Rapport de ZHPDiag v2013.7.22.36 par Nicolas Coolman, Update du 22/07/2013
Run by Mehdi at 22/07/2013 21:35:14
WebSite: http://nicolascoolman.webs.com
State : Version à jour.
WhiteList : Enable
High Elevated Privileges : OK
UAC : Deactivate by program

---\\ Web Browser
MSIE: Internet Explorer v9.0.8112.16421
GCIE: Google Chrome v28.0.1500.72

---\\ Windows Product Information
~ Langage: Français
Windows Vista Business Edition, 64-bit Service Pack 2 (Build 6002)
Windows Server License Manager Script : OK
~ Vista, OEM_COA_NSLP channel
Windows ID Activation : OK
~ Windows Partial Key : DCBX4
Windows License : OK
Windows Automatic Updates : OK

---\\ System Protection
Avira Free Antivirus v13.0.0.3880
Spybot - Search & Destroy v1.6.0

---\\ System Optimizer
CCleaner v2.32  =>Piriform Ltd

---\\ Peer To Peer (P2P)

---\\ Software Update
Adobe Flash Player 11 Plugin
Adobe Reader X
Java 7 Update 21

---\\ System Information
~ Processor: Intel64 Family 6 Model 26 Stepping 4, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 4083 MB (51% free)
System Restore: Activé (Enable)
System drive C: has 70 GB (34%) free of 200 GB

---\\ Logged in mode
~ Computer Name: PC-DE-MEHDI
~ User Name: Mehdi
~ All Users Names: Mehdibis, Mehdi, ASPNET, Administrateur, 
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\Mehdi\AppData\Roaming\
~ %Desktop% : C:\Users\Mehdi\Desktop\
~ %Favorites% : C:\Users\Mehdi\Favorites\
~ %LocalAppData% : C:\Users\Mehdi\AppData\Local\
~ %StartMenu% : C:\Users\Mehdi\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 70 Go of 200 Go)
D:\ CD-ROM drive (Not Inserted)

---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
~ Security Center: 29 Legitimates Filtered in 00mn 00s

---\\ Recherche particulière de fichiers génériques
[MD5.6B08E54A451B3F95E4109DBA7E594270] - (.Microsoft Corporation - Explorateur Windows.) (.11/04/2009 - 08:10:17.) -- C:\Windows\Explorer.exe [3079168]
[MD5.117EA87DF785CA1B9D821F6F213DCE07] - (.Microsoft Corporation - Application de démarrage de Windows.) (.21/01/2008 - 03:48:42.) -- C:\Windows\System32\Wininit.exe [123904]
[MD5.5536F6E7B74DA37D3EDBB509DE9CE3F5] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.29/05/2013 - 06:35:44.) -- C:\Windows\System32\wininet.dll [1392128]
[MD5.6D0773A3A65D28B663F334C90441D01A] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.11/04/2009 - 08:11:08.) -- C:\Windows\System32\Winlogon.exe [405504]
[MD5.C4F6CE6087760AD70960C9EB130E7943] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.03/01/2012 - 15:25:21.) -- C:\Windows\system32\Drivers\AFD.sys [404992]
[MD5.E68D9B3A3905619732F7FE039466A623] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.11/04/2009 - 08:15:00.) -- C:\Windows\system32\Drivers\atapi.sys [20952]
[MD5.B4D787DB8D30793A4D4DF9FEED18F136] - (.Microsoft Corporation - CD-ROM File System Driver.) (.21/01/2008 - 03:48:59.) -- C:\Windows\system32\Drivers\Cdfs.sys [90624]
[MD5.C025AA69BE3D0D25C7A2E746EF6F94FC] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.11/04/2009 - 06:34:39.) -- C:\Windows\system32\Drivers\Cdrom.sys [79872]
[MD5.8B722BA35205C71E7951CDC4CDBADE19] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.14/04/2011 - 16:14:19.) -- C:\Windows\system32\Drivers\DfsC.sys [97792]
[MD5.F942C5820205F2FB453243EDFEC82A3D] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.11/04/2009 - 06:39:41.) -- C:\Windows\system32\Drivers\HDAudBus.sys [948736]
[MD5.CBB597659A2713CE0C9CC20C88C7591F] - (.Microsoft Corporation - Pilote de port i8042.) (.21/01/2008 - 03:45:41.) -- C:\Windows\system32\Drivers\i8042prt.sys [64000]
[MD5.B7E6212F581EA5F6AB0C3A6CEEEB89BE] - (.Microsoft Corporation - IP Network Address Translator.) (.21/01/2008 - 03:47:03.) -- C:\Windows\system32\Drivers\IpNat.sys [115712]
[MD5.1485811B320FF8C7EDAD1CAEBB1C6C2B] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.29/04/2011 - 14:39:34.) -- C:\Windows\system32\Drivers\MRxSmb.sys [135680]
[MD5.FC2C792EBDDC8E28DF939D6A92C83D61] - (.Microsoft Corporation - MBT Transport driver.) (.11/04/2009 - 06:42:33.) -- C:\Windows\system32\Drivers\netBT.sys [248320]
[MD5.2ACCAA3C3C55370A32F17B3595E1A217] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.03/03/2013 - 20:13:14.) -- C:\Windows\system32\Drivers\ntfs.sys [1513320]
[MD5.AECD57F94C887F58919F307C35498EA0] - (.Microsoft Corporation - Pilote de port parallèle.) (.02/11/2006 - 10:37:57.) -- C:\Windows\system32\Drivers\Parport.sys [96768]
[MD5.AC7BC4D42A7E558718DFDEC599BBFC2C] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.11/04/2009 - 06:43:38.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [124928]
[MD5.AE23E79B13FEB62939E2CA1189E71735] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.11/04/2009 - 06:49:55.) -- C:\Windows\system32\Drivers\rdpdr.sys [313856]
[MD5.290B6F6A0EC4FCDFC90F5CB6D7020473] - (.Microsoft Corporation - SMB Transport driver.) (.11/04/2009 - 06:42:19.) -- C:\Windows\system32\Drivers\smb.sys [88064]
[MD5.458919C8C42E398DC4802178D5FFEE27] - (.Microsoft Corporation - TDI Translation Driver.) (.11/04/2009 - 06:43:00.) -- C:\Windows\system32\Drivers\tdx.sys [94720]
[MD5.582F710097B46140F5A89A19A6573D4B] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.21/08/2012 - 12:50:57.) -- C:\Windows\system32\Drivers\volsnap.sys [267648]
~ Generic Processes:  Scanned in 00mn 00s

---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/4487
~ Mes musiques (My Musics) : 1/44
~ Mes Videos (My Videos) : 1/2
~ Mes Favoris (My Favorites) : 1/20
~ Mes Documents (My Documents) : 2/77556
~ Mon Bureau (My Desktop) : 1/29
~ Menu demarrer (Programs) : 1/32
~ Hidden Files:  Scanned in 00mn 51s

---\\ Processus lancés
[MD5.41A347A9064B1B17E3249D2C1435CE42] - (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe   [182808] [PID.2888]
[MD5.63B3FF83B87AFCEBA89CED54695DA0F6] - (.Safer Networking Limited - System settings protector.) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe   [1833296] [PID.3452]  =>Hijacker.Eazel
[MD5.E207A39FF4847AA5805CC223778BBFE1] - (.Logitech Inc. - Logitech Vid.) -- C:\Program Files (x86)\Logitech\Logitech Vid\Vid.exe   [6061400] [PID.4056]
[MD5.64584E925516568C2F6ACF337991E9BC] - (.Samsung Electronics Co., Ltd. - NPSAgent.) -- C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe   [102400] [PID.1180]
[MD5.D5D8A5E87D3C32C516E5B5E2BA5B0DBF] - (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe   [247768] [PID.3948]
[MD5.D9335549EAE48B14FB66EFCB6FFAE736] - (.Hewlett-Packard Co. - HP Digital Imaging Monitor.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe   [214360] [PID.3892]
[MD5.68A553BDFA855C4F1074696682FCDEB6] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe   [141600] [PID.4032]
[MD5.6CBEC289086EC51A263DA1413FF4208F] - (.Logitech Inc. - Logitech Webcam Software.) -- C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe   [165208] [PID.3304]
[MD5.DF22B0593DAA2B2EFAC69A2E5318B5A1] - (.{StringFileInfo_CompanyName} - {StringFileInfo_FileDescription}.) -- C:\Program Files (x86)\Ask.com\Updater\Updater.exe   [888488] [PID.896]
[MD5.4631FF0EE2964CCDC646AF807CB778F5] - (.Avira Operations GmbH & Co. KG - Avira System Tray Tool.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe   [345144] [PID.2464]
[MD5.C849445FF9F85A2A58E38E105518B64A] - (.Iminent - Iminent.) -- C:\Program Files (x86)\Iminent\Iminent.exe   [1074736] [PID.2936]  =>Adware.IMBooster
[MD5.CC3FDEF742497F1F019B9B852980570D] - (.Iminent - Iminent.) -- C:\Program Files (x86)\Iminent\Iminent.Messengers.exe   [884784] [PID.1592]  =>Adware.IMBooster
[MD5.D63797E8E7781EE1500A810CB6194FA6] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe   [253816] [PID.3016]
[MD5.6080A176D09435FC8E6E800996656E18] - (.Microsoft Corporation - Console IME.) -- C:\Windows\SysWOW64\conime.exe   [69120] [PID.4432]
[MD5.B70278D1459A677639D51892160FD365] - (.Hewlett-Packard Co. - HP CUE Status Root.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe   [184320] [PID.888]
[MD5.C2E9F997B2FEFE06C898BFEECF3B63B2] - (.Hewlett-Packard Co. - HP CUE Alert Popup Window Objects.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe   [610304] [PID.4160]
[MD5.883008A9B5BFF94A153D99DBA54CB5C1] - (.Hewlett-Packard - GPCore COM object.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe   [362496] [PID.3408]
[MD5.3CEE353F12064E24379C5EE49948317C] - (.TeamViewer GmbH - TeamViewer 8.) -- C:\Users\Mehdi\AppData\Local\Temp\TeamViewer\Version8\TeamViewer.exe   [9714016] [PID.5252]
[MD5.9265DC583D291B5C5C5631231BFD14B2] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [7748096] [PID.7708]
[MD5.99387251353598C939592FAF40DF8AA9] - (.Avira Operations GmbH & Co. KG - Avira Scheduler.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe   [84024] [PID.1772]
[MD5.ADDA5E1951B90D3D23C56D3CF0622ADC] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe   [65640] [PID.1888]
[MD5.8491FDA93507F2F27FFBA11372764086] - (.Avira Operations GmbH & Co. KG - Avira On-Access Service.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe   [108088] [PID.2072]
[MD5.557F35D1CA42AEA14A6690E21887A31F] - (.Apple Inc. - Apple Mobile Device Service.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe   [144712] [PID.2084]
[MD5.3F56903E124E820AEECE6D471583C6C1] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files (x86)\Bonjour\mDNSResponder.exe   [238888] [PID.2108]
[MD5.34AE0DFA3EE3B5B9975042D87332D0B7] - (...) -- C:\Users\Mehdi\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe   [107520] [PID.2128]  =>Adware.Bandoo
[MD5.18234EC42C951403BF889A9754FF1835] - (.Logitech Inc. -  LVPrS64H Module..) -- C:\Program Files (x86)\Common Files\Logishrd\LVMVFM\LVPrS64H.exe   [114008] [PID.2376]
[MD5.4C6329BA71216744F69F89D31FA88B6F] - (.Iminent - Iminent Protection.) -- C:\Program Files (x86)\Common Files\Umbrella\umbrella.exe   [2859048] [PID.2564]  =>Adware.IMBooster
[MD5.F620772888B6E3EDEF5C3E71E3D447F0] - (.TomTom - Windows Service for TomTom HOME.) -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe   [92632] [PID.2640]
[MD5.A9ACC4B9730B6D5B0BB2BFFDC53F0812] - (.Canon Inc. - Canon Camera Access Library 8.) -- C:\Program Files (x86)\Canon\CAL\CALMAIN.exe   [86606] [PID.2824]
[MD5.B956FB3A66DEFD66DEA0AECAA3FF6A57] - (.Intel Corporation - RAID Monitor.) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe   [354840] [PID.2844]
[MD5.696EB1F22EC71262BB8188639DBEED3E] - (.Avira Operations GmbH & Co. KG - Avira WebGuard Service.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.exe   [589368] [PID.1244]
[MD5.FB2D44674507B1F7C7D0C22993DCF926] - (.Bandoo Media Inc - Data Manager.) -- C:\Program Files (x86)\Search Results Toolbar\Datamngr\datamngrUI.exe   [1683456] [PID.2656]  =>PUP.SearchResults
[MD5.A34FC9FDEA5D54BC8AB70A1B50223F82] - (.TeamViewer GmbH - TeamViewer 8.) -- C:\Users\Mehdi\AppData\Local\Temp\TeamViewer\Version8\tv_w32.exe   [195936] [PID.6828]
[MD5.52846A23BBEB23862D9CA47710311C3D] - (.TeamViewer GmbH - TeamViewer 8.) -- c:\users\mehdi\appdata\local\temp\teamviewer\version8\TeamViewer_Desktop.exe   [4325728] [PID.5724]
~ Processes Running:  Scanned in 00mn 07s

---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Mehdi\AppData\Local\Google\Chrome\User Data\Default\Preferences
~ Google Browser: 0 Legitimates Filtered in 00mn 00s

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
C:\Users\Mehdi\AppData\Roaming\Mozilla\Firefox\Profiles\bjeoam9c.default\prefs.js
C:\Users\Mehdi\AppData\Roaming\Mozilla\Firefox\Profiles\bjeoam9c.default\user.js
M3 - MFPP: Plugins - [Mehdi] -- C:\Users\Mehdi\AppData\Roaming\Mozilla\Firefox\Profiles\bjeoam9c.default\searchplugins\askcomsearch.xml
M3 - MFPP: Plugins - [Mehdi] -- C:\Users\Mehdi\AppData\Roaming\Mozilla\Firefox\Profiles\bjeoam9c.default\searchplugins\google-language-fr.xml
M3 - MFPP: Plugins - [Mehdi] -- C:\Users\Mehdi\AppData\Roaming\Mozilla\Firefox\Profiles\bjeoam9c.default\searchplugins\inbox-recherche.xml
M3 - MFPP: Plugins - [Mehdi] -- C:\Users\Mehdi\AppData\Roaming\Mozilla\Firefox\Profiles\bjeoam9c.default\searchplugins\search-here.xml
M3 - MFPP: Plugins - [Mehdi] -- C:\Users\Mehdi\AppData\Roaming\Mozilla\Firefox\Profiles\bjeoam9c.default\searchplugins\Search_Results.xml
M3 - MFPP: Plugins - [Mehdi] -- C:\Users\Mehdi\AppData\Roaming\Mozilla\Firefox\Profiles\bjeoam9c.default\searchplugins\SweetIM Search.xml  =>PUP.SweetIM
M3 - MFPP: Plugins - [Mehdi] -- C:\Users\Mehdi\AppData\Roaming\Mozilla\Firefox\Profiles\bjeoam9c.default\searchplugins\sweetim.xml  =>PUP.SweetIM
M3 - MFPP: Plugins - [Mehdi] -- C:\Users\Mehdi\AppData\Roaming\Mozilla\Firefox\Profiles\bjeoam9c.default\searchplugins\vgrabber-v14-customized-web-search.xml  =>Toolbar.vGrabber
M3 - MFPP: Plugins - [Mehdi] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\babylon.xml  =>Toolbar.Babylon
M3 - MFPP: Plugins - [Mehdi] -- C:\Program Files (x86)\Mozilla FireFox\searchplugins\Search_Results.xml
M1 - SPR:Search Page Redirection - C:\Program Files (x86)\Mozilla FireFox\extensions\support@pdfcreator-toolbar.org
M2 - MFEP: prefs.js [Mehdi - bjeoam9c.default\crossriderapp12747@crossrider.com] [] Deal Boat v (..)  =>PUP.CrossRider
M2 - MFEP: prefs.js [Mehdi - bjeoam9c.default\toolbar@ask.com] [] Avira SearchFree Toolbar plus Web Protection v (..)  =>Toolbar.Avira
M2 - MFEP: prefs.js [Mehdi - bjeoam9c.default\{635abd67-4fe9-1b23-4f01-e679fa7484c1}] [yahoo.ytff] Yahoo! Toolbar v2.6.0.20130418072822 (..)  =>Toolbar.Yahoo
M2 - MFEP: prefs.js [Mehdi - bjeoam9c.default\{e5a1e26f-0d1d-4307-868f-fbd9a374ab54}] [] ooVoo Video Chat Community Toolbar v3.19.0.3 (..)
M2 - MFEP: prefs.js [Mehdi - bjeoam9c.default\{f34c9277-6577-4dff-b2d7-7d58092f272f}] [] Search-Results Toolbar v1.0.0.12 (..)  =>PUP.SearchResults
~ Firefox Browser: 43 Legitimates Filtered in 00mn 01s

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com
R3 - URLSearchHook: (no name) [64Bits] - {D3D233D5-9F6D-436C-B6C7-E63F77503B30} . (.Google Inc. - Google Update.) (No version) -- (.not file.)
R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 0
~ IE Browser: 15 Legitimates Filtered in 00mn 00s

---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management:  Scanned in 00mn 00s

---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"
~ Keys:  Scanned in 00mn 00s

---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Hosts File:  Scanned in 00mn 05s
~ Nombre de lignes (Lines number): 10061

---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: DataMngr [64Bits] - {C1ED9DA0-AFD0-4b90-AC6A-D3874F591014} . (.Bandoo Media Inc - Url Helper.) -- C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\BrowserConnection.dll  =>PUP.SearchResults
~ BHO: 1 Legitimates Filtered in 00mn 00s

---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar\WebBrowser: (no name) [64Bits] - [HKCU]{31CF9EBE-5755-4A1D-AC25-2834D952D9B4} Clé orpheline
O3 - Toolbar\WebBrowser: (no name) [64Bits] - [HKCU]{E5A1E26F-0D1D-4307-868F-FBD9A374AB54} Clé orpheline
O3 - Toolbar\WebBrowser: (no name) [64Bits] - [HKCU]{D4027C7F-154A-4066-A1AD-4243D8127440} Clé orpheline
O3 - Toolbar\WebBrowser: (no name) [64Bits] - [HKCU]{D7E97865-918F-41E4-9CD0-25AB1C574CE8} Clé orpheline
~ Toolbar:  Scanned in 00mn 00s

---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [Windows Defender] C:\Program Files (x86)\Windows Defender\MSASCui.exe (.not file.) 
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RAVCpl64.exe 
O4 - HKLM\..\Run: [IAAnotif] . (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe 
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe 
O4 - HKCU\..\Run: [SpybotSD TeaTimer] . (.Safer Networking Limited - System settings protector.) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe  =>Hijacker.Eazel
O4 - HKCU\..\Run: [Logitech Vid] . (.Logitech Inc. - Logitech Vid.) -- C:\Program Files (x86)\Logitech\Logitech Vid\Vid.exe 
O4 - HKCU\..\Run: [AutoStartNPSAgent] . (.Samsung Electronics Co., Ltd. - NPSAgent.) -- C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe 
O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\Mehdi\AppData\Local\Google\Update\GoogleUpdate.exe 
O4 - HKCU\..\Run: [TomTomHOME.exe] . (.TomTom - System Tray application for TomTom HOME.) -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe 
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe (.not file.) 
O4 - HKLM\..\Wow6432Node\Run: [hpqSRMon] Clé orpheline 
O4 - HKLM\..\Wow6432Node\Run: [NWEReboot] Clé orpheline 
O4 - HKLM\..\Wow6432Node\Run: [AppleSyncNotifier] . (.Apple Inc. - AppleSyncNotifier.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe 
O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe 
O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe 
O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe 
O4 - HKLM\..\Wow6432Node\Run: [LWS] . (.Logitech Inc. - Logitech Webcam Software.) -- C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe 
O4 - HKLM\..\Wow6432Node\Run: [NPSStartup] Clé orpheline 
O4 - HKLM\..\Wow6432Node\Run: [ApnUpdater] . (.{StringFileInfo_CompanyName} - {StringFileInfo_FileDescription}.) -- C:\Program Files (x86)\Ask.com\Updater\Updater.exe 
O4 - HKLM\..\Wow6432Node\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Avira System Tray Tool.) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe 
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe 
O4 - HKLM\..\Wow6432Node\Run: [DATAMNGR] . (.Bandoo Media Inc - Data Manager.) -- C:\Program Files (x86)\Search Results Toolbar\Datamngr\datamngrUI.exe  =>PUP.SearchResults
O4 - HKLM\..\Wow6432Node\Run: [Iminent] . (.Iminent - Iminent.) -- C:\Program Files (x86)\Iminent\Iminent.exe  =>Adware.IMBooster
O4 - HKLM\..\Wow6432Node\Run: [IminentMessenger] . (.Iminent - Iminent.) -- C:\Program Files (x86)\Iminent\Iminent.Messengers.exe  =>Adware.IMBooster
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe 
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter]  oobefldr.dll 
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter]  oobefldr.dll 
O4 - HKUS\S-1-5-21-1035381022-2294514327-3974722228-1001\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe 
~ Application:  Scanned in 00mn 00s

---\\ Autres liens utilisateurs (O4)
O4 - GS\Programs: Internet Explorer (64-bit).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\Programs: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\Programs: Windows Mail.lnk . (.Microsoft Corporation - Windows Mail.)  -- C:\Program Files (x86)\Windows Mail\WinMail.exe 
O4 - GS\Programs: Windows Media Player.lnk . (.Microsoft Corporation - Windows Media Player.)  -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe 
O4 - GS\Accessories: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\SendTo: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft  Windows Fax and Scan.)  -- C:\Windows\System32\WFS.exe 
O4 - GS\SendTo: Skype.lnk . (.Skype Technologies S.A. - Skype.)  -- C:\Program Files (x86)\Skype\Phone\Skype.exe 
O4 - GS\Desktop: Ordinateur - Raccourci.lnk - Clé orpheline
O4 - GS\QuickLaunch: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Users\Mehdi\AppData\Local\Google\Chrome\Application\chrome.exe 
O4 - GS\QuickLaunch: jEdit.lnk . (...)  -- C:\Program Files (x86)\Java\jre6\bin\javaw.exe (.not file.)
O4 - GS\QuickLaunch: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\QuickLaunch: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.)  -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
O4 - GS\QuickLaunch: Mozilla Thunderbird.lnk . (.Mozilla Corporation - Thunderbird.)  -- C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe 
O4 - GS\QuickLaunch: Samsung New PC Studio.lnk . (.Samsung Electronics Co., Ltd. - New PC Studio.)  -- C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSGuide.exe 
O4 - GS\QuickLaunch: Windows Media Player.lnk . (.Microsoft Corporation - Windows Media Player.)  -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe 
O4 - GS\Desktop: Agenda_Mehdi.lnk . (.Microsoft Corporation - Calendrier Windows.)  -- C:\Program Files (x86)\Windows Calendar\WinCal.exe 
O4 - Global Startup: C:\Users\Mehdi\Desktop\BLR_maison.URL . (.Microsoft Corporation - Calendrier Windows.)  -- C:\Users\Mehdi\Desktop\BLR_maison.URL
O4 - GS\Desktop: Cartes & Données 6.lnk . (...)  -- C:\Users\Mehdi\AppData\Roaming\Microsoft\Installer\{2C790D6D-7999-4C2C-9A60-69CFF608F9A3}\_3851FF475DD4FCC4146D41.exe
O4 - GS\Desktop: CCleaner.lnk . (.Piriform Ltd - CCleaner.)  -- C:\Program Files (x86)\CCleaner\CCleaner.exe  =>Piriform Ltd
O4 - GS\Desktop: FileZilla.lnk . (.FileZilla Project - FileZilla FTP Client.)  -- C:\Program Files (x86)\FileZilla FTP Client\filezilla.exe 
O4 - Global Startup: C:\Users\Mehdi\Desktop\Gmail.URL . (.FileZilla Project - FileZilla FTP Client.)  -- C:\Users\Mehdi\Desktop\Gmail.URL
O4 - GS\Desktop: IZArc.lnk . (.IZSoftware - IZArc Archiver.)  -- C:\Program Files (x86)\IZArc\IZArc.exe 
O4 - GS\Desktop: kompozer - Raccourci.lnk . (.Mozilla Foundation - Composer.)  -- C:\Users\Mehdi\AppData\Roaming\KompoZer 0.7.10\kompozer.exe 
O4 - Global Startup: C:\Users\Mehdi\Desktop\M.T. DANESH PAJOUH (2).URL . (.Mozilla Foundation - Composer.)  -- C:\Users\Mehdi\Desktop\M.T. DANESH PAJOUH (2).URL
O4 - GS\Desktop: Microsoft Office Excel 2003.lnk . (...)  -- C:\Windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\xlicons.exe
O4 - GS\Desktop: Microsoft Office PowerPoint 2003.lnk . (...)  -- C:\Windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\pptico.exe
O4 - GS\Desktop: Microsoft Office Word 2003.lnk . (...)  -- C:\Windows\Installer\{9011040C-6000-11D3-8CFE-0150048383C9}\wordicon.exe
O4 - GS\Desktop: Paint.lnk . (.Microsoft Corporation - Paint.)  -- C:\Windows\System32\mspaint.exe 
O4 - GS\Desktop: Picasa 3.lnk . (.Google Inc. - Picasa.)  -- C:\Program Files (x86)\Google\Picasa3\Picasa3.exe 
O4 - Global Startup: C:\Users\Mehdi\Desktop\Publication Mehdi DANECH-PAJOUH.URL . (...)  -- C:\Users\Mehdi\Desktop\Publication Mehdi DANECH-PAJOUH.URL
O4 - GS\Desktop: TomTom HOME 2.lnk . (.Flexera Software, Inc. - InstallShield.)  -- C:\Windows\Installer\{9017CEAF-BE5A-4F73-8A0E-C87E26971E55}\NewShortcut1_BB5D96B1D05B428EBAD4A437B7244768.exe 
O4 - GS\Desktop: Windows Update - Raccourci.lnk - Clé orpheline
O4 - GS\Desktop: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.)  -- C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe 
~ Global Startup:  Scanned in 00mn 03s

---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{34126920-5426-44CD-9D4E-0A43ECDA4EFD}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{34126920-5426-44CD-9D4E-0A43ECDA4EFD}: DhcpNameServer = 192.168.0.254
O17 - HKLM\System\CS2\Services\Tcpip\..\{34126920-5426-44CD-9D4E-0A43ECDA4EFD}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{34126920-5426-44CD-9D4E-0A43ECDA4EFD}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain:  Scanned in 00mn 00s

---\\ Protocole additionnel (O18)
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\system32\mshtml.dll
O18 - Filter: text/xml [64Bits] - {807553E5-5146-11D5-A672-00B0D022E945} . (...) -- 
~ Protocole Additionnel:  Scanned in 00mn 00s

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - AppInit_DLLs: . (...) - C:\PROGRA~3\Wincert\WIN64C~1.dll
~ AppInit DLL:  Scanned in 00mn 00s

---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: Component Categories cache daemon [64Bits] - {8C7461EF-2B13-11d2-BE35-3078302C2030} . (.Microsoft Corporation - Bibliothèque de l'interface utilisateur du.) -- C:\Windows\System32\browseui.dll
~ STS/SSO:  Scanned in 00mn 00s

---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: DefaultTabUpdate (DefaultTabUpdate) . (...) - C:\Users\Mehdi\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe  =>Adware.Bandoo
O23 - Service: Process Monitor (LVPrcS64) . (.Logitech Inc. -  LVPrcSrv Module..) - C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcSrv.exe
O23 - Service: SProtection (SProtection) . (.Iminent - Iminent Protection.) - C:\Program Files (x86)\Common Files\Umbrella\umbrella.exe  =>Adware.IMBooster
O23 - Service: TomTomHOMEService (TomTomHOMEService) . (.TomTom - Windows Service for TomTom HOME.) - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
~ Services: 15 Legitimates Filtered in 00mn 07s

---\\ Tâches planifiées en automatique (O39)
[MD5.BB92A5F10D76140569216E8C4D67115A] [APT] [Scheduled Update for Ask Toolbar] (...) -- C:\Program Files (x86)\Ask.com\UpdateTask.exe   [134824]  =>Toolbar.Ask
[MD5.F08C52CEBE499E91E54AE066F5985745] [APT] [Updater12747.exe] (.215 Apps.) -- C:\Users\Mehdi\AppData\Local\Updater12747\Updater12747.exe   [210312]  =>PUP.SpecialSavings
[MD5.00000000000000000000000000000000] [APT] [{0DBE96DB-3DD0-42CB-AB97-0E8F180E9EF6}] (...) -- C:\Users\Mehdi\Desktop\ePlugStationInstall (2).exe (.not file.)   [0]
[MD5.00000000000000000000000000000000] [APT] [{52C1CD26-D781-49B6-8AA6-AD0A84DE6B53}] (...) -- C:\Users\Mehdi\Downloads\amaya-WinXP-9.54.exe (.not file.)   [0]
~ Scheduled Task: 18 Legitimates Filtered in 00mn 08s

---\\ Logiciels installés (O42)
O42 - Logiciel: Ask Toolbar - (.Ask.com.) [HKLM][64Bits] -- {86D4B82A-ABED-442A-BE86-96357B70F4FE}  =>Toolbar.Ask
O42 - Logiciel: Cartes & Données 6 - (.Articque Software.) [HKLM][64Bits] -- {2C790D6D-7999-4C2C-9A60-69CFF608F9A3}
O42 - Logiciel: Deal Boat - (.215 Apps.) [HKLM][64Bits] -- Deal Boat  =>PUP.SpecialSavings
O42 - Logiciel: DefaultTab - (.Search Results, LLC.) [HKLM][64Bits] -- DefaultTab  =>Adware.Bandoo
O42 - Logiciel: Iminent - (.Iminent.) [HKLM][64Bits] -- IMBoosterARP  =>Adware.IMBooster
O42 - Logiciel: Iminent - (.Iminent.) [HKLM][64Bits] -- {89B5DFCA-81E0-4EA4-8A0A-4F4087A1DD00}  =>Adware.IMBooster
O42 - Logiciel: Search-Results Toolbar - (.APN LLC.) [HKLM][64Bits] -- ilividtoolbarguid  =>PUP.SearchResults
O42 - Logiciel: jEdit 4.2 - (.Slava Pestov.) [HKLM][64Bits] -- jEdit_is1
~ Logic: 144 Legitimates Filtered in 00mn 01s

---\\ HKCU & HKLM Software Keys
[HKCU\Software\5ded6dce03bed49]
[HKCU\Software\APN DTX]
[HKCU\Software\APN]
[HKCU\Software\AppDataLow\Software\AskToolbar]
[HKCU\Software\AppDataLow\Software\ConduitSearchScopes]
[HKCU\Software\AppDataLow\Software\Crossrider]  =>PUP.CrossRider
[HKCU\Software\AppDataLow\Software\Deal Boat]
[HKCU\Software\AppDataLow\Software\DefaultTab]  =>Adware.Bandoo
[HKCU\Software\AppDataLow\Software\PriceGong]  =>Adware.PriceGong
[HKCU\Software\AppDataLow\Software\Smartbar]  =>Hijacker.SmartBar
[HKCU\Software\Ask.com]
[HKCU\Software\AskToolbar]
[HKCU\Software\BI]
[HKCU\Software\Cr_Installer]  =>PUP.CrossRider
[HKCU\Software\DataMngr]  =>PUP.Datamngr
[HKCU\Software\DataMngr_Toolbar]  =>PUP.Datamngr
[HKCU\Software\Default Tab]  =>Adware.Bandoo
[HKCU\Software\DefaultTab]  =>Adware.Bandoo
[HKCU\Software\Evrsoft]
[HKCU\Software\Iminent]  =>Adware.IMBooster
[HKCU\Software\InstalledBrowserExtensions]  =>Adware.VidSaver
[HKCU\Software\Softonic]  =>Toolbar.Conduit
[HKCU\Software\SweetIM]  =>PUP.SweetIM
[HKCU\Software\YahooPartnerToolbar]  =>Toolbar.Yahoo
[HKCU\Software\Yahoo]  =>Toolbar.Yahoo
[HKCU\Software\iLivid]  =>Adware.Bandoo
[HKCU\Software\yahooinstall]  =>Toolbar.Yahoo
[HKCU\Software\로컬 응용 프로그램 마법사에서 생성된 응용 프로그램]
[HKLM\Software\DataMngr]  =>PUP.Datamngr
[HKLM\Software\Wow6432Node\5ded6dce03bed49]
[HKLM\Software\Wow6432Node\APN]
[HKLM\Software\Wow6432Node\AskToolbar]
[HKLM\Software\Wow6432Node\Babylon]  =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\DataMngr]  =>PUP.Datamngr
[HKLM\Software\Wow6432Node\Default Tab]  =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Iminent]  =>Adware.IMBooster
[HKLM\Software\Wow6432Node\SweetIM]  =>PUP.SweetIM
[HKLM\Software\Wow6432Node\Umbrella]
[HKLM\Software\Wow6432Node\Yahoo]  =>Toolbar.Yahoo
[HKLM\Software\Wow6432Node\iLividSRTB]  =>Adware.Bandoo
~ Key Software: 257 Legitimates Filtered in 00mn 01s

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 12/01/2012 - 19:00:17 - [3,490] ----D C:\Program Files (x86)\Ask.com
O43 - CFD: 06/04/2013 - 15:21:20 - [5,735] ----D C:\Program Files (x86)\Deal Boat
O43 - CFD: 18/01/2009 - 20:00:40 - [0,007] ----D C:\Program Files (x86)\Evrsoft First Page 2006
O43 - CFD: 06/04/2013 - 15:22:42 - [17,292] ----D C:\Program Files (x86)\Iminent  =>Adware.IMBooster
O43 - CFD: 31/05/2009 - 11:46:25 - [15,016] ----D C:\Program Files (x86)\jEdit
O43 - CFD: 25/01/2012 - 10:57:53 - [0,182] ----D C:\Program Files (x86)\OfferBox  =>PUP.OfferBox
O43 - CFD: 05/02/2013 - 22:44:36 - [39,910] ----D C:\Program Files (x86)\Search Results Toolbar  =>PUP.SearchResults
O43 - CFD: 09/07/2013 - 22:26:30 - [2,727] ----D C:\Program Files (x86)\Common Files\Umbrella
O43 - CFD: 17/02/2012 - 12:18:55 - [0,000] ----D C:\ProgramData\Articque
O43 - CFD: 15/06/2012 - 09:26:34 - [0] ----D C:\ProgramData\Ask
O43 - CFD: 05/02/2013 - 22:25:14 - [0] ----D C:\ProgramData\Babylon  =>Toolbar.Babylon
O43 - CFD: 05/02/2013 - 22:33:28 - [0,000] ----D C:\ProgramData\boost_interprocess
O43 - CFD: 06/04/2013 - 15:22:32 - [0,030] ----D C:\ProgramData\Iminent  =>Adware.IMBooster
O43 - CFD: 05/02/2013 - 22:25:14 - [0,007] ----D C:\Users\Mehdi\AppData\Roaming\Babylon  =>Toolbar.Babylon
O43 - CFD: 06/04/2013 - 15:21:43 - [1,881] ----D C:\Users\Mehdi\AppData\Roaming\DefaultTab  =>Adware.Bandoo
O43 - CFD: 06/04/2013 - 15:22:30 - [0,016] ----D C:\Users\Mehdi\AppData\Roaming\Iminent  =>Adware.IMBooster
O43 - CFD: 31/01/2009 - 17:55:33 - [0,008] ----D C:\Users\Mehdi\AppData\Roaming\InternetCalls
O43 - CFD: 16/06/2011 - 15:37:35 - [0,270] ----D C:\Users\Mehdi\AppData\Roaming\OfferBox  =>PUP.OfferBox
O43 - CFD: 29/05/2012 - 11:47:51 - [0,871] ----D C:\Users\Mehdi\AppData\Local\AskToolbar
O43 - CFD: 06/04/2013 - 15:21:20 - [0,015] ----D C:\Users\Mehdi\AppData\Local\Deal Boat
O43 - CFD: 06/04/2013 - 15:21:11 - [0,201] ----D C:\Users\Mehdi\AppData\Local\Updater12747  =>PUP.CrossRider
O43 - CFD: 17/02/2012 - 12:18:27 - [0,002] ----D C:\Users\Mehdi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Articque
~ Program Folder: 198 Legitimates Filtered in 01mn 17s

---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 22/07/2013 - 18:19:10 RSHAD . (...) -- C:\Windows\System32\Drivers\lvuvc.hs   [0]
O44 - LFC:[MD5.844CB31058897096FC49978A43C6B46F] - 11/07/2013 - 02:19:36 ---A- . (...) -- C:\Windows\win.ini   [275]
~ Files: 72 Legitimates Filtered in 00mn 07s

---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
~ MWPS: 16 Legitimates Filtered in 00mn 00s

---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
~ MWPE Keys: 4 Legitimates Filtered in 00mn 00s

---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.F14215E37CF124104575073F782111D2] - 21/01/2008 - 03:45:07 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys   [486456]
O58 - SDL:[MD5.CF5AA091B8BA5AEE3F3ADB310B9F73CB] - 28/11/2007 - 18:49:12 ---A- . (.Intellon, Inc. - PCAUSA NDIS 5.0 SPR Protocol Driver.) -- C:\Windows\SysWOW64\drivers\PLCND532.sys   [26656]
~ Drivers:  Scanned in 00mn 00s

---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
~ ADS:  Scanned in 00mn 00s

---\\ Liste des services Legacy (O64)
O64 - Services: CurCS - 28/11/2007 - C:\Windows\System32\Drivers\PLCND564.sys (PLCND564)  .(.Intellon, Inc. - PCAUSA NDIS 5.0 SPR Protocol Driver (AMD64).) - LEGACY_PLCND564
~ Legacy: 68 Legitimates Filtered in 00mn 00s

---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.com> <>[HKU\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.exe> <>[HKU\..\open\Command] (.Not Key.)
~ FASS Keys: 21 Legitimates Filtered in 00mn 00s

---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
~ Keys:  Scanned in 00mn 00s

---\\ Search Browser Infection (O69)
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363..clientLogIsEnabled", false);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363..clientLogServiceUrl", "http://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363..uninstallLogServiceUrl", "http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.AboutPrivacyUrl", "http://www.conduit.com/privacy/Default.aspx");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.BrowserCompStateIsOpen_129523531866740840", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.BrowserCompStateIsOpen_129784497989400480", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.BrowserCompStateIsOpen_130004712294105244", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.BrowserCompStateIsOpen_130040865815113041", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.BrowserCompStateIsOpen_130100688432909155", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.CTID", "ct1572363");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.CommunitiesChangesLastCheckTime", "Mon Jul 22 2013 21:23:58 GMT+0200");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.CommunitiesChangesLastUrl", "http://grouping.services.conduit.com/GroupingRequest.ctp?type=ToolbarsInfo&ctids[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.CommunityChanged", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.CurrentServerDate", "22-7-2013");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.DialogsAlignMode", "LTR");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.DialogsGetterLastCheckTime", "Fri Jul 19 2013 11:59:58 GMT+0200");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.DownloadDomainsCheckInterval", "168");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.DownloadDomainsListLastCheckTime", "Fri Jul 19 2013 11:59:57 GMT+0200");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.DownloadDomainsListLastServerUpdateTime", "1201069983");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.DownloadReferralCookieData", "");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.EMailNotifierPollDate", "Sun May 08 2011 18:46:20 GMT+0200");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.FirstServerDate", "19-2-2011");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.FirstTime", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.FirstTimeFF3", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.FixPageNotFoundErrors", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.GroupingServerCheckInterval", 1440);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.GroupingServiceUrl", "http://grouping.services.conduit.com/");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.HasUserGlobalKeys", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.Initialize", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.InitializeCommonPrefs", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.InstallationAndCookieDataSentCount", 3);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.InstallationId", "StubInstaller");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.InstallationType", "ConduitIntegration");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.InstalledDate", "Sat Feb 19 2011 21:26:20 GMT+0100");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.InvalidateCache", false);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.IsAlertDBUpdated", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.IsGrouping", false);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.IsMulticommunity", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.IsOpenThankYouPage", false);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.IsOpenUninstallPage", false);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.LanguagePackLastCheckTime", "Sat Feb 19 2011 21:26:21 GMT+0100");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.LanguagePackReloadIntervalMM", 1440);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.LanguagePackServiceUrl", "http://translation.users.conduit.com/Translation.ashx");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.LastLogin_3.12.2.3", "Mon Jun 04 2012 09:45:46 GMT+0200");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.LastLogin_3.13.0.6", "Tue Jul 17 2012 21:31:33 GMT+0200");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.LastLogin_3.14.1.0", "Tue Aug 21 2012 17:02:03 GMT+0200");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.LastLogin_3.15.1.0", "Mon Mar 04 2013 21:23:30 GMT+0100");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.LastLogin_3.18.0.7", "Wed Jul 10 2013 15:23:25 GMT+0200");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.LastLogin_3.19.0.3", "Mon Jul 22 2013 20:52:32 GMT+0200");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.LastLogin_3.2.5.2", "Sun May 01 2011 14:29:40 GMT+0200");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.LastLogin_3.3.3.2", "Tue Jun 21 2011 22:25:34 GMT+0200");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.LastLogin_3.5.0.12", "Fri Jul 08 2011 19:55:59 GMT+0200");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.LatestVersion", "3.19.0.3");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.Locale", "en-us");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.MCDetectTooltipHeight", "83");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.MCDetectTooltipShow", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.MCDetectTooltipUrl", "http://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.MCDetectTooltipWidth", "295");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.MyStuffEnabledAtInstallation", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.RadioIsPodcast", false);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.RadioLastCheckTime", "Sat Feb 19 2011 21:26:21 GMT+0100");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.RadioLastUpdateIPServer", "3");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.RadioLastUpdateServer", "128929877726170000");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.RadioMediaID", "7088464");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.RadioMediaType", "Media Player");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.RadioMenuSelectedID", "EBRadioMenu_CT15723637088464");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.RadioStationName", "Royal-Radio%20");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.RadioStationURL", "");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.SavedHomepage", "http://www.free.fr/");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.SearchFromAddressBarIsInit", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT1572363&q=");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.SearchInNewTabEnabled", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.SearchInNewTabIntervalMM", 1440);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.SearchInNewTabLastCheckTime", "Sat Feb 19 2011 21:26:20 GMT+0100");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.SearchInNewTabServiceUrl", "http://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID&UM=UM_ID");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.SearchInNewTabUsageUrl", "http://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_T[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.ServiceMapLastCheckTime", "Mon Jul 22 2013 21:23:58 GMT+0200");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.SettingsLastCheckTime", "Sat Feb 19 2011 21:26:17 GMT+0100");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.SettingsLastUpdate", "1297856940");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.ThirdPartyComponentsInterval", 504);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.ThirdPartyComponentsLastCheck", "Sat Feb 19 2011 21:26:17 GMT+0100");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.ThirdPartyComponentsLastUpdate", "1246790578");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.ToolbarShrinkedFromSetup", false);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.TrusteLinkUrl", "http://trust.conduit.com/CT1572363");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolb[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.UserID", "UN44795810140768623");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.WeatherNetwork", "");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.WeatherPollDate", "Sun May 01 2011 15:20:05 GMT+0200");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.WeatherUnit", "C");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.alertChannelId", "16833");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.backendstorage._fb_dailyactivity", "31333130313137323938373530");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.backendstorage._fb_lifetimesent", "54525545");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.backendstorage.alertnotificationglobaltrigger", "46616365626F6F6B");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.backendstorage.facebook_check_date", "31353131322E343236373030323636323034");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.backendstorage.facebook_ctid_connect_send", "73656E646564");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.backendstorage.facebook_install", "796573");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.backendstorage.facebook_reminder_count", "33");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.backendstorage.fb_dailyactivity", "31333033383032343037353339");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.backendstorage.fb_lifetimesent", "54525545");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.backendstorage.http://api16_thetrafficstat_net.pid2", "61666234336564646361306538353438");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.backendstorage.http://api18_thetrafficstat_net.pid2", "61666234336564646361306538353438");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.backendstorage.http://api19_thetrafficstat_net.pid2", "61666234336564646361306538353438");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.backendstorage.http://api21_thetrafficstat_net.pid2", "61666234336564646361306538353438");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.backendstorage.notificationheartbitstorage", "313330353731333637372E353932");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.ct1572363.DialogsAlignMode", "LTR");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.ct1572363.GroupingInvalidateCache", false);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.ct1572363.GroupingLastCheckTime", "Mon Jul 22 2013 20:52:30 GMT+0200");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.ct1572363.GroupingLastErrorCode", "");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.ct1572363.GroupingLastResponse", false);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.ct1572363.GroupingLastServerUpdateTime", "129523640100000000");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.ct1572363.InvalidateCache", false);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.ct1572363.LanguagePackLastCheckTime", "Mon Jul 22 2013 16:52:25 GMT+0200");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.ct1572363.Locale", "en-us");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.ct1572363.RadioLastCheckTime", "Sat May 07 2011 19:08:02 GMT+0200");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.ct1572363.RadioLastUpdateIPServer", "3");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.ct1572363.RadioLastUpdateServer", "128929877726170000");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.ct1572363.SearchInNewTabLastCheckTime", "Mon Jul 22 2013 12:08:16 GMT+0200");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.ct1572363.SettingsLastCheckTime", "Mon Jul 22 2013 20:31:29 GMT+0200");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.ct1572363.SettingsLastUpdate", "1374499648");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.ct1572363.ThirdPartyComponentsLastCheck", "Sun Jun 26 2011 23:02:53 GMT+0200");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.ct1572363.ThirdPartyComponentsLastUpdate", "1246790578");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.ct1572363.globalFirstTimeInfoLastCheckTime", "Fri Jul 08 2011 19:55:59 GMT+0200");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.ct1572363.toolbarAppMetaDataLastCheckTime", "Mon Jul 22 2013 12:08:17 GMT+0200");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.ct1572363.toolbarContextMenuLastCheckTime", "Tue Jul 05 2011 22:36:26 GMT+0200");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;se[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.homepageProtectorEnableByLogin", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.initDone", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.isAppTrackingManagerOn", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.myStuffEnabled", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.myStuffPublihserMinWidth", 400);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.myStuffSearchUrl", "http://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&oct[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.myStuffServiceIntervalMM", 1440);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.myStuffServiceUrl", "http://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.oldAppsList", "200,128491907140756606,128491907208256770,111,128944634022362696,129493359651638239,1295235318[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.revertSettingsEnabled", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.searchProtectorDialogDelayInSec", 10);  =>Toolbar.Conduit
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.searchProtectorEnableByLogin", true);  =>Toolbar.Conduit
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.testingCtid", "");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.toolbarAppMetaDataLastCheckTime", "Sat Feb 19 2011 21:26:18 GMT+0100");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.toolbarContextMenuLastCheckTime", "Sat Feb 19 2011 21:26:21 GMT+0100");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT1572363.usagesFlag", 2);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT3286379.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT3286379&SearchSource=2&CUI=UN4182[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT3286379.installId", "conduitinstaller.exe");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT3286379.installType", "conduitnsisintegration");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT3286379.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"http://search.conduit.com/?ctid=CT3286379&octid=CT3[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CT3286379.originalSearchAddressUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT1572363&q=");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://Settings.toolbar.search.conduit.com/root/ct1572363/CT1572363", "\"ae79bc6d8e55303368c1db62[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://alerts.conduit-services.com/root/16833/16485/FR", "\"0\"");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://alerts.conduit-services.com/root/909619/905414/FR", "\"0\"");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://appsmetadata.toolbar.conduit-services.com/?ctid=CT1572363", "\"1294643363\"");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://appsmetadata.toolbar.conduit-services.com/?ctid=ct1572363", "\"1365595243\"");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en-us", "wVmmvqqOMqrv5xct[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en-us", "0uSPYx+Kl2jpu8sJZ[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en-us", "Dclc8oo4TTv7+mAk[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en-us", "K4Vqu91uAzWURlxJRdX[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"803651ba7facb1:0\"");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12.2.3", "\"4ead38b3e6bcd1:0\"")[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13.0.6", "\"0d648794549cd1:0\"")[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.14.1.0", "\"0e0a4327275cd1:0\"")[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15.1.0", "\"0343677cfb1cd1:0\"")[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.18.0.7", "\"0343677cfb1cd1:0\"")[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.19.0.3", "\"0343677cfb1cd1:0\"")[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.3.2", "\"07b2625f8cb1:0\"");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.5.0.12", "\"807dc126dd28cc1:0\""[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://servicemap.conduit-services.com/Toolbar/?ownerId=CT1572363", "\"d5f44cb0f932aae7fea3743f5d[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://servicemap.conduit-services.com/toolbar/", "\"634394076199470000\"");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://settings.engine.conduit-services.com/?browser=FF&lut=0", "634335443890000000");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://settings.engine.conduit-services.com/?browser=FF&lut=2/17/2011 12:59:49 PM", "634339976460[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://settings.engine.conduit-services.com/?browser=FF&lut=2/22/2011 6:54:06 PM", "6343561183100[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://settings.engine.conduit-services.com/?browser=FF&lut=3/13/2011 11:17:11 AM", "634356118310[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://settings.toolbar.search.conduit.com/root/CT1572363/CT1572363", "\"1297856940\"");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://settings.toolbar.search.conduit.com/root/ct1572363/CT1572363", "\"1307879610\"");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://storage.conduit.com/BankImages/RadioSkins/Lightning/equalizer_dead.gif", "\"08473a2c4c1c91[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://storage.conduit.com/BankImages/RadioSkins/Lightning/minimize.gif", "\"058caf0afc1c91:0\"")[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://storage.conduit.com/BankImages/RadioSkins/Lightning/play.gif", "\"029438db5c1c91:0\"");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://storage.conduit.com/BankImages/RadioSkins/Lightning/stop.gif", "\"0bebbfbcc1c91:0\"");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://storage.conduit.com/BankImages/RadioSkins/Lightning/vol.gif", "\"013a8aebdc1c91:0\"");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ETag.http://translation.toolbar.conduit-services.com/?locale=en-us", "\"3862d9d0f85552e14fe08337d37edf[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.EngineOwner", "");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.EngineOwnerGuid", "{e5a1e26f-0d1d-4307-868f-fbd9a374ab54}");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.EngineOwnerToolbarId", "oovoo_video_chat");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.IsEngineShown", false);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Mehdi\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\bjeoam9c.def[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.5.0.12");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.OriginalEngineOwner", "CT1572363");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{e5a1e26f-0d1d-4307-868f-fbd9a374ab54}");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "oovoo_video_chat");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ToolbarsList", "CT1572363");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.ToolbarsList2", "CT1572363");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Sun May 01 2011 15:50:47 GMT+0200");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Tue Jun 21 2011 22:11:17 GMT+0200");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.alert.clientsServerUrl", "http://alert.client.conduit.com");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.alert.locale", "en");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.alert.loginLastCheckTime", "Tue Jun 21 2011 22:06:30 GMT+0200");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.alert.servicesServerUrl", "http://alert.services.conduit.com");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.alert.showTrayIcon", false);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.alert.userId", "8c3d8431-3bf4-47a7-82d6-d17b5f15c06e");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.globalUserId", "b7859f30-6ed2-4f99-b0df-0a8489bc0c0d");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT1572363");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.killedEngine", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Wed Jul 06 2011 12:33:45 GMT+0200");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.notifications.clientsServerUrl", "http://alert.client.conduit.com");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.notifications.locale", "en");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Thu Jul 07 2011 22:47:38 GMT+0200");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1305622559");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.notifications.servicesServerUrl", "http://alert.services.conduit.com");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.notifications.showTrayIcon", false);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.notifications.userId", "a9c449c5-3918-40f6-9ed3-533d2db5b972");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("CommunityToolbar.undefined", "");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("Smartbar.ConduitHomepagesList", "");  =>Hijacker.SmartBar
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("Smartbar.ConduitSearchEngineList", "");  =>Hijacker.SmartBar
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("Smartbar.ConduitSearchUrlList", "");  =>Hijacker.SmartBar
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("Smartbar.SearchFromAddressBarSavedUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT1572363&q=");  =>Hijacker.SmartBar
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("browser.search.defaultthis.engineName", "ooVoo Video Chat Customized Web Search");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.admin", false);  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.aflt", "babsst");  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.autoRvrt", "false");  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.bbDpng", 5);  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.cntry", "FR");  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.dfltLng", "en");  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.dfltSrch", false);  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.dpkLst", "");  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.excTlbr", false);  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.ffxUnstlRst", true);  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.firstRun", false);  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.hdrMd5", "A32B6467347EFBF89E19C0D5B9AE3713");  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.hmpg", false);  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.id", "6885d7180000000000000014d15bfc1d");  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.instlDay", "15741");  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.instlRef", "sst");  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.lastActv", "9");  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.lastDP", 5);  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.8.11.1021:25:33");  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "18.0");  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.newTab", false);  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.newTabUrl", "http://search.babylon.com/?babsrc=NT_FFUP");  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.noFFXTlbr", false);  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.pnu_uninst", "{\"newVrsn\":\"6\",\"lastVrsn\":\"6\",\"vrsnLoad\":\"\",\"showMsg\":\"false\",\[...]  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.propectorlck", 98656148);  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.prtkDS", 1);  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.prtnrId", "babylon");  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.ptch_0717", true);  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.rvrt", "false");  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.sg", "czb");  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.sid", "f8b75dbad1d746f09f88c5261f077c3c");  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.smplGrp", "none");  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.tlbrId", "uninst");  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "http://search.babylon.com/?babsrc=TB_def&mntrId=6885d7180000000000000014d15bfc[...]  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.vrsn", "1.8.11.10");  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.vrsnTs", "1.8.11.1021:25:33");  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar.vrsni", "1.8.11.10");  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar_i.babExt", "");  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar_i.babTrack", "affID=120307");  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.BabylonToolbar_i.srcExt", "ss");  =>Toolbar.Babylon
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.AviraIDW-TS", "1319837913517");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.AviraIDW-XML", "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n<button xmlns=\"http://websearch.ask.com[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.InstallDir", "C:\\Program Files (x86)\\Ask.com\\");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.cbid", "JM");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.config-updated", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.crumb", "2011.09.03+02.26.56-toolbar013iad-FR-Q2FjaGFuLEZyYW5jZQ%3D%3D");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.default-channel-url-mask", "http://fr.ask.com/web?q={query}&qsrc={qsrc}&o={o}&l={l}&gct=bar");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.dtid", "YYYYYYYYFR");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.dyn-weather-do-locid-lookup-weatherWidget", false);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.dyn-weather-locid-weatherWidget", "FRXX1567");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.dyn-weather-tempunit-weatherWidget", "C");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.fresh-install", false);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.guid", "a6c239ce-c67b-42dd-b84a-d8af071de4fd");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.http-header-whitelist-hosts", "[\"static-dev.en.dev.ask.com\", \"ask.com\", \"www.facebook.com\", \"ww[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.if", "first");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.keyword-toggled-in-session", false);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.l", "dis");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.last-config-req", "1374503059931");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.last-search-timestamp", "1331205738650");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.last-v", "3.14.0.100010");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.locale", "fr_FR");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.location", "Cachan,France");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.new-tab-opt-out", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.notification-shown", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.o", "100000080");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.overlay-reloaded-using-restart", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.qsrc", "2871");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.r", "20");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.sa", "NO");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.search-history-queries", "debarasser||danech||tricastin||10 perssones||suvegarse sous xP||sauvegarde s[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.search-suggestions-enabled", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.silent-upgrade", true);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.silent-upgrade-from-pre-newtabs-build", false);
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.themeid", "");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.to", "");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.asktb.v", "3.14.0.100015");
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossrider.bic", "13ddf835658f6c916f0102b97271e368");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.InstallationThankYouPage", true);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.InstallationTime", 1365254434);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.InstallationUserSettings.searchUserConifrmation", false);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.InstallationUserSettings.setHomepage", false);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.InstallationUserSettings.setNewTab", false);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.InstallationUserSettings.setSearch", false);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.active", true);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.addressbar", "");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.addressbarenhanced", "");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.asyncdb_dbWasSet", true);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.asyncinternaldb_dbWasSet", true);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.backgroundjs", "\n\n//\n");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.backgroundver", 42);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.can_run_bg_code", true);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.certdomaininstaller", "");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.changeprevious", false);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie.InstallationTime.value", "1365254434");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_aoi.value", "1365254434");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_arbitrary_code.expiration", "Mon Jul 22 2013 21:29:25 GMT+0200");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_arbitrary_code.value", "%22%28function%28%29%7BappAPI.db.get%28%5C%22_G[...]  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_blocklist.value", "%22nonexistantdomain.com%22");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_country_code.expiration", "Fri Jul 26 2013 11:59:55 GMT+0200");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_country_code.value", "%22FR%22");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_crr.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_crr.value", "1374521032");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_currenttime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_currenttime.value", "%221372100405%22");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_hotfix20111102645.value", "%221%22");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_ib_delay.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_ib_delay.value", "24");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_ib_disclosure.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_ib_disclosure.value", "1367866701");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_ib_list.expiration", "Mon Jul 22 2013 22:24:59 GMT+0200");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_ib_list.value", "%7B%22f7610cf2b37067876b694a05c56f32e2%22%3A%7B%22p%22[...]  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_installer_params.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_installer_params.value", "%7B%22source_id%22%3A%22137089%22%2C%22sub_id[...]  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_installtime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_installtime.value", "%221364833291%22");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_parent_zoneid.value", "%2214019%22");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_pc_20120828.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_pc_20120828.value", "1365254678804");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_product_id.value", "%221284%22");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie._GPL_zoneid.value", "%22168330%22");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie.dbtest.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.cookie.dbtest.value", "1365254620057");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.description", "Deal Boat");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.domain", "");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.enablesearch", false);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.homepage", "");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.iframe", false);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3A%222C87E6AB27DF48[...]  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.internaldb.Resources_appVer.value", "69");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.internaldb.Resources_lastVersion.value", "0");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.internaldb.Resources_meta.value", "%7B%7D");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.internaldb.Resources_nextCheck.expiration", "Mon Jul 22 2013 22:24:19 GMT+0200");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.internaldb.Resources_nextCheck.value", "true");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.internaldb.Resources_queue.value", "%7B%7D");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.internaldb.Resources_remote_resources.expiration", "Fri Feb 01 2030 00:00:00 GMT+01[...]  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.internaldb.Resources_remote_resources.value", "%7B%22remoteId%22%3A0%7D");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.internaldb.SoftwareDetected.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.internaldb.SoftwareDetected.value", "%7B%22AnySoftware%22%3Afalse%2C%22Wireshark%22[...]  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.js", "\n\nif(\"undefined\"!=typeof _GPL_PLUGIN){var _GPL_=function(){_GPL_PLUGIN.st[...]  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.manifesturl", "");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.name", "Deal Boat");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.newtab", "");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.opensearch", "");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_1.code", "appAPI._cr_config={appID:function(){var a=appAPI.appInfo;i[...]  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_1.ver", 6);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_1000014.code", "Array.prototype.indexOf||(Array.prototype.indexOf=fu[...]  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_1000014.ver", 16);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_1000015.code", "var a=appAPI.db.getList(),cf_ran=!1,_GPL_BG={vars:{}[...]  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_1000015.name", "GPL Background (BG)");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_1000015.ver", 39);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_13.code", "(function(a){a.selectedText=function(e,c){function d(){if[...]  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_13.ver", 3);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_14.code", "if(typeof(appAPI)===\"undefined\"){appAPI={};}var CR__bIs[...]  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_14.ver", 8);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_16.code", "if((typeof isBackground===\"undefined\"||isBackground!==t[...]  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_16.name", "FFAppAPIWrapper");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_16.ver", 9);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_17.code", "if(typeof window!==\"undefined\"){\n/*!\n * jQuery JavaSc[...]  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_17.ver", 4);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_21.code", "var CrossriderDebugManager=(function(h){var f={appId:appA[...]  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_21.name", "debug");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_21.ver", 4);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_22.code", "(function(a){appAPI.queueManager={queue:[],register:funct[...]  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_22.ver", 4);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_28.code", "var CrossriderInitializerPlugin=(function(e){var c={appId[...]  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_28.name", "initializer");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_28.ver", 3);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_4.code", "var jQuery = $jquery_171 = $jquery = null;\n\nif (document[...]  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_4.name", "jquery_1_7_1");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_4.ver", 4);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.resources.isR[...]  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_47.ver", 3);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_64.code", "(function(){var h=\"__CR_EMPTY_CHANNEL__\";var d=function[...]  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_64.name", "appApiMessage");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_64.ver", 2);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_72.code", "if(appAPI.__should_activate_validation__===true){(functio[...]  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_72.name", "appApiValidation");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_72.ver", 3);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_78.code", "if(typeof jQuery!==\"undefined\"&&(jQuery)&&typeof naviga[...]  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_78.name", "CrossriderInfo");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_78.ver", 3);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_98.code", "(function(){var b=\"cr_\"+appAPI.appID+\"internalMessage\[...]  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_98.name", "omniCommands");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins.plugin_98.ver", 2);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins_lists.plugins_0", "4,14,78,16,64,47,72,98,1000015");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins_lists.plugins_1", "17,14,78,13,16,64,4,1,21,22,72,98,1000014,28");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.plugins_lists.plugins_5", "4,14,78,13,16,64,47,72");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.pluginsurl", "https://w9u6a2p6.ssl.hwcdn.net/plugin/apps/12747/plugins/091/ff/plugi[...]  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.pluginsversion", 63);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.publisher", "Innovative Apps");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.searchstatus", 0);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.setnewtab", false);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.thankyou", "");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.updateinterval", 360);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.12747.ver", 69);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.adsOldValue", -1);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.apps", "12747");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.bic", "13ddf835658f6c916f0102b97271e368");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.cid", 12747);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.firstrun", false);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.hadappinstalled", true);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.installationdate", 1365254559);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.lastcheck", 22908384);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.lastcheckitem", 22908685);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.modetype", "production");  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.reportInstall", true);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("extensions.crossriderapp12747.statsDailyCounter", 166);  =>PUP.CrossRider
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("keyword.URL", "http://search.conduit.com/ResultsExt.aspx?octid=CT3286379&ctid=CT3286379&SearchSource=2&CUI=UN4182085245[...]
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("smartbar.conduitHomepageList", "http://search.conduit.com/?ctid=CT3286379&SearchSource=13&CUI=UN41820852451111755");  =>Hijacker.SmartBar
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("smartbar.conduitSearchAddressUrlList", "http://search.conduit.com/ResultsExt.aspx?ctid=CT3286379&SearchSource=2&CUI=UN4[...]  =>Hijacker.SmartBar
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("smartbar.originalSearchAddressUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT1572363&q=");  =>Hijacker.SmartBar
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("sweetim.toolbar.previous.browser.search.defaulturl", "");  =>PUP.SweetIM
O69 - SBI: prefs.js [Mehdi - bjeoam9c.default] user_pref("sweetim.toolbar.previous.browser.startup.homepage", "http://portail.free.fr/");  =>PUP.SweetIM
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {1F096B29-E9DA-4D64-8D63-936BE7762CC5} - (Search the web (Babylon)) - http://search.babylon.com  =>Adware.IMBooster
O69 - SBI: SearchScopes [HKCU] {31CF9EBE-5755-4a1d-AC25-2834D952D9B4} - (Barre d'outils PDFCreator) - http://search.pdfcreator-toolbar.org
O69 - SBI: SearchScopes [HKCU] {6A38B897-7667-4FA7-86DE-A58EA87AF2A0} - (Ask Search) - http://websearch.ask.com
O69 - SBI: SearchScopes [HKCU] {80CB9592-D35A-4E89-BD93-82029EAFF56A} [DefaultScope] - (Vgrabber v1.4 Customized Web Search) - http://search.conduit.com  =>Toolbar.vGrabber
O69 - SBI: SearchScopes [HKCU] {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} - (Search Results) - http://dts.search-results.com  =>PUP.SearchResults
O69 - SBI: SearchScopes [HKCU] {A5455F8A-0707-4BA0-A64F-0452C0DCB0A2} - (Search Here) - http://www.mysearchresults.com  =>Adware.MyWebSearch
O69 - SBI: SearchScopes [HKCU] {C04B7D22-5AEC-4561-8F49-27F6269208F6} - (Inbox Recherche) - http://toolbar.inbox.com
~ Keys:  Scanned in 00mn 01s

---\\ Recherche particuliere à la racine de certains dossiers (O84)
[MD5.23D7DCEF8EF94650AF07FFE90FA3D521] [SPRF][22/04/2010] (...) -- C:\ProgramData\ezsidmv.dat   [56]
[MD5.5B349116B361BA0906C998CBE36BB05D] [SPRF][02/06/2013] (...) -- C:\Users\Mehdi\AppData\Local\d3d9caps.dat   [680]
[MD5.445D2B45F3F6371CC807FA873B7CFFEA] [SPRF][30/12/2008] (...) -- C:\Users\Mehdi\AppData\Local\d3d9caps64.dat   [732]
[MD5.D872A2C5372858851B3643B8F7BBE8A7] [SPRF][12/01/2012] (.Ask - Wrapper Application.) -- C:\Users\Mehdi\AppData\Local\Temp\setup.exe   [3904680]
[MD5.4C78ACBA7F259F2DADECFF3818DEA28C] [SPRF][18/02/2008] (.D-Link - PLC_Utility.) -- C:\Users\Mehdi\AppData\Roaming\D-Link PLC Utility.exe   [184320]
[MD5.9F20AC7F7EA0A0644181619DAC3E1BC1] [SPRF][28/11/2007] (.Intellon, Inc. - Rawether NDIS API DLL (X86).) -- C:\Users\Mehdi\AppData\Roaming\PLCLIB32.dll   [118784]
[MD5.CF5AA091B8BA5AEE3F3ADB310B9F73CB] [SPRF][28/11/2007] (.Intellon, Inc. - PCAUSA NDIS 5.0 SPR Protocol Driver.) -- C:\Users\Mehdi\AppData\Roaming\PLCND532.sys   [26656]
[MD5.79CCC4D3AFEC82883AA685E7C978CFFB] [SPRF][28/11/2007] (.Intellon, Inc. - PCAUSA NDIS 5.0 SPR Protocol Driver (AMD64).) -- C:\Users\Mehdi\AppData\Roaming\PLCND564.sys   [40992]
[MD5.19CC598C0B2D2F8E04724B22E64F4246] [SPRF][22/07/2013] (.Guillemot Corporation S.A. - ePlugStationInstall.) -- C:\Users\Mehdi\Desktop\ePlugStation_Setup_v4.0.exe   [149129144]
[MD5.A0A2B041A46F7811D8AF0836F4B971E4] [SPRF][20/07/2013] (.TeamViewer - Pas de description.) -- C:\Users\Mehdi\Desktop\TeamViewerQS_fr.exe   [4180096]
[MD5.0A3F15AB5ED309D001E1750F3FACD822] [SPRF][22/07/2013] (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Mehdi\Desktop\ZHPDiag2.exe   [5008472]
~ Files:  Scanned in 00mn 10s

---\\ Firewall Active Exception List (FirewallRules) (O87)
O87 - FAEL: "TCP Query User{AFD75137-FBD7-4E62-A3D4-72F42AECF228}C:\program files (x86)\oovoo\oovoo.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\oovoo\oovoo.exe (.not file.)
O87 - FAEL: "UDP Query User{DF1A2DEC-F320-41DA-B0A1-32F7FDD1DC7D}C:\program files (x86)\oovoo\oovoo.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\oovoo\oovoo.exe (.not file.)
O87 - FAEL: "TCP Query User{F9572589-1096-4EF8-A7E0-9FBAC1513895}C:\program files (x86)\oovoo\oovoo.exe" |In - Public - P6 - TRUE | .(...) -- C:\program files (x86)\oovoo\oovoo.exe (.not file.)
O87 - FAEL: "UDP Query User{C674719B-3DED-44B8-AAF5-37A72F8F0F1D}C:\program files (x86)\oovoo\oovoo.exe" |In - Public - P17 - TRUE | .(...) -- C:\program files (x86)\oovoo\oovoo.exe (.not file.)
O87 - FAEL: "{0B93A2F0-99C4-493A-862A-0E3F08C5D26F}" |In - Private - P6 - TRUE | .(...) -- C:\Users\Mehdi\AppData\Local\Temp\SweetIMReinstall\SweetImSetup.exe (.not file.)  =>PUP.SweetIM
O87 - FAEL: "{05837E03-460D-4A4E-8D36-22A221F36C21}" |In - Private - P17 - TRUE | .(...) -- C:\Users\Mehdi\AppData\Local\Temp\SweetIMReinstall\SweetImSetup.exe (.not file.)  =>PUP.SweetIM
O87 - FAEL: "{8972529B-640E-4AE6-800B-E80F741FD19C}" |In - Private - P6 - TRUE | .(...) -- C:\Users\Mehdi\Desktop\SweetImSetup.exe (.not file.)  =>PUP.SweetIM
O87 - FAEL: "{EBB33415-EC8E-44F3-9F4F-591C2AE2307A}" |In - Private - P17 - TRUE | .(...) -- C:\Users\Mehdi\Desktop\SweetImSetup.exe (.not file.)  =>PUP.SweetIM
O87 - FAEL: "{3B1B0011-089B-4FDC-9A17-3C0501C66E25}" | In - Public - P6 - TRUE | .(.APN LLC - DtUser.) -- C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\dtUser.exe  =>PUP.SearchResults
O87 - FAEL: "{BF12F959-9D3D-4EFF-AAA5-218AD4F72AC0}" | In - Public - P17 - TRUE | .(.APN LLC - DtUser.) -- C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\dtUser.exe  =>PUP.SearchResults
O87 - FAEL: "{07B3AC72-5EEF-4C09-B0E5-AAB01724E491}" | In - None - P17 - TRUE | .(.Iminent - Iminent.) -- C:\Program Files (x86)\Iminent\Iminent.exe  =>Adware.IMBooster
O87 - FAEL: "{28402B59-FEF0-4072-AF23-81BCD8512AE3}" | In - None - P17 - TRUE | .(.Iminent - Iminent.) -- C:\Program Files (x86)\Iminent\Iminent.Messengers.exe  =>Adware.IMBooster
~ Firewall: 206 Legitimates Filtered in 00mn 01s

---\\ Product Upgrade Codes (O90)
O90 - PUC: "190FBBD4DCAFC2244BC3873653DB3589" . (.MovieEdit Task.) -- C:\Windows\Installer\{4DBBF091-FACD-422C-B43C-786335BD5398}\ARPPRODUCTICON.exe
O90 - PUC: "7DE8F1098E31FE347B83F28EB95088BE" . (.Camera Access Library.) -- C:\Windows\Installer\{901F8ED7-13E8-43EF-B738-2FE89B0588EB}\ARPPRODUCTICON.exe
O90 - PUC: "969006933C14856478E6611F80CFC529" . (.ISO Recorder.) -- C:\Windows\Installer\{39600969-41C3-4658-876E-16F108FC5C92}\_6FEFF9B68218417F98F549.exe
O90 - PUC: "9BBDBE2000643D145B6604BC6851112D" . (.World of Warcraft FREE Trial.) -- C:\Windows\Installer\{02EBDBB9-4600-41D3-B566-40CB861511D2}\ARPPRODUCTICON.exe
O90 - PUC: "A28B4D68DEBAA244EB686953B7074FEF" . (.Avira SearchFree Toolbar plus Web Protection.) -- c:\program files (x86)\ask.com\cb_e179.ico  =>Toolbar.Avira
O90 - PUC: "A7D67D1CBB3FAE747A64B5E1F2CFD12F" . (.Canon ZoomBrowser EX (F).) -- C:\Windows\Installer\{C1D76D7A-F3BB-47EA-A746-5B1E2FFC1DF2}\ARPPRODUCTICON.exe
O90 - PUC: "ACFD5B980E184AE4A8A0F404781ADD00" . (.Iminent.) -- C:\Windows\Installer\{89B5DFCA-81E0-4EA4-8A0A-4F4087A1DD00}\imbooster.ico  =>Adware.IMBooster
O90 - PUC: "D43C8E0D2D91DF949A0088ED7B88FF68" . (.Internet Library.) -- C:\Windows\Installer\{D0E8C34D-19D2-49FD-A900-88DEB788FF86}\ARPPRODUCTICON.exe
O90 - PUC: "FB670DDD3C5CC864AAB19F7A4E4764EF" . (..) -- C:\Windows\Installer\{DDD076BF-C5C3-468C-AA1B-F9A7E47446FE}\ARPPRODUCTICON.exe
~ Update Products: 138 Legitimates Filtered in 00mn 00s

---\\ Random Export Key (O91)
[HKCU\Software\5ded6dce03bed49\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}"
[HKCU\Software\5ded6dce03bed49\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:version="2.6.1095.52"
[HKCU\Software\5ded6dce03bed49] =>Toolbar.Babylon^
[HKLM\Software\Wow6432Node\5ded6dce03bed49] => Clé orpheline
~ Export Key Software:  Scanned in 00mn 00s

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SR - | Auto 10/05/2013 65640 |  (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SS - | Demand 12/06/2013 256904 |  (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SR - | Auto 01/07/2013 84024 |  (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
SR - | Auto 01/07/2013 108088 |  (AntiVirService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
SR - | Auto 01/07/2013 589368 |  (AntiVirWebService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.exe
SR - | Auto 09/07/2009 144712 |  (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
SS - | Demand  0 |  (aspnet_state) . (...) - C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
SR - | Auto 04/02/2009 949248 |  (Ati External Event Utility) . (.ATI Technologies Inc..) - C:\Windows\System32\Ati2evxx.exe
SR - | Auto 12/12/2008 238888 |  (Bonjour Service) . (.Apple Inc..) - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
SR - | Auto 02/06/2005 86606 |  (CCALib8) . (.Canon Inc..) - C:\Program Files (x86)\Canon\CAL\CALMAIN.exe
SR - | Auto  107520 |  (DefaultTabUpdate) . (...) - C:\Users\Mehdi\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe  =>Adware.Bandoo
SS - | Auto 08/08/2011 136176 |  (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 08/08/2011 136176 |  (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 08/02/2011 136120 |  (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
SR - | Demand 21/01/2008 27648 | C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll (hpqcxs08) . (.Hewlett-Packard Co..) - C:\Windows\System32\svchost.exe
SR - | Auto 21/01/2008 27648 | C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll (hpqddsvc) . (.Hewlett-Packard Co..) - C:\Windows\System32\svchost.exe
SR - | Auto 06/08/2008 354840 |  (IAANTMON) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
SR - | Demand 12/11/2009 660256 |  (iPod Service) . (.Apple Inc..) - C:\Program Files (x86)\iPod\bin\iPodService.exe
SR - | Auto 07/05/2010 197976 |  (LVPrcS64) . (.Logitech Inc..) - C:\Program Files\Common Files\Logishrd\LVMVFM\LVPrcSrv.exe
SS - | Demand 18/06/2013 117144 |  (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
SR - | Auto 21/01/2008 27648 | C:\Windows\system32\HPZinw12.dll (Net Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\System32\svchost.exe
SR - | Auto 21/01/2008 27648 | C:\Windows\system32\HPZipm12.dll (Pml Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\System32\svchost.exe
SS - | Demand 25/06/2010 117264 |  (rpcapd) . (.CACE Technologies, Inc..) - C:\Program Files (x86)\WinPcap\rpcapd.exe
SS - | Auto 21/06/2013 162408 |  (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SR - | Auto 09/07/2013 2859048 |  (SProtection) . (.Iminent.) - C:\Program Files (x86)\Common Files\Umbrella\umbrella.exe  =>Adware.IMBooster
SR - | Auto 05/12/2012 92632 |  (TomTomHOMEService) . (.TomTom.) - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
SS - | Auto 21/01/2008 27648 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Demand  0 |  (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe
SR - | Auto 21/01/2008 27648 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Services:  Scanned in 00mn 02s

---\\ Scan Additionnel (O88)
Database Version : v2.12804 - (22/07/2013)
Clés trouvées (Keys found) : 416
Valeurs trouvées (Values found) : 4
Dossiers trouvés  (Folders found) : 27
Fichiers trouvés  (Files found) : 32

[HKLM\Software\Classes\AppID\{01994268-3C10-4044-A1EA-7A9C1B739A11}]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\AppID\{01994268-3C10-4044-A1EA-7A9C1B739A11}]   =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}]   =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}]   =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}]   =>Adware.IMBooster
[HKLM\Software\Classes\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947}]   =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}]   =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}]   =>PUP.RewardsArcade
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5}]   =>Toolbar.Babylon
[HKLM\Software\Classes\TypeLib\{1FDC0B61-91AC-4157-9B27-CAD9A09AB67E}]   =>Adware.Bandoo
[HKLM\Software\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]   =>Toolbar.Ask
[HKLM\Software\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}]   =>PUP.RewardsArcade
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31CF9EBE-5755-4a1d-AC25-2834D952D9B4}]   =>Toolbar.Agent
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{31CF9EBE-5755-4a1d-AC25-2834D952D9B4}]   =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31CF9EBE-5755-4a1d-AC25-2834D952D9B4}]   =>Toolbar.Agent
[HKLM\Software\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}]   =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}]   =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}]   =>Toolbar.Ask
[HKLM\Software\Wow6432Node\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}]   =>Toolbar.Ask
[HKLM\Software\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}]   =>PUP.RewardsArcade
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7F6AFBF1-E065-4627-A2FD-810366367D01}]   =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7F6AFBF1-E065-4627-A2FD-810366367D01}]   =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}]   =>Toolbar.Agent
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01}]   =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}]   =>Toolbar.Ask
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}]   =>Toolbar.Ask
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8736C681-37A0-40C6-A0F0-4C083409151C}]   =>Toolbar.Crawler
[HKLM\Software\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}]   =>Toolbar.Skype
[HKLM\Software\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}]   =>Toolbar.Ask
[HKLM\Software\Wow6432Node\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}]   =>Toolbar.Ask
[HKLM\Software\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}]   =>Toolbar.Ask
[HKLM\Software\Wow6432Node\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}]   =>Toolbar.Ask
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}]   =>Adware.Bandoo
[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}]   =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}]   =>Adware.Bandoo
[HKLM\Software\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}]   =>PUP.RewardsArcade
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}]   =>Adware.IMBooster
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}]   =>Adware.IMBooster
[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}]   =>Toolbar.Ask
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}]   =>Toolbar.Ask
[HKLM\Software\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\TypeLib\{A9CAF365-EA35-45DA-BD8B-2EFA09D374AC}]   =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}]   =>Toolbar.Ask
[HKLM\Software\Wow6432Node\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}]   =>Toolbar.Ask
[HKLM\Software\Classes\Interface\{ACA608DB-A210-4253-B799-3FD24E9A7BF5}]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Interface\{ACA608DB-A210-4253-B799-3FD24E9A7BF5}]   =>Adware.IMBooster
[HKLM\Software\Classes\AppID\{AD25754E-D76C-42B3-A335-2F81478B722F}]   =>Adware.BullseyeToolbar
[HKLM\Software\Classes\TypeLib\{AD25754E-D76C-42B3-A335-2F81478B722F}]   =>Adware.BullseyeToolbar
[HKLM\Software\Wow6432Node\Classes\AppID\{AD25754E-D76C-42B3-A335-2F81478B722F}]   =>Adware.BullseyeToolbar
[HKLM\Software\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}]   =>PUP.RewardsArcade
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]   =>Toolbar.Skype
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]   =>Toolbar.Skype
[HKLM\Software\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]   =>Toolbar.Skype
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]   =>Toolbar.Skype
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}]   =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}]   =>Toolbar.Conduit
[HKLM\Software\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\TypeLib\{B12E99ED-69BD-437C-86BE-C862B9E5444D}]   =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}]   =>Adware.CDNHelper
[HKLM\Software\Wow6432Node\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}]   =>Adware.CDNHelper
[HKLM\Software\Classes\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB}]   =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB}]   =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}]   =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}]   =>Toolbar.Babylon
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6}]   =>Toolbar.Agent
[HKLM\Software\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}]   =>PUP.RewardsArcade
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1ED9DA0-AFD0-4b90-AC6A-D3874F591014}]   =>Adware.Bandoo
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1ED9DA0-AFD0-4b90-AC6A-D3874F591014}]   =>Adware.Bandoo
[HKLM\Software\Classes\CLSID\{C1ED9DA0-AFD0-4b90-AC6A-D3874F591014}]   =>Adware.Bandoo
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1ED9DA0-AFD0-4b90-AC6A-D3874F591014}]   =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1ED9DA0-AFD0-4b90-AC6A-D3874F591014}]   =>Adware.Bandoo
[HKLM\Software\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}]   =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}]   =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8}]   =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8}]   =>Toolbar.Babylon
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}]   =>Toolbar.Agent
[HKLM\Software\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}]   =>Toolbar.InBox
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}]   =>Toolbar.Avira
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}]   =>Toolbar.Avira
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]   =>Toolbar.Avira
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}]   =>Toolbar.InBox
[HKLM\Software\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}]   =>Toolbar.Babylon
[HKLM\Software\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\AppID\{D97A8234-F2A2-4AD4-91D5-FECDB2C553AF}]   =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Classes\AppID\{D97A8234-F2A2-4AD4-91D5-FECDB2C553AF}]   =>Adware.Bandoo
[HKLM\Software\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\CLSID\{E46C8196-B634-44a1-AF6E-957C64278AB1}]   =>Toolbar.Babylon
[HKLM\Software\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}]   =>Toolbar.Babylon
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}]   =>Adware.IMBooster
[HKLM\Software\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}]   =>PUP.RewardsArcade
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F34C9277-6577-4DFF-B2D7-7D58092F272F}]   =>PUP.Datamngr
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F34C9277-6577-4DFF-B2D7-7D58092F272F}]   =>PUP.Datamngr
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F34C9277-6577-4DFF-B2D7-7D58092F272F}]   =>PUP.Datamngr
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F34C9277-6577-4DFF-B2D7-7D58092F272F}]   =>PUP.Datamngr
[HKLM\Software\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}]   =>PUP.RewardsArcade
[HKLM\Software\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}]   =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\BrowserConnection.dll]   =>Adware.Bandoo
[HKLM\Software\Classes\AppID\escort.dll]   =>Toolbar.Babylon
[HKLM\Software\Classes\AppID\GenericAskToolbar.DLL]   =>Toolbar.Ask
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine]   =>Toolbar.Conduit
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\IMBoosterARP]   =>Adware.IMBooster
[HKLM\Software\Classes\Babylon.dskBnd]   =>Toolbar.Babylon
[HKLM\Software\Classes\Babylon.dskBnd.1]   =>Toolbar.Babylon
[HKLM\Software\Classes\bbylnApp.appCore]   =>Toolbar.Babylon
[HKLM\Software\Classes\bbylnApp.appCore.1]   =>Toolbar.Babylon
[HKLM\Software\Classes\BrowserConnection.Loader]   =>Adware.Bandoo
[HKLM\Software\Classes\BrowserConnection.Loader.1]   =>Adware.Bandoo
[HKLM\Software\Classes\Conduit.Engine]   =>Toolbar.Conduit
[HKLM\Software\Classes\escort.escortIEPane]   =>PUP.Funmoods
[HKLM\Software\Classes\escort.escortIEPane.1]   =>PUP.Funmoods
[HKLM\Software\Classes\escort.escrtBtn.1]   =>Toolbar.Babylon
[HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd]   =>Toolbar.Ask
[HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd.1]   =>Toolbar.Ask
[HKLM\Software\Wow6432Node\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb]   =>Toolbar.Babylon
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E]   =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6]   =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7]   =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852]   =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0]   =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA]   =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96]   =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8]   =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01]   =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59]   =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED]   =>Toolbar.Ask
[HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF]   =>Toolbar.AVGSearch
[HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF]   =>Toolbar.AVGSearch
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF]   =>Toolbar.AVGSearch
[HKLM\Software\Wow6432Node\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF]   =>Toolbar.AVGSearch
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472]   =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296]   =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888]   =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC]   =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA]   =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E]   =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF]   =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E]   =>Toolbar.Ask
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9]   =>Adware.MyWebSearch
[HKCU\Software\APN DTX]   =>Toolbar.Ask
[HKCU\Software\APN]   =>Toolbar.Ask
[HKLM\Software\Wow6432Node\APN]   =>Toolbar.Ask
[HKCU\Software\Ask.com]   =>Toolbar.AskBar
[HKCU\Software\AskToolbar]   =>Toolbar.AskTBar
[HKCU\Software\AppDataLow\Software\AskToolbar]   =>Toolbar.AskTBar
[HKLM\Software\Wow6432Node\AskToolbar]   =>Toolbar.AskTBar
[HKCU\Software\BabylonChromeExtension]   =>Toolbar.Babylon
[HKCU\Software\AppDataLow\Software\ConduitSearchScopes]   =>Toolbar.Conduit
[HKCU\Software\Cr_Installer]   =>PUP.CrossRider
[HKCU\Software\DataMngr]   =>Adware.Bandoo
[HKLM\Software\DataMngr]   =>Adware.Bandoo
[HKLM\Software\Wow6432Node\DataMngr]   =>Adware.Bandoo
[HKCU\Software\default tab]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\default tab]   =>Adware.IMBooster
[HKCU\Software\defaulttab]   =>Adware.IMBooster
[HKCU\Software\AppDataLow\Software\defaulttab]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\iLividSRTB]   =>Adware.Bandoo
[HKCU\Software\ilivid]   =>Adware.Bandoo
[HKCU\Software\Iminent]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Iminent]   =>Adware.IMBooster
[HKCU\Software\pdfforge.org]   =>Toolbar.PDFCreator
[HKLM\Software\Wow6432Node\pdfforge.org]   =>Toolbar.PDFCreator
[HKCU\Software\AppDataLow\Software\PriceGong]   =>Adware.PriceGong
[HKCU\Software\Softonic]   =>Toolbar.Conduit
[HKCU\Software\SweetIM]   =>PUP.SweetIM
[HKLM\Software\Wow6432Node\SweetIM]   =>PUP.SweetIM
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DefaultTab]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ilividtoolbarguid]   =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP]   =>Adware.IMBooster
[HKLM\Software\Classes\Prod.cap]   =>Toolbar.Babylon
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings]   =>PUP.BProtector
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375]   =>Toolbar.Agent
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5]   =>Toolbar.Agent
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2]   =>Toolbar.Ask
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CCB69577-088B-4004-9ED8-FF5BCC83A039}]   =>Toolbar.RebateInformer
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CC99A798-FD3D-4AB4-969E-6071612524F9}]   =>PUP.AppGraffiti
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\DefaultTab]   =>Adware.IMBooster
[HKLM\Software\Classes\CLSID\{9FF9AE6F-4553-41A7-B645-B0E88850EABF}]   =>Adware.Bandoo
[HKLM\Software\Classes\CLSID\{CE4DB5A3-58E6-41F1-8761-47238DF4F468}]   =>Adware.Bandoo
[HKLM\Software\Classes\TypeLib\{75E8DA27-44AF-40AE-927C-F2EEC99D65B1}]   =>Adware.Bandoo
[HKLM\Software\Classes\CLSID\{9FF9AE6F-4553-41a7-B645-B0E88850EABF}]   =>Adware.Bandoo
[HKLM\Software\Classes\CLSID\{CE4DB5A3-58E6-41f1-8761-47238DF4F468}]   =>Adware.Bandoo
[HKLM\Software\Classes\Interface\{8DEC3C75-9A5D-446C-B7B5-E4AB4FDD6309}]   =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Classes\Interface\{8DEC3C75-9A5D-446C-B7B5-E4AB4FDD6309}]   =>Adware.Bandoo
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller]   =>Adware.MegaSearch
[HKCU\Software\AppDataLow\Software\Deal Boat]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Deal Boat]   =>PUP.RewardsArcade
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Deal Boat]   =>PUP.RewardsArcade
[HKLM\Software\Classes\Interface\{78888F8B-D5E4-43CE-89F5-C8C18223AF64}]   =>Adware.Facemoods
[HKLM\Software\Wow6432Node\Classes\Interface\{78888F8B-D5E4-43CE-89F5-C8C18223AF64}]   =>Adware.Facemoods
[HKLM\Software\Classes\Interface\{8B8558F6-DC26-4F39-8417-34B8934AA459}]   =>Adware.Facemoods
[HKLM\Software\Wow6432Node\Classes\Interface\{8B8558F6-DC26-4F39-8417-34B8934AA459}]   =>Adware.Facemoods
[HKLM\Software\Classes\Interface\{9E393F82-2644-4AB6-B994-1AD39D6C59EE}]   =>Adware.Facemoods
[HKLM\Software\Wow6432Node\Classes\Interface\{9E393F82-2644-4AB6-B994-1AD39D6C59EE}]   =>Adware.Facemoods
[HKLM\Software\Classes\Interface\{A3A2A5C0-1306-4D1A-A093-9CECA4230002}]   =>Adware.Facemoods
[HKLM\Software\Wow6432Node\Classes\Interface\{A3A2A5C0-1306-4D1A-A093-9CECA4230002}]   =>Adware.Facemoods
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C451C08A-EC37-45DF-AAAD-18B51AB5E837}]   =>Toolbar.PDFCreator
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C451C08A-EC37-45DF-AAAD-18B51AB5E837}]   =>Toolbar.PDFCreator
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C451C08A-EC37-45DF-AAAD-18B51AB5E837}]   =>Toolbar.PDFCreator
[HKCU\Software\AppDataLow\Software\Crossrider]   =>PUP.CrossRider
[HKCU\Software\InstalledBrowserExtensions\]   =>PUP.CrossRider
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F1057DD419AED0B468AD8888429E139A]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}]   =>PUP.AppGraffiti
[HKCU\Software\BI]   =>Adware.MegaSearch
[HKCU\Software\InstalledBrowserExtensions]   =>PUP.CrossRider
[HKLM\SYSTEM\CurrentControlSet\Services\DefaultTabUpdat]   =>Adware.Bandoo^
[HKLM\SYSTEM\CurrentControlSet\Services\SProtectio]   =>Adware.IMBooster^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}]   =>Toolbar.Ask^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Deal Boat]   =>PUP.SpecialSavings^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\DefaultTab]   =>Adware.Bandoo^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP]   =>Adware.IMBooster^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{89B5DFCA-81E0-4EA4-8A0A-4F4087A1DD00}]   =>Adware.IMBooster^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ilividtoolbarguid]   =>PUP.SearchResults^
[HKLM\Software\Classes\CrossriderApp0012747.BHO]   =>PUP.CrossRider
[HKLM\Software\Classes\CrossriderApp0012747.BHO.1]   =>PUP.CrossRider
[HKLM\Software\Classes\CrossriderApp0012747.Sandbox]   =>PUP.CrossRider
[HKLM\Software\Classes\CrossriderApp0012747.Sandbox.1]   =>PUP.CrossRider
[HKLM\Software\Classes\iminent]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Business.Tinyfying.DownloadArgs]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Business.Tinyfying.LinkToPromoteArgs]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Business.Tinyfying.RawDataArgs]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Business.Tinyfying.TinyUrlArgs]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Business.Tinyfying.ViralLinkArgs]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.ClientCallback]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.ContractBase]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.AddToUserContentCommand]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.CheckLoginStatusCommand]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.CleanCacheCommand]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.GameOverCallback]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.GetCreditCommand]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.GetInstallationContextCommand]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.GetLoginStatusCommand]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.GetLoginStatusResult]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.GetVariableCommand]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.GetVariableResult]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.InstallationContextResult]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.LoadContentCommand]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.LoadContentCommandResult]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.LoginCommand]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.LoginStatusChangedCallback]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.LogoutCommand]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.MergeIdentityCommand]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.MyAccountCommand]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.PlayContentCommand]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.PostContentCallback]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.RecycleViewsCommand]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.SetVariableCommand]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.ShowBrowserWindowCommand]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.ShowControlCenterCommand]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.ShowPluginWindowCommand]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.TestContentCommand]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.UserContentChangedCallback]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.VariableChangedCallback]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.WarmUpCommand]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.DataContracts.WelcomeCommand]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.ServerCommand]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.Communication.ServerResult]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.LightContent]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.LightUri]   =>Adware.IMBooster
[HKLM\Software\Classes\Iminent.Mediator.MediatorServiceProxy]   =>Adware.IMBooster
[HKLM\Software\Classes\IminentWebBooster.ActiveContentHandle.1]   =>Adware.IMBooster
[HKLM\Software\Classes\IminentWebBooster.ActiveContentHandler]   =>Adware.IMBooster
[HKLM\Software\Classes\IminentWebBooster.BrowserHelperObject]   =>Adware.IMBooster
[HKLM\Software\Classes\IminentWebBooster.BrowserHelperObject.1]   =>Adware.IMBooster
[HKLM\Software\Classes\IminentWebBooster.ScriptExtender]   =>Adware.IMBooster
[HKLM\Software\Classes\IminentWebBooster.ScriptExtender.1]   =>Adware.IMBooster
[HKLM\Software\Classes\IminentWebBooster.TinyUrlHandler]   =>Adware.IMBooster
[HKLM\Software\Classes\IminentWebBooster.TinyUrlHandler.1]   =>Adware.IMBooster
[HKLM\Software\Classes\Toolbar.CT1572363]   =>Toolbar.Conduit
[HKLM\Software\Classes\Toolbar.CT3286379]   =>Toolbar.Conduit
[HKLM\Software\Classes\AppID\escort.DLL]   =>PUP.Funmoods
[HKLM\Software\Classes\AppID\Iminent.WebBooster.InternetExplorer.DLL]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\CrossriderApp0012747.BHO]   =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Classes\CrossriderApp0012747.BHO.1]   =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Classes\CrossriderApp0012747.Sandbox]   =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Classes\CrossriderApp0012747.Sandbox.1]   =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Classes\escort.escortIEPane]   =>PUP.Funmoods
[HKLM\Software\Wow6432Node\Classes\escort.escortIEPane.1]   =>PUP.Funmoods
[HKLM\Software\Wow6432Node\Classes\escort.escrtBtn.1]   =>PUP.Funmoods
[HKLM\Software\Wow6432Node\Classes\iminent]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Business.Tinyfying.DownloadArgs]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Business.Tinyfying.LinkToPromoteArgs]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Business.Tinyfying.RawDataArgs]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Business.Tinyfying.TinyUrlArgs]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Business.Tinyfying.ViralLinkArgs]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.ClientCallback]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.ContractBase]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.AddToUserContentCommand]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.CheckLoginStatusCommand]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.CleanCacheCommand]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.GameOverCallback]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.GetCreditCommand]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.GetInstallationContextCommand]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.GetLoginStatusCommand]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.GetLoginStatusResult]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.GetVariableCommand]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.GetVariableResult]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.InstallationContextResult]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.LoadContentCommand]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.LoadContentCommandResult]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.LoginCommand]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.LoginStatusChangedCallback]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.LogoutCommand]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.MergeIdentityCommand]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.MyAccountCommand]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.PlayContentCommand]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.PostContentCallback]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.RecycleViewsCommand]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.SetVariableCommand]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.ShowBrowserWindowCommand]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.ShowControlCenterCommand]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.ShowPluginWindowCommand]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.TestContentCommand]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.UserContentChangedCallback]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.VariableChangedCallback]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.WarmUpCommand]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.DataContracts.WelcomeCommand]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.ServerCommand]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.Communication.ServerResult]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.LightContent]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.LightUri]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Iminent.Mediator.MediatorServiceProxy]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\IminentWebBooster.ActiveContentHandle.1]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\IminentWebBooster.ActiveContentHandler]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\IminentWebBooster.BrowserHelperObject]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\IminentWebBooster.BrowserHelperObject.1]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\IminentWebBooster.ScriptExtender]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\IminentWebBooster.ScriptExtender.1]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\IminentWebBooster.TinyUrlHandler]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\IminentWebBooster.TinyUrlHandler.1]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Classes\Toolbar.CT1572363]   =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Classes\Toolbar.CT3286379]   =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110111271147}]   =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Classes\CLSID\{11111111-1111-1111-1111-110111271147}]   =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Classes\CLSID\{22222222-2222-2222-2222-220122272247}]   =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Classes\AppID\escort.DLL]   =>PUP.Funmoods
[HKLM\Software\Wow6432Node\Classes\AppID\Iminent.WebBooster.InternetExplorer.DLL]   =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110111271147}]   =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110111271147}]   =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{31111111-1111-1111-1111-110111271147}]   =>PUP.CrossRider
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110111271147}]   =>PUP.CrossRider
[HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]:{D4027C7F-154A-4066-A1AD-4243D8127440}   =>Toolbar.Avira
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar]:{D4027C7F-154A-4066-A1AD-4243D8127440}   =>Toolbar.Avira
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:SpybotSD TeaTimer   =>Hijacker.Eazel^
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:DATAMNGR   =>PUP.SearchResults^
C:\Program Files (x86)\Iminent   =>Adware.IMBooster^
C:\Program Files (x86)\OfferBox   =>PUP.OfferBox^
C:\Program Files (x86)\Search Results Toolbar   =>PUP.SearchResults^
C:\ProgramData\Babylon   =>Toolbar.Babylon^
C:\ProgramData\Iminent   =>Adware.IMBooster^
C:\Users\Mehdi\AppData\Roaming\Babylon   =>Toolbar.Babylon^
C:\Users\Mehdi\AppData\Roaming\DefaultTab   =>Adware.Bandoo^
C:\Users\Mehdi\AppData\Roaming\Iminent   =>Adware.IMBooster^
C:\Users\Mehdi\AppData\Roaming\OfferBox   =>PUP.OfferBox^
C:\Users\Mehdi\AppData\Local\Updater12747   =>PUP.CrossRider^
C:\Program Files (x86)\Common Files\Umbrella   =>Adware.IMBooster
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Iminent   =>Adware.IMBooster
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator Toolbar   =>Toolbar.PDFCreator
C:\Users\Mehdi\AppData\Roaming\defaulttab   =>Adware.IMBooster
C:\Users\Mehdi\AppData\Local\AskToolbar   =>Toolbar.AskTBar
C:\Users\Mehdi\AppData\Local\Conduit   =>Toolbar.Conduit
C:\Users\Mehdi\AppData\Local\Bundled software uninstaller   =>Adware.MegaSearch
C:\Users\Mehdi\AppData\Local\Deal Boat   =>PUP.RewardsArcade
C:\Users\Mehdi\AppData\LocalLow\AskToolbar   =>Toolbar.AskTBar
C:\Users\Mehdi\AppData\LocalLow\BabylonToolbar   =>Toolbar.Babylon
C:\Users\Mehdi\AppData\LocalLow\Conduit   =>Toolbar.Conduit
C:\Users\Mehdi\AppData\LocalLow\PriceGong   =>Adware.PriceGong
C:\Users\Mehdi\AppData\LocalLow\PDFCreator Toolbar   =>Toolbar.PDFCreator
C:\Users\Mehdi\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpicnlijpdlebkhpegfenfjpglinfdhm   =>PUP.OfferBox
C:\Users\Mehdi\AppData\Roaming\Mozilla\Firefox\Profiles\bjeoam9c.default\Conduit   =>Toolbar.Conduit
C:\Users\Mehdi\AppData\Roaming\Mozilla\Firefox\Profiles\bjeoam9c.default\Smartbar   =>Hijacker.SmartBar
C:\Users\Mehdi\AppData\Roaming\Mozilla\Firefox\Profiles\bjeoam9c.default\Extensions\toolbar@ask.com   =>Toolbar.AskTBar
C:\Users\Mehdi\AppData\Roaming\Mozilla\Firefox\Profiles\bjeoam9c.default\SearchPlugins\SweetIM Search.xml   =>PUP.SweetIM
C:\Users\Mehdi\AppData\Roaming\Mozilla\Firefox\Profiles\bjeoam9c.default\SearchPlugins\sweetim.xml   =>PUP.SweetIM
C:\Users\Mehdi\AppData\Roaming\Mozilla\Firefox\Profiles\bjeoam9c.default\Extensions\addon@defaulttab.com.xpi   =>Adware.Bandoo
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe   =>Hijacker.Eazel^
C:\Program Files (x86)\Iminent\Iminent.exe   =>Adware.IMBooster^
C:\Program Files (x86)\Iminent\Iminent.Messengers.exe   =>Adware.IMBooster^
C:\Users\Mehdi\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe   =>Adware.Bandoo^
C:\Program Files (x86)\Common Files\Umbrella\umbrella.exe   =>Adware.IMBooster^
C:\Program Files (x86)\Search Results Toolbar\Datamngr\datamngrUI.exe   =>PUP.SearchResults^
C:\Users\Mehdi\AppData\Roaming\Mozilla\Firefox\Profiles\bjeoam9c.default\searchplugins\SweetIM Search.xml   =>PUP.SweetIM^
C:\Users\Mehdi\AppData\Roaming\Mozilla\Firefox\Profiles\bjeoam9c.default\searchplugins\sweetim.xml   =>PUP.SweetIM^
C:\Users\Mehdi\AppData\Roaming\Mozilla\Firefox\Profiles\bjeoam9c.default\searchplugins\vgrabber-v14-customized-web-search.xml   =>Toolbar.vGrabber^
C:\Program Files (x86)\Mozilla FireFox\searchplugins\babylon.xml   =>Toolbar.Babylon^
C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\BrowserConnection.dll   =>PUP.SearchResults^
C:\Program Files (x86)\Ask.com\UpdateTask.exe   =>Toolbar.Ask^
C:\Users\Mehdi\AppData\Local\Updater12747\Updater12747.exe   =>PUP.SpecialSavings^
[HKCU\Software\AppDataLow\Software\DefaultTab]   =>Adware.Bandoo^
[HKCU\Software\AppDataLow\Software\Smartbar]   =>Hijacker.SmartBar^
[HKCU\Software\DataMngr_Toolbar]   =>PUP.Datamngr^
[HKCU\Software\Default Tab]   =>Adware.Bandoo^
[HKCU\Software\DefaultTab]   =>Adware.Bandoo^
[HKCU\Software\YahooPartnerToolbar]   =>Toolbar.Yahoo^
[HKCU\Software\Yahoo]   =>Toolbar.Yahoo^
[HKCU\Software\iLivid]   =>Adware.Bandoo^
[HKCU\Software\yahooinstall]   =>Toolbar.Yahoo^
[HKLM\Software\Wow6432Node\Babylon]   =>Toolbar.Babylon^
[HKLM\Software\Wow6432Node\Default Tab]   =>Adware.Bandoo^
[HKLM\Software\Wow6432Node\Yahoo]   =>Toolbar.Yahoo^
C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\dtUser.exe   =>PUP.SearchResults^
c:\program files (x86)\ask.com\cb_e179.ico   =>Toolbar.Avira^
C:\Windows\Installer\{89B5DFCA-81E0-4EA4-8A0A-4F4087A1DD00}\imbooster.ico   =>Adware.IMBooster^
[HKCU\Software\5ded6dce03bed49]   =>Toolbar.Babylon^^
~ Additionnel Scan: 304527 Items scanned in 00mn 34s