astromenda");
[-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\prefs.js] [Preference] supprimée : user_pref("browser.search.defaultengine", "Ask.com");
[-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\prefs.js] [Preference] supprimée : user_pref("browser.search.defaultenginename", "Ask.com");
[-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\prefs.js] [Preference] supprimée : user_pref("browser.search.order.1", "Ask.com");
[-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\prefs.js] [Preference] supprimée : user_pref("browser.search.selectedEngine", "Astromenda");
[-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\prefs.js] [Preference] supprimée : user_pref("extensions.asktb.ff-original-keyword-url", "");
[-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\prefs.js] [Preference] supprimée : user_pref("keyword.URL", "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=ORJ&o=100000027&locale=fr_FR&apn_uid=54B0589B-F052-4565-92A1-8ADF5D69E6EE&apn_ptnrs=U3&apn_sauid=180C43DE-C393-4900-9B1B[...]
[-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.hmpgUrl", "hxxp://astromenda.com/?f=1&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytD[...]
[-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.srchPrvdr", "Astromenda");
[-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.newTabUrl", "hxxp://astromenda.com/?f=2&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzy[...]
[-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.tlbrSrchUrl", "hxxp://astromenda.com/?f=3&a=ast_ggfc_14_40_ff&cd=2XzuyEtN2Y1L1QzutDtDtByDyCyE0FyCyE0A0B0FyEtByDtCtN0D0Tzu0StCtDtDtAtN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtB[...]
[-] [C:\Users\Pierre-Christophe\AppData\Roaming\Mozilla\Firefox\Profiles\zi94ud6g.default\user.js] [Preference] supprimée : user_pref("extensions.astrmndasr.prtnrId", "WSE_Astromenda");
[-] [C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] supprimé : ask.com
[-] [C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] supprimé : astromenda.com
[-] [C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] supprimé : fr.search.yahoo.com
[-] [C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] supprimé : www.yahoo.com
[-] [C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] supprimé : secure-surf
[-] [C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] supprimé : hxxp://www.secure-surf.com/
[-] [C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Default_Search_Provider_Data] supprimé : hxxp://www.secure-surf.com/web?q={searchTerms}
[-] [C:\Users\Marie-Reine\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] supprimé : hxxp://www.secure-surf.com/
*************************
:: Clés "Tracing" supprimées
:: Paramètres Winsock réinitialisés
*************************
C:\AdwCleaner\AdwCleaner[C1].txt - [22891 octets] - [13/04/2016 17:24:53]
C:\AdwCleaner\AdwCleaner[S1].txt - [23500 octets] - [13/04/2016 17:14:52]
########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [23041 octets] ##########