Viggo Posted September 19, 2012 ID:598763 Share Posted September 19, 2012 Hello,Since a week I am getting pop ups I guess are generated by yieldmanager ( cookie ? ) and so far, I have not succeded get red of them.I am using Malwarebytes 1.65.0.1400 and actually it's of course active and should normally block attempts.I installed it 3 days ago, have made the recommended scan and malwarebytes has detected quite a few entries and removed them by sending them in the quarantaine sector.I thought these pop ups would never show up again...but sadly it's going on.I am using Firefox, always latest versions and did of course block cookies such as from:ad.adserverplus.comad.doubleclick.netad.yieldmanager.netad.yieldmanager.txtyieldmanager.edgesuite.netyieldmanager.egdgesuite.cometc.which are linked to this issue. At least, when these pop ups are showing up, these links are visible.Many thanks for your help in order to solve this problem.Berst regard Link to post Share on other sites More sharing options...
MrCharlie Posted September 19, 2012 ID:598781 Share Posted September 19, 2012 Welcome to the forum, please start at the link below:http://forums.malwar...?showtopic=9573Post back the 2 logs here.....DDS.txt and Attach.txt<====><====><====><====><====><====><====><====>Next.......Please remove any usb or external drives from the computer before you run this scan!Quit all running programs.Please download and run RogueKiller to your desktop.For Windows XP, double-click to start.For Vista or Windows 7, do a right-click on the program, select Run as Administrator to start, & when prompted Allow to run.Click Scan to scan the system. When the scan completes > Close out the program > Don't Fix anything!Don't run any other options, they're not all bad!!!!!!!Post back the report which should be located on your desktop.MrC Link to post Share on other sites More sharing options...
Viggo Posted September 19, 2012 Author ID:598818 Share Posted September 19, 2012 Thanks for your answer. OK I will download the two tools and run them. Once I have the logs, I will put them here.Regards Link to post Share on other sites More sharing options...
Viggo Posted September 19, 2012 Author ID:598826 Share Posted September 19, 2012 BTW: I have downloaded RgueKiller, registred the download...and hit the exe.file. My Norton Firewall informed me: This application is of recent publication and the savety is notverfied.I guess it's save running it ? Right ?It did of course stop automatically to run it. I will have to stop for a while the Firewall.Regards Link to post Share on other sites More sharing options...
MrCharlie Posted September 19, 2012 ID:598829 Share Posted September 19, 2012 Yes, it's safe to run, MrC Link to post Share on other sites More sharing options...
Viggo Posted September 19, 2012 Author ID:598871 Share Posted September 19, 2012 OK I did run RogueKiller. I just had to disactivate for a short moment the firewall.I have Windows XP Professional, which is always automatically updated. To run RogueKiller, it just started to do something ( no idea what), when clicking on RogueKiller.exe.After a while it just put on the desk a file with the name: RK-Quarantaine including a sort of a report you can see below:[00:00:0000] ***** Global Init *****[00:00:0000] Has crashed before : Yes[00:00:0000] Create mutex : RogueKiller[00:00:0000] Mutex Created : 0xa8[00:00:0000] Fill lists[00:00:0000] OS Language : French[00:00:0016] Take Privileges[00:00:0016] Modify Token[00:00:0016] Set priority to HIGH[00:00:0016] Getting Operating System[00:00:0016] Os Getted : Windows XP (5.1.2600 Service Pack 3) 32 bits version[00:00:0031] ***** Global Init OK *****[00:00:0031] ***** GUI Init *****[00:00:0031] Get build number[00:00:0031] build number : RogueKiller (par Tigzy) -- v8.0.4[00:00:0219] ***** GUI Init OK *****[00:00:0234] ***** PreScan *****[00:00:0234] Clear ListViews[00:00:0234] Clear Objects[00:00:0250] Enum Windows[00:00:0328] [Check Window] Eula - Please read[00:00:0328] [Check Window] Debug log sending[00:00:0328] [Check Window] TF_FloatingLangBar_WndTitle[00:00:0328] [Check Window] CiceroUIWndFrame[00:00:0328] [Check Window] SysFader[00:00:0328] [Check Window] yieldmanager, pop ups - Malwarebytes Forum[00:00:0328] [Check Window] Menu Démarrer[00:00:0328] [Check Window] External link[00:00:0344] [Check Window] Ouvrir un nouvel onglet[00:00:0344] [Check Window] Détails du compte utilisateur de Sylva Geffroy à Le site de l'alimentation à base de viande crue pour chiens, chats et furets. BARF et RAW FEEDING.[00:00:0344] [Check Window] Fermer l'onglet[00:00:0344] [Check Window] Envoyer le message maintenant[00:00:0344] [Check Window] NokiaOviSuite[00:00:0344] [Check Window] NokiaOviSuite[00:00:0344] [Check Window] NokiaOviSuite[00:00:0359] [Check Window] NokiaOviSuite[00:00:0359] [Check Window] NokiaOviSuite[00:00:0359] [Check Window] NokiaOviSuite[00:00:0359] [Check Window] NokiaOviSuite[00:00:0359] [Check Window] NokiaOviSuite[00:00:0359] [Check Window] NokiaOviSuite[00:00:0359] [Check Window] NokiaOviSuite[00:00:0375] [Check Window] NokiaOviSuite[00:00:0375] [Check Window] NokiaOviSuite[00:00:0375] [Check Window] NokiaOviSuite[00:00:0375] [Check Window] NokiaOviSuite[00:00:0375] [Check Window] NokiaOviSuite[00:00:0375] [Check Window] NokiaOviSuite[00:00:0375] [Check Window] NokiaOviSuite[00:00:0391] [Check Window] NokiaOviSuite[00:00:0391] [Check Window] NokiaOviSuite[00:00:0391] [Check Window] NokiaOviSuite[00:00:0391] [Check Window] NokiaOviSuite[00:00:0391] [Check Window] NokiaOviSuite[00:00:0391] [Check Window] NokiaOviSuite[00:00:0391] [Check Window] NokiaOviSuite[00:00:0406] [Check Window] NokiaOviSuite[00:00:0406] [Check Window] NokiaOviSuite[00:00:0406] [Check Window] NokiaOviSuite[00:00:0406] [Check Window] NokiaOviSuite[00:00:0406] [Check Window] NokiaOviSuite[00:00:0406] [Check Window] NokiaOviSuite[00:00:0406] [Check Window] NokiaOviSuite[00:00:0422] [Check Window] NokiaOviSuite[00:00:0422] [Check Window] Backup_Forum[00:00:0422] [Check Window] RogueKiller (par Tigzy) -- v8.0.4[00:00:0422] [Check Window] MP_Message_bienvenue.txt - Bloc-notes[00:00:0422] [Check Window] Rédaction : (pas de sujet)[00:00:0422] [Check Window] MCI command handling window[00:00:0422] [Check Window] DDE Server Window[00:00:0438] [Check Window] nsAppShell:EventWindow[00:00:0438] [Check Window] MCI command handling window[00:00:0438] [Check Window] nsAppShell:EventWindow[00:00:0438] [Check Window] SerLa[00:00:0438] [Check Window] Aucune connexion Internet.[00:00:0438] [Check Window] Licence[00:00:0453] [Check Window] ActiveMovie Window[00:00:0453] [Check Window] FWSesAlWndTitle[00:00:0453] [Check Window] SYM_AVPAPP_WINDOW_NAME_{1BE293D4-E7AD-4314-B8C9-C088A7CC1E69}[00:00:0453] [Check Window] Volume Notification Hidden Window[00:00:0453] [Check Window] Annuler l'ajout de contenus ?[00:00:0453] [Check Window] Skype™ [4] - viggo561[00:00:0453] [Check Window] MCI command handling window[00:00:0469] [Check Window] DeviceManager[00:00:0469] [Check Window] Nokia Ovi Suite 3.0.0.284[00:00:0469] [Check Window] DDE Server Window[00:00:0469] [Check Window] NokiaOviSuite[00:00:0469] [Check Window] NokiaOviSuite[00:00:0469] [Check Window] DDE Server Window[00:00:0469] [Check Window] C:\Documents and Settings\Pieter Wenk\Application Data\Skype[00:00:0469] [Check Window] GDI+ Window[00:00:0469] [Check Window] RTCMediaMessageWindow[00:00:0484] [Check Window] CRTCMediaController[00:00:0484] [Check Window] CUccPlatform[00:00:0484] [Check Window] KHALHIDC_MainWindow[00:00:0484] [Check Window] KHALHIDC_MainWindow[00:00:0484] [Check Window] KHALHIDC_MainWindow[00:00:0484] [Check Window] KHALMOU_MainWindow[00:00:0484] [Check Window] KHALHIDN_MainWindow[00:00:0484] [Check Window] KHALHIDC_MainWindow[00:00:0484] [Check Window] KHALHIDM_MainWindow[00:00:0484] [Check Window] KHALUSB_MainWindow[00:00:0500] [Check Window] KHALHPP_MainWindow[00:00:0500] [Check Window] KHALITouch_MainWindow[00:00:0500] [Check Window] KHALMouseware_MainWindow[00:00:0500] [Check Window] KHALMainProcessWindow[00:00:0500] [Check Window] Setpoint Gaming Notification Window[00:00:0500] [Check Window] GPGOE[00:00:0516] [Check Window] Logitech Desktop Messenger Agent[00:00:0516] [Check Window] DDE Server Window[00:00:0516] [Check Window] WinAMRestoreWnd[00:00:0516] [Check Window] _GD_Crawl[00:00:0516] [Check Window] BCHelperService[00:00:0516] [Check Window] ccSvcHst[00:00:0516] [Check Window] HelperMsgListenerWnd[00:00:0531] [Check Window] NVSVCPMMWindowClass[00:00:0531] [Check Window] NokiaMServer[00:00:0531] [Check Window] iTouchWin[00:00:0531] [Check Window] Dell Media Experience[00:00:0531] [Check Window] DVDSentry[00:00:0531] [Check Window] Connections Tray[00:00:0547] [Check Window] Creative Diagnostics Agent[00:00:0547] [Check Window] Malwarebytes Anti-Malware[00:00:0547] [Check Window] Jauge d'énergie[00:00:0547] [Check Window] MS_WebcheckMonitor[00:00:0547] [Check Window] BCM V.92 56K Modem Monitor[00:00:0547] [Check Window] dlbk POR Monitor[00:00:0547] [Check Window] LEXLMPM[00:00:0563] [Check Window] [00:00:0563] [Check Window] LexPPS BCE Comm Window[00:00:0563] [Check Window] GDI+ Window[00:00:0563] [Check Window] GDI+ Window[00:00:0563] [Check Window] _form_Tray[00:00:0563] [Check Window] Swisscom Quick Help[00:00:0578] [Check Window] Swisscom Quick Help[00:00:0578] [Check Window] GDI+ Window[00:00:0578] [Check Window] Sans titre - Bloc-notes[00:00:0578] [Check Window] Courrier entrant - barfwenkpieter - Mozilla Thunderbird[00:00:0578] [Check Window] Téléchargements[00:00:0578] [Check Window] yieldmanager, pop ups - Malwarebytes Forum - Mozilla Firefox[00:00:0594] [Check Window] Program Manager[00:00:0594] [Check Window] M[00:00:0594] [Check Window] Default IME[00:00:0594] [Check Window] M[00:00:0594] [Check Window] Default IME[00:00:0594] [Check Window] Default IME[00:00:0609] [Check Window] Mefault IME[00:00:0609] [Check Window] Default IME[00:00:0609] [Check Window] M[00:00:0609] [Check Window] Default IME[00:00:0609] [Check Window] M[00:00:0609] [Check Window] Default IME[00:00:0609] [Check Window] Default IME[00:00:0625] [Check Window] Default IME[00:00:0625] [Check Window] Default IME[00:00:0625] [Check Window] Default IME[00:00:0625] [Check Window] Default IME[00:00:0625] [Check Window] Default IME[00:00:0625] [Check Window] Default IME[00:00:0641] [Check Window] Default IME[00:00:0641] [Check Window] Default IME[00:00:0641] [Check Window] Default IME[00:00:0641] [Check Window] Default IME[00:00:0641] [Check Window] Default IME[00:00:0641] [Check Window] Default IME[00:00:0641] [Check Window] M[00:00:0656] [Check Window] Default IME[00:00:0656] [Check Window] Default IME[00:00:0656] [Check Window] Default IME[00:00:0656] [Check Window] Default IME[00:00:0656] [Check Window] Default IME[00:00:0656] [Check Window] Default IME[00:00:0656] [Check Window] Default IME[00:00:0672] [Check Window] Default IME[00:00:0672] [Check Window] Default IME[00:00:0672] [Check Window] Default IME[00:00:0672] [Check Window] Default IME[00:00:0672] [Check Window] Default IME[00:00:0672] [Check Window] Default IME[00:00:0688] [Check Window] Default IME[00:00:0688] [Check Window] Default IME[00:00:0688] [Check Window] Default IME[00:00:0688] [Check Window] Default IME[00:00:0688] [Check Window] Default IME[00:00:0688] [Check Window] Default IME[00:00:0688] [Check Window] M[00:00:0703] [Check Window] Default IME[00:00:0703] [Check Window] M[00:00:0703] [Check Window] Default IME[00:00:0703] [Check Window] Default IME[00:00:0703] [Check Window] Default IME[00:00:0703] [Check Window] Default IME[00:00:0703] [Check Window] Default IME[00:00:0719] [Check Window] Default IME[00:00:0719] [Check Window] Default IME[00:00:0719] [Check Window] Default IME[00:00:0719] [Check Window] Default IME[00:00:0719] [Check Window] Default IME[00:00:0719] [Check Window] Default IME[00:00:0719] [Check Window] Default IME[00:00:0734] [Check Window] Default IME[00:00:0734] [Check Window] Default IME[00:00:0734] [Check Window] M[00:00:0734] [Check Window] Default IME[00:00:0734] [Check Window] Default IME[00:00:0734] [Check Window] Default IME[00:00:0734] [Check Window] Default IME[00:00:0734] [Check Window] Default IME[00:00:0734] [Check Window] Default IME[00:00:0750] [Check Window] Default IME[00:00:0750] [Check Window] Default IME[00:00:0750] [Check Window] Default IME[00:00:0750] [Check Window] Default IME[00:00:0750] [Check Window] Default IME[00:00:0750] [Check Window] M[00:00:0750] [Check Window] Default IME[00:00:0750] [Check Window] Default IME[00:00:0750] [Check Window] M[00:00:0766] [Check Window] Default IME[00:00:0766] [Check Window] M[00:00:0766] [Check Window] Default IME[00:00:0766] [Check Window] M[00:00:0766] [Check Window] Default IME[00:00:0766] [Check Window] M[00:00:0766] [Check Window] Default IME[00:00:0781] [Check Processes] Service PID : 920I did not receive any invitations nor suggestions for fixes.Once this file was on my desk...RogueKiller is not existing anymore. Gone. Now how may get reliefe with these popups which seems to be initiaded ny yieldmanager & cie.many thanks for your help.Regards Link to post Share on other sites More sharing options...
MrCharlie Posted September 19, 2012 ID:598876 Share Posted September 19, 2012 It didn't work or run properly >> please do this instead:Please download AdwCleaner from here and save it on your Desktop. Right-click on adwcleaner.exe and select Run As Administrator to launch the application.Now click on the Search tab.Please post the contents of the log-file created in your next post.Note: The log can also be located at C:\ >> AdwCleaner[XX].txt >> XX <-- Denotes the number of times the application has been ran, so in this should be something like R1.MrC Link to post Share on other sites More sharing options...
Viggo Posted September 19, 2012 Author ID:598888 Share Posted September 19, 2012 It didn't work or run properly >> please do this instead:Please download AdwCleaner from here and save it on your Desktop.Right-click on adwcleaner.exe and select Run As Administrator to launch the application.Now click on the Search tab.Please post the contents of the log-file created in your next post.Note: The log can also be located at C:\ >> AdwCleaner[XX].txt >> XX <-- Denotes the number of times the application has been ran, so in this should be something like R1.MrCI downloaded AdwCleaner. Clicked on the exe file and selected as suggested Run as administrator.Did not start and I got the message:: No password etc. I never did fix a password ony this computer. I am the only person using it. How to run it ? As user ?Regards Link to post Share on other sites More sharing options...
MrCharlie Posted September 19, 2012 ID:598892 Share Posted September 19, 2012 Run it anyway that works, MrC Link to post Share on other sites More sharing options...
Viggo Posted September 19, 2012 Author ID:598896 Share Posted September 19, 2012 Run it anyway that works, MrCRun it anyway that works, MrCOK I just runed it, asked search and that's what I got:# AdwCleaner v2.002 - Rapport créé le 19/09/2012 à 19:03:57# Mis à jour le 16/09/2012 par Xplode# Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits)# Nom d'utilisateur : Pieter Wenk - VIGGO# Mode de démarrage : Normal# Exécuté depuis : C:\Documents and Settings\Pieter Wenk\Mes documents\Backup_Forum\adwcleaner.exe# Option [Recherche]***** [services] ********** [Fichiers / Dossiers] *****Dossier Présent : C:\Documents and Settings\All Users\Application Data\BabylonDossier Présent : C:\Documents and Settings\Pieter Wenk\AppData\LocalLow\bbrs_002.tbDossier Présent : C:\Documents and Settings\Pieter Wenk\Application Data\BabylonDossier Présent : C:\Documents and Settings\Pieter Wenk\Application Data\Mozilla\Firefox\Profiles\jj1p94pu.default\extensions\bbrs_002@blabbers.comDossier Présent : C:\Documents and Settings\Pieter Wenk\Application Data\Mozilla\Firefox\Profiles\jj1p94pu.default\extensions\ffxtlbr@babylon.comDossier Présent : C:\Documents and Settings\Pieter Wenk\Local Settings\Application Data\BabylonDossier Présent : C:\Program Files\BabylonToolbarDossier Présent : C:\Program Files\BrowserCompanionDossier Présent : C:\Program Files\FunWebProductsDossier Présent : C:\Program Files\MyWebSearchFichier Présent : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xmlFichier Présent : C:\user.js***** [Registre] *****Clé Présente : HKCU\Software\BabylonToolbarClé Présente : HKCU\Software\BrowserCompanionClé Présente : HKCU\Software\FunWebProductsClé Présente : HKCU\Software\Microsoft\Internet Explorer\MenuExt\&SearchClé Présente : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF6-072E-44CF-8957-5838F569A31D}Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EAB-A523-4961-B6BB-170DE4475CCA}Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{963B125B-8B21-49A2-A3A8-E37092276531}Clé Présente : HKCU\Software\MyWebSearchClé Présente : HKCU\Software\pdfforge.orgClé Présente : HKLM\Software\BabylonClé Présente : HKLM\Software\BabylonToolbarClé Présente : HKLM\Software\BrowserCompanionClé Présente : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}Clé Présente : HKLM\SOFTWARE\Classes\AppID\{20EDC024-43C5-423E-B7F5-FD93523E0D9F}Clé Présente : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}Clé Présente : HKLM\SOFTWARE\Classes\AppID\{373ED12D-B306-43AC-9485-A7C5133DC34C}Clé Présente : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}Clé Présente : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}Clé Présente : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}Clé Présente : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}Clé Présente : HKLM\SOFTWARE\Classes\AppID\{ED6535E7-F778-48A5-A060-549D30024511}Clé Présente : HKLM\SOFTWARE\Classes\AppID\escort.DLLClé Présente : HKLM\SOFTWARE\Classes\AppID\escortApp.DLLClé Présente : HKLM\SOFTWARE\Classes\AppID\escortEng.DLLClé Présente : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLLClé Présente : HKLM\SOFTWARE\Classes\AppID\esrv.EXEClé Présente : HKLM\SOFTWARE\Classes\AppID\tdataprotocol.DLLClé Présente : HKLM\SOFTWARE\Classes\AppID\updatebho.DLLClé Présente : HKLM\SOFTWARE\Classes\AppID\wit4ie.DLLClé Présente : HKLM\SOFTWARE\Classes\bClé Présente : HKLM\SOFTWARE\Classes\Babylon.dskBndClé Présente : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1Clé Présente : HKLM\SOFTWARE\Classes\bbylnApp.appCoreClé Présente : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{00A6FAF6-072E-44CF-8957-5838F569A31D}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{00CBB66B-1D3B-46D3-9577-323A336ACB50}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{1E0DE227-5CE4-4EA3-AB0C-8B03E1AA76BC}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{25560540-9571-4D7B-9389-0F166788785A}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{5ACE96C0-C70A-4A4D-AF14-2E7B869345E1}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{7473D292-B7BB-4F24-AE82-7E2CE94BB6A9}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{7473D294-B7BB-4F24-AE82-7E2CE94BB6A9}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{7473D296-B7BB-4F24-AE82-7E2CE94BB6A9}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{84DA4FDF-A1CF-4195-8688-3E961F505983}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{963B125B-8B21-49A2-A3A8-E37092276531}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{98D9753D-D73B-42D5-8C85-4469CDA897AB}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{A9571378-68A1-443D-B082-284F960C6D17}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}Clé Présente : HKLM\SOFTWARE\Classes\escort.escortIEPaneClé Présente : HKLM\SOFTWARE\Classes\escort.escortIEPane.1Clé Présente : HKLM\SOFTWARE\Classes\escort.escrtBtn.1Clé Présente : HKLM\SOFTWARE\Classes\esrv.BabylonESrvcClé Présente : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1Clé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.DataControlClé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.DataControl.1Clé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.HistoryKillerSchedulerClé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.HistoryKillerScheduler.1Clé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.HistorySwatterControlBarClé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.HistorySwatterControlBar.1Clé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.HTMLMenuClé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.HTMLMenu.1Clé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.HTMLMenu.2Clé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.IECookiesManagerClé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.IECookiesManager.1Clé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.KillerObjManagerClé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.KillerObjManager.1Clé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.PopSwatterBarButtonClé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.PopSwatterBarButton.1Clé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.PopSwatterSettingsControlClé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.PopSwatterSettingsControl.1Clé Présente : HKLM\SOFTWARE\Classes\Interface\{07B18EAC-A523-4961-B6BB-170DE4475CCA}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{1093995A-BA37-41D2-836E-091067C4AD17}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{120927BF-1700-43BC-810F-FAB92549B390}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{1F52A5FA-A705-4415-B975-88503B291728}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{247A115F-06C2-4FB3-967D-2D62D3CF4F0A}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{2E3537FC-CF2F-4F56-AF54-5A6A3DD375CC}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{3E53E2CB-86DB-4A4A-8BD9-FFEB7A64DF82}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{3E720451-B472-4954-B7AA-33069EB53906}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{3E720453-B472-4954-B7AA-33069EB53906}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{63D0ED2B-B45B-4458-8B3B-60C69BBBD83C}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{63D0ED2D-B45B-4458-8B3B-60C69BBBD83C}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{6E74766C-4D93-4CC0-96D1-47B8E07FF9CA}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{741DE825-A6F0-4497-9AA6-8023CF9B0FFF}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{7473D291-B7BB-4F24-AE82-7E2CE94BB6A9}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{7473D293-B7BB-4F24-AE82-7E2CE94BB6A9}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{7473D295-B7BB-4F24-AE82-7E2CE94BB6A9}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{7473D297-B7BB-4F24-AE82-7E2CE94BB6A9}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{817923CB-4744-4216-B250-CF7EDA8F1767}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{90449521-D834-4703-BB4E-D3AA44042FF8}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{991AAC62-B100-47CE-8B75-253965244F69}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{9F0C17EB-EF2C-4278-9136-2D547656BC03}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{BBABDC90-F3D5-4801-863A-EE6AE529862D}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{D6FF3684-AD3B-48EB-BBB4-B9E6C5A355C1}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{DE38C398-B328-4F4C-A3AD-1B5E4ED93477}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25E}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25F}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}Clé Présente : HKLM\SOFTWARE\Classes\Interface\{EB9E5C1C-B1F9-4C2B-BE8A-27D6446FDAF8}Clé Présente : HKLM\SOFTWARE\Classes\MyWebSearch.HTMLPanelClé Présente : HKLM\SOFTWARE\Classes\MyWebSearch.HTMLPanel.1Clé Présente : HKLM\SOFTWARE\Classes\MyWebSearch.OutlookAddinClé Présente : HKLM\SOFTWARE\Classes\MyWebSearch.OutlookAddin.1Clé Présente : HKLM\SOFTWARE\Classes\MyWebSearch.PseudoTransparentPluginClé Présente : HKLM\SOFTWARE\Classes\MyWebSearch.PseudoTransparentPlugin.1Clé Présente : HKLM\SOFTWARE\Classes\MyWebSearchToolBar.SettingsPluginClé Présente : HKLM\SOFTWARE\Classes\MyWebSearchToolBar.SettingsPlugin.1Clé Présente : HKLM\SOFTWARE\Classes\MyWebSearchToolBar.ToolbarPluginClé Présente : HKLM\SOFTWARE\Classes\MyWebSearchToolBar.ToolbarPlugin.1Clé Présente : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\base64Clé Présente : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\chromeClé Présente : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\proxClé Présente : HKLM\SOFTWARE\Classes\ScreenSaverControl.ScreenSaverInstallerClé Présente : HKLM\SOFTWARE\Classes\ScreenSaverControl.ScreenSaverInstaller.1Clé Présente : HKLM\SOFTWARE\Classes\tdataprotocol.CTDataClé Présente : HKLM\SOFTWARE\Classes\tdataprotocol.CTData.1Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A}Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554}Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906}Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9}Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{830B56CB-FD22-44AA-9887-7898F4F4158D}Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{8830DDF0-3042-404D-A62C-384A85E34833}Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{8CA01F0E-987C-49C3-B852-2F1AC4A7094C}Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14}Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{955B782E-CDC8-4CEE-B6F6-AD7D541A8D8A}Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{C8CECDE3-1AE1-4C4A-AD82-6D5B00212144}Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D}Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{F42228FB-E84E-479E-B922-FBBD096E792C}Clé Présente : HKLM\SOFTWARE\Classes\updatebho.TimerBHOClé Présente : HKLM\SOFTWARE\Classes\updatebho.TimerBHO.1Clé Présente : HKLM\SOFTWARE\Classes\wit4ie.WitBHOClé Présente : HKLM\SOFTWARE\Classes\wit4ie.WitBHO.2Clé Présente : HKLM\Software\FocusInteractiveClé Présente : HKLM\Software\Fun Web ProductsClé Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}Clé Présente : HKLM\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pssClé Présente : HKLM\SOFTWARE\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddinClé Présente : HKLM\SOFTWARE\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddinClé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BabylonToolbarClé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BrowserCompanionClé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\mywebsearch bar uninstallClé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00CBB66B-1D3B-46D3-9577-323A336ACB50}Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{963B125B-8B21-49A2-A3A8-E37092276531}Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbarClé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BrowserCompanionClé Présente : HKLM\Software\MyWebSearchClé Présente : HKLM\Software\pdfforge.orgClé Présente : HKLM\SOFTWARE\SoftwareClé Présente : HKU\S-1-5-21-3578607322-2379885239-3417506529-1005\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}Valeur Présente : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{00A6FAF6-072E-44CF-8957-5838F569A31D}]Valeur Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [MyWebSearch Email Plugin]Valeur Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]Valeur Présente : HKLM\SOFTWARE\Microsoft\Windows Media\Wmsdk\Sources [F3PopularScreenSavers]Valeur Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\post platform [FunWebProducts]Valeur Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [browser companion helper]***** [Navigateurs] *****-\\ Internet Explorer v8.0.6001.18702[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.babylon.com/?babsrc=HP_ss&affID=101388&mntrId=3498bd3300000000000000d041b1db8b[HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://search.babylon.com/?babsrc=NT_ss&affID=101388&mntrId=3498bd3300000000000000d041b1db8b-\\ Mozilla Firefox v15.0.1 (fr)Nom du profil : defaultFichier : C:\Documents and Settings\Pieter Wenk\Application Data\Mozilla\Firefox\Profiles\jj1p94pu.default\prefs.jsPrésente : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");Présente : user_pref("extensions.BabylonToolbar_i.babExt", "");Présente : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=101388");Présente : user_pref("extensions.BabylonToolbar_i.hardId", "3498bd3300000000000000d041b1db8b");Présente : user_pref("extensions.BabylonToolbar_i.id", "3498bd3300000000000000d041b1db8b");Présente : user_pref("extensions.BabylonToolbar_i.instlDay", "15420");Présente : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");Présente : user_pref("extensions.BabylonToolbar_i.newTab", false);Présente : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");Présente : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");Présente : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");Présente : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");Présente : user_pref("extensions.BabylonToolbar_i.tlbrId", "base");Présente : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");Présente : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1720:43:56");Présente : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");-\\ Google Chrome v21.0.1180.89Fichier : C:\Documents and Settings\Pieter Wenk\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences[OK] Le fichier ne contient aucune entrée illégitime.*************************AdwCleaner[R1].txt - [19239 octets] - [19/09/2012 19:03:57]########## EOF - C:\AdwCleaner[R1].txt - [19300 octets] ##########BTW: I always use Firefox always the latest versions. Never I.E. many thanks for your helpRegards Link to post Share on other sites More sharing options...
MrCharlie Posted September 19, 2012 ID:598903 Share Posted September 19, 2012 Please re-run AdwCleanerClick on Delete button.Confirm each time with OK.Your computer will be rebooted automatically. A text file will open after the restart. Please post the content of that logfile in your reply.Note: You can find the logfile at C:\AdwCleaner[sn].txt as well - n is the order number.MrC Link to post Share on other sites More sharing options...
Viggo Posted September 19, 2012 Author ID:598913 Share Posted September 19, 2012 Please re-run AdwCleanerClick on Delete button.Confirm each time with OK.Your computer will be rebooted automatically. A text file will open after the restart. Please post the content of that logfile in your reply.Note: You can find the logfile at C:\AdwCleaner[sn].txt as well - n is the order number.MrCOK. In fact I have not closed AdwCleaner. I just have minimised the window. I just have to restore it.It shows of course the option: Supression ...but what is it going to supress ?My worry: Does Windows load again correctly once I hit supression ? Many thanks for your helpRegards Link to post Share on other sites More sharing options...
MrCharlie Posted September 19, 2012 ID:598919 Share Posted September 19, 2012 OK, I'm not sure what language that's in, but you want to click the middle box which is "Delete" in English"It's going to delete all that's listed in the log.If you're concerned about it...Please create a new system restore point before hitting the delete button.MrC Link to post Share on other sites More sharing options...
Viggo Posted September 19, 2012 Author ID:598923 Share Posted September 19, 2012 OK, I'm not sure what language that's in, but you want to click the middle box which is "Delete" in English"It's going to delete all that's listed in the log.If you're concerned about it...Please create a new system restore point before hitting the delete button.MrCOK, I'm not sure what language that's in, but you want to click the middle box which is "Delete" in English"It's going to delete all that's listed in the log.If you're concerned about it...Please create a new system restore point before hitting the delete button.MrCIt's in french. Delete = suppression.I have ghost which is regularily making backups... but without Windows is loading it's not easy to restore.Now does Windows load again once I have deleted all what's in the log.file ? yes/ no Best regards Link to post Share on other sites More sharing options...
MrCharlie Posted September 19, 2012 ID:598926 Share Posted September 19, 2012 Yes it will, MrC Link to post Share on other sites More sharing options...
Viggo Posted September 19, 2012 Author ID:598943 Share Posted September 19, 2012 Yes it will, MrCOK. It's done.Below the report of delet:# AdwCleaner v2.002 - Rapport créé le 19/09/2012 à 20:52:35# Mis à jour le 16/09/2012 par Xplode# Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits)# Nom d'utilisateur : Pieter Wenk - VIGGO# Mode de démarrage : Normal# Exécuté depuis : C:\Documents and Settings\Pieter Wenk\Mes documents\Backup_Forum\adwcleaner.exe# Option [suppression]***** [services] ********** [Fichiers / Dossiers] *****Dossier Supprimé : C:\Documents and Settings\All Users\Application Data\BabylonDossier Supprimé : C:\Documents and Settings\Pieter Wenk\AppData\LocalLow\bbrs_002.tbDossier Supprimé : C:\Documents and Settings\Pieter Wenk\Application Data\BabylonDossier Supprimé : C:\Documents and Settings\Pieter Wenk\Application Data\Mozilla\Firefox\Profiles\jj1p94pu.default\extensions\bbrs_002@blabbers.comDossier Supprimé : C:\Documents and Settings\Pieter Wenk\Application Data\Mozilla\Firefox\Profiles\jj1p94pu.default\extensions\ffxtlbr@babylon.comDossier Supprimé : C:\Documents and Settings\Pieter Wenk\Local Settings\Application Data\BabylonDossier Supprimé : C:\Program Files\BabylonToolbarDossier Supprimé : C:\Program Files\FunWebProductsFichier Supprimé : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xmlFichier Supprimé : C:\user.jsSupprimé au redémarrage : C:\Program Files\BrowserCompanionSupprimé au redémarrage : C:\Program Files\MyWebSearch***** [Registre] *****Clé Supprimée : HKCU\Software\BabylonToolbarClé Supprimée : HKCU\Software\BrowserCompanionClé Supprimée : HKCU\Software\FunWebProductsClé Supprimée : HKCU\Software\Microsoft\Internet Explorer\MenuExt\&SearchClé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF6-072E-44CF-8957-5838F569A31D}Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EAB-A523-4961-B6BB-170DE4475CCA}Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{963B125B-8B21-49A2-A3A8-E37092276531}Clé Supprimée : HKCU\Software\MyWebSearchClé Supprimée : HKCU\Software\pdfforge.orgClé Supprimée : HKLM\Software\BabylonClé Supprimée : HKLM\Software\BabylonToolbarClé Supprimée : HKLM\Software\BrowserCompanionClé Supprimée : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{20EDC024-43C5-423E-B7F5-FD93523E0D9F}Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{373ED12D-B306-43AC-9485-A7C5133DC34C}Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{ED6535E7-F778-48A5-A060-549D30024511}Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escort.DLLClé Supprimée : HKLM\SOFTWARE\Classes\AppID\escortApp.DLLClé Supprimée : HKLM\SOFTWARE\Classes\AppID\escortEng.DLLClé Supprimée : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLLClé Supprimée : HKLM\SOFTWARE\Classes\AppID\esrv.EXEClé Supprimée : HKLM\SOFTWARE\Classes\AppID\tdataprotocol.DLLClé Supprimée : HKLM\SOFTWARE\Classes\AppID\updatebho.DLLClé Supprimée : HKLM\SOFTWARE\Classes\AppID\wit4ie.DLLClé Supprimée : HKLM\SOFTWARE\Classes\bClé Supprimée : HKLM\SOFTWARE\Classes\Babylon.dskBndClé Supprimée : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1Clé Supprimée : HKLM\SOFTWARE\Classes\bbylnApp.appCoreClé Supprimée : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{00A6FAF6-072E-44CF-8957-5838F569A31D}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{00CBB66B-1D3B-46D3-9577-323A336ACB50}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{1E0DE227-5CE4-4EA3-AB0C-8B03E1AA76BC}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{25560540-9571-4D7B-9389-0F166788785A}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{5ACE96C0-C70A-4A4D-AF14-2E7B869345E1}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{7473D292-B7BB-4F24-AE82-7E2CE94BB6A9}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{7473D294-B7BB-4F24-AE82-7E2CE94BB6A9}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{7473D296-B7BB-4F24-AE82-7E2CE94BB6A9}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{84DA4FDF-A1CF-4195-8688-3E961F505983}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{963B125B-8B21-49A2-A3A8-E37092276531}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{98D9753D-D73B-42D5-8C85-4469CDA897AB}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A9571378-68A1-443D-B082-284F960C6D17}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}Clé Supprimée : HKLM\SOFTWARE\Classes\escort.escortIEPaneClé Supprimée : HKLM\SOFTWARE\Classes\escort.escortIEPane.1Clé Supprimée : HKLM\SOFTWARE\Classes\escort.escrtBtn.1Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.BabylonESrvcClé Supprimée : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1Clé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.DataControlClé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.DataControl.1Clé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.HistoryKillerSchedulerClé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.HistoryKillerScheduler.1Clé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.HistorySwatterControlBarClé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.HistorySwatterControlBar.1Clé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.HTMLMenuClé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.HTMLMenu.1Clé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.HTMLMenu.2Clé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.IECookiesManagerClé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.IECookiesManager.1Clé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.KillerObjManagerClé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.KillerObjManager.1Clé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.PopSwatterBarButtonClé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.PopSwatterBarButton.1Clé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.PopSwatterSettingsControlClé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.PopSwatterSettingsControl.1Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{07B18EAC-A523-4961-B6BB-170DE4475CCA}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1093995A-BA37-41D2-836E-091067C4AD17}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{120927BF-1700-43BC-810F-FAB92549B390}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1F52A5FA-A705-4415-B975-88503B291728}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{247A115F-06C2-4FB3-967D-2D62D3CF4F0A}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2E3537FC-CF2F-4F56-AF54-5A6A3DD375CC}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3E53E2CB-86DB-4A4A-8BD9-FFEB7A64DF82}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3E720451-B472-4954-B7AA-33069EB53906}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3E720453-B472-4954-B7AA-33069EB53906}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{63D0ED2B-B45B-4458-8B3B-60C69BBBD83C}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{63D0ED2D-B45B-4458-8B3B-60C69BBBD83C}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{6E74766C-4D93-4CC0-96D1-47B8E07FF9CA}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{741DE825-A6F0-4497-9AA6-8023CF9B0FFF}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{7473D291-B7BB-4F24-AE82-7E2CE94BB6A9}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{7473D293-B7BB-4F24-AE82-7E2CE94BB6A9}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{7473D295-B7BB-4F24-AE82-7E2CE94BB6A9}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{7473D297-B7BB-4F24-AE82-7E2CE94BB6A9}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{817923CB-4744-4216-B250-CF7EDA8F1767}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{90449521-D834-4703-BB4E-D3AA44042FF8}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{991AAC62-B100-47CE-8B75-253965244F69}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{9F0C17EB-EF2C-4278-9136-2D547656BC03}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{BBABDC90-F3D5-4801-863A-EE6AE529862D}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D6FF3684-AD3B-48EB-BBB4-B9E6C5A355C1}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DE38C398-B328-4F4C-A3AD-1B5E4ED93477}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25E}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25F}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EB9E5C1C-B1F9-4C2B-BE8A-27D6446FDAF8}Clé Supprimée : HKLM\SOFTWARE\Classes\MyWebSearch.HTMLPanelClé Supprimée : HKLM\SOFTWARE\Classes\MyWebSearch.HTMLPanel.1Clé Supprimée : HKLM\SOFTWARE\Classes\MyWebSearch.OutlookAddinClé Supprimée : HKLM\SOFTWARE\Classes\MyWebSearch.OutlookAddin.1Clé Supprimée : HKLM\SOFTWARE\Classes\MyWebSearch.PseudoTransparentPluginClé Supprimée : HKLM\SOFTWARE\Classes\MyWebSearch.PseudoTransparentPlugin.1Clé Supprimée : HKLM\SOFTWARE\Classes\MyWebSearchToolBar.SettingsPluginClé Supprimée : HKLM\SOFTWARE\Classes\MyWebSearchToolBar.SettingsPlugin.1Clé Supprimée : HKLM\SOFTWARE\Classes\MyWebSearchToolBar.ToolbarPluginClé Supprimée : HKLM\SOFTWARE\Classes\MyWebSearchToolBar.ToolbarPlugin.1Clé Supprimée : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\base64Clé Supprimée : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\chromeClé Supprimée : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\proxClé Supprimée : HKLM\SOFTWARE\Classes\ScreenSaverControl.ScreenSaverInstallerClé Supprimée : HKLM\SOFTWARE\Classes\ScreenSaverControl.ScreenSaverInstaller.1Clé Supprimée : HKLM\SOFTWARE\Classes\tdataprotocol.CTDataClé Supprimée : HKLM\SOFTWARE\Classes\tdataprotocol.CTData.1Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A}Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554}Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906}Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9}Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{830B56CB-FD22-44AA-9887-7898F4F4158D}Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{8830DDF0-3042-404D-A62C-384A85E34833}Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{8CA01F0E-987C-49C3-B852-2F1AC4A7094C}Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14}Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{955B782E-CDC8-4CEE-B6F6-AD7D541A8D8A}Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{C8CECDE3-1AE1-4C4A-AD82-6D5B00212144}Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D}Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{F42228FB-E84E-479E-B922-FBBD096E792C}Clé Supprimée : HKLM\SOFTWARE\Classes\updatebho.TimerBHOClé Supprimée : HKLM\SOFTWARE\Classes\updatebho.TimerBHO.1Clé Supprimée : HKLM\SOFTWARE\Classes\wit4ie.WitBHOClé Supprimée : HKLM\SOFTWARE\Classes\wit4ie.WitBHO.2Clé Supprimée : HKLM\Software\FocusInteractiveClé Supprimée : HKLM\Software\Fun Web ProductsClé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}Clé Supprimée : HKLM\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pssClé Supprimée : HKLM\SOFTWARE\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddinClé Supprimée : HKLM\SOFTWARE\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddinClé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BabylonToolbarClé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BrowserCompanionClé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\mywebsearch bar uninstallClé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00CBB66B-1D3B-46D3-9577-323A336ACB50}Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{963B125B-8B21-49A2-A3A8-E37092276531}Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbarClé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BrowserCompanionClé Supprimée : HKLM\Software\MyWebSearchClé Supprimée : HKLM\Software\pdfforge.orgClé Supprimée : HKLM\SOFTWARE\SoftwareValeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{00A6FAF6-072E-44CF-8957-5838F569A31D}]Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [MyWebSearch Email Plugin]Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows Media\Wmsdk\Sources [F3PopularScreenSavers]Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\post platform [FunWebProducts]Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [browser companion helper]***** [Navigateurs] *****-\\ Internet Explorer v8.0.6001.18702Restauré : [HKCU\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]Restauré : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes - DefaultScope]Restauré : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]Restauré : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]Restauré : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.babylon.com/?babsrc=HP_ss&affID=101388&mntrId=3498bd3300000000000000d041b1db8b --> hxxp://www.google.comRemplacé : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://search.babylon.com/?babsrc=NT_ss&affID=101388&mntrId=3498bd3300000000000000d041b1db8b --> hxxp://www.google.com-\\ Mozilla Firefox v15.0.1 (fr)Nom du profil : defaultFichier : C:\Documents and Settings\Pieter Wenk\Application Data\Mozilla\Firefox\Profiles\jj1p94pu.default\prefs.jsC:\Documents and Settings\Pieter Wenk\Application Data\Mozilla\Firefox\Profiles\jj1p94pu.default\user.js ... Supprimé !Supprimée : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");Supprimée : user_pref("extensions.BabylonToolbar_i.babExt", "");Supprimée : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=101388");Supprimée : user_pref("extensions.BabylonToolbar_i.hardId", "3498bd3300000000000000d041b1db8b");Supprimée : user_pref("extensions.BabylonToolbar_i.id", "3498bd3300000000000000d041b1db8b");Supprimée : user_pref("extensions.BabylonToolbar_i.instlDay", "15420");Supprimée : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");Supprimée : user_pref("extensions.BabylonToolbar_i.newTab", false);Supprimée : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");Supprimée : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");Supprimée : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");Supprimée : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");Supprimée : user_pref("extensions.BabylonToolbar_i.tlbrId", "base");Supprimée : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");Supprimée : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1720:43:56");Supprimée : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");-\\ Google Chrome v21.0.1180.89Fichier : C:\Documents and Settings\Pieter Wenk\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences[OK] Le fichier ne contient aucune entrée illégitime.*************************AdwCleaner[R1].txt - [19370 octets] - [19/09/2012 19:03:57]AdwCleaner[s1].txt - [20027 octets] - [19/09/2012 20:52:35]########## EOF - C:\AdwCleaner[s1].txt - [20088 octets] ##########And now I hope I should not get again these anoying pop ups. It seems, that you made a short visit on my site: www.b-a-r-f.com which has as might have seen also a support forum with above 5000 members. In fact, these pop ups I got ONLY when connected on my site. It happened more or less without let's say system.It could happen when opening a topic in porder to answer, or when registering etc.The site is on a dedicated server running under Linux Debian/Apache. My technical asministator is possibly one of the best french Linux/Apache professional. He published a large number of articles in the french Linux magazine. I did of course ask him, if on the server it might be possible,that a non desired..hm customer did put a malware (link etc)which could trigger these kind of pop ups ?He doubt that this might be possible. The server has of course a well configurated firewall, anti spam and virus protection.If you have an idea, where he migjht have to have a look, many thanks to let me know.Many thanksRegards Link to post Share on other sites More sharing options...
MrCharlie Posted September 20, 2012 ID:599231 Share Posted September 20, 2012 Looks Good.....Please Update and run a Quick Scan with MBAM, post the report.Make sure that everything is checked, and click Remove Selected.Please let me know how computer is running now, MrC Link to post Share on other sites More sharing options...
Viggo Posted September 21, 2012 Author ID:599582 Share Posted September 21, 2012 Looks Good.....Please Update and run a Quick Scan with MBAM, post the report.Make sure that everything is checked, and click Remove Selected.Please let me know how computer is running now, MrCOK. It seems to work. Since now more than 24 hours non pop up did show up. I guess it worked.The promotors of yieldmanager & Cie I heared are companies such as yahoo. This is close to what i understand irresponsable.Many thanks for this great help.Best regards Link to post Share on other sites More sharing options...
MrCharlie Posted September 21, 2012 ID:599611 Share Posted September 21, 2012 Great Lets check your computers security before you go and we have a little cleanup to do also:Download Security Check by screen317 from HERE or HERE.Save it to your Desktop.Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.A Notepad document should open automatically called checkup.txt; please post the contents of that document.MrC Link to post Share on other sites More sharing options...
MrCharlie Posted September 23, 2012 ID:600244 Share Posted September 23, 2012 How are we doing??Do you still need help or can I close this post??MrC Link to post Share on other sites More sharing options...
Maurice Naggar Posted September 24, 2012 ID:600721 Share Posted September 24, 2012 Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts