Jump to content

yieldmanager, pop ups


Viggo
 Share

Recommended Posts

Hello,

Since a week I am getting pop ups I guess are generated by yieldmanager ( cookie ? ) and so far, I have not succeded get red of them.

I am using Malwarebytes 1.65.0.1400 and actually it's of course active and should normally block attempts.

I installed it 3 days ago, have made the recommended scan and malwarebytes has detected quite a few entries and removed them by sending them in the quarantaine sector.

I thought these pop ups would never show up again...but sadly it's going on.

I am using Firefox, always latest versions and did of course block cookies such as from:

ad.adserverplus.com

ad.doubleclick.net

ad.yieldmanager.net

ad.yieldmanager.txt

yieldmanager.edgesuite.net

yieldmanager.egdgesuite.com

etc.

which are linked to this issue. At least, when these pop ups are showing up, these links are visible.

Many thanks for your help in order to solve this problem.

Berst regard

Link to post
Share on other sites

Welcome to the forum, please start at the link below:

http://forums.malwar...?showtopic=9573

Post back the 2 logs here.....DDS.txt and Attach.txt

<====><====><====><====><====><====><====><====>

Next.......

Please remove any usb or external drives from the computer before you run this scan!

Quit all running programs.

Please download and run RogueKiller to your desktop.

For Windows XP, double-click to start.

For Vista or Windows 7, do a right-click on the program, select Run as Administrator to start, & when prompted Allow to run.

Click Scan to scan the system.

When the scan completes > Close out the program > Don't Fix anything!

Don't run any other options, they're not all bad!!!!!!!

Post back the report which should be located on your desktop.

MrC

Link to post
Share on other sites

BTW: I have downloaded RgueKiller, registred the download...and hit the exe.file. :D

My Norton Firewall informed me: This application is of recent publication and the savety is not

verfied.

I guess it's save running it ? Right ?

It did of course stop automatically to run it. I will have to stop for a while the Firewall.

Regards

Link to post
Share on other sites

OK I did run RogueKiller. I just had to disactivate for a short moment the firewall.

I have Windows XP Professional, which is always automatically updated. To run RogueKiller, it just started to do something ( no idea what), when clicking on RogueKiller.exe.

After a while it just put on the desk a file with the name: RK-Quarantaine including a sort of a report you can see below:

[00:00:0000] ***** Global Init *****

[00:00:0000] Has crashed before : Yes

[00:00:0000] Create mutex : RogueKiller

[00:00:0000] Mutex Created : 0xa8

[00:00:0000] Fill lists

[00:00:0000] OS Language : French

[00:00:0016] Take Privileges

[00:00:0016] Modify Token

[00:00:0016] Set priority to HIGH

[00:00:0016] Getting Operating System

[00:00:0016] Os Getted : Windows XP (5.1.2600 Service Pack 3) 32 bits version

[00:00:0031] ***** Global Init OK *****

[00:00:0031] ***** GUI Init *****

[00:00:0031] Get build number

[00:00:0031] build number : RogueKiller (par Tigzy) -- v8.0.4

[00:00:0219] ***** GUI Init OK *****

[00:00:0234] ***** PreScan *****

[00:00:0234] Clear ListViews

[00:00:0234] Clear Objects

[00:00:0250] Enum Windows

[00:00:0328] [Check Window] Eula - Please read

[00:00:0328] [Check Window] Debug log sending

[00:00:0328] [Check Window] TF_FloatingLangBar_WndTitle

[00:00:0328] [Check Window] CiceroUIWndFrame

[00:00:0328] [Check Window] SysFader

[00:00:0328] [Check Window] yieldmanager, pop ups - Malwarebytes Forum

[00:00:0328] [Check Window] Menu Démarrer

[00:00:0328] [Check Window] External link

[00:00:0344] [Check Window] Ouvrir un nouvel onglet

[00:00:0344] [Check Window] Détails du compte utilisateur de Sylva Geffroy à Le site de l'alimentation à base de viande crue pour chiens, chats et furets. BARF et RAW FEEDING.

[00:00:0344] [Check Window] Fermer l'onglet

[00:00:0344] [Check Window] Envoyer le message maintenant

[00:00:0344] [Check Window] NokiaOviSuite

[00:00:0344] [Check Window] NokiaOviSuite

[00:00:0344] [Check Window] NokiaOviSuite

[00:00:0359] [Check Window] NokiaOviSuite

[00:00:0359] [Check Window] NokiaOviSuite

[00:00:0359] [Check Window] NokiaOviSuite

[00:00:0359] [Check Window] NokiaOviSuite

[00:00:0359] [Check Window] NokiaOviSuite

[00:00:0359] [Check Window] NokiaOviSuite

[00:00:0359] [Check Window] NokiaOviSuite

[00:00:0375] [Check Window] NokiaOviSuite

[00:00:0375] [Check Window] NokiaOviSuite

[00:00:0375] [Check Window] NokiaOviSuite

[00:00:0375] [Check Window] NokiaOviSuite

[00:00:0375] [Check Window] NokiaOviSuite

[00:00:0375] [Check Window] NokiaOviSuite

[00:00:0375] [Check Window] NokiaOviSuite

[00:00:0391] [Check Window] NokiaOviSuite

[00:00:0391] [Check Window] NokiaOviSuite

[00:00:0391] [Check Window] NokiaOviSuite

[00:00:0391] [Check Window] NokiaOviSuite

[00:00:0391] [Check Window] NokiaOviSuite

[00:00:0391] [Check Window] NokiaOviSuite

[00:00:0391] [Check Window] NokiaOviSuite

[00:00:0406] [Check Window] NokiaOviSuite

[00:00:0406] [Check Window] NokiaOviSuite

[00:00:0406] [Check Window] NokiaOviSuite

[00:00:0406] [Check Window] NokiaOviSuite

[00:00:0406] [Check Window] NokiaOviSuite

[00:00:0406] [Check Window] NokiaOviSuite

[00:00:0406] [Check Window] NokiaOviSuite

[00:00:0422] [Check Window] NokiaOviSuite

[00:00:0422] [Check Window] Backup_Forum

[00:00:0422] [Check Window] RogueKiller (par Tigzy) -- v8.0.4

[00:00:0422] [Check Window] MP_Message_bienvenue.txt - Bloc-notes

[00:00:0422] [Check Window] Rédaction : (pas de sujet)

[00:00:0422] [Check Window] MCI command handling window

[00:00:0422] [Check Window] DDE Server Window

[00:00:0438] [Check Window] nsAppShell:EventWindow

[00:00:0438] [Check Window] MCI command handling window

[00:00:0438] [Check Window] nsAppShell:EventWindow

[00:00:0438] [Check Window] SerLa

[00:00:0438] [Check Window] Aucune connexion Internet.

[00:00:0438] [Check Window] Licence

[00:00:0453] [Check Window] ActiveMovie Window

[00:00:0453] [Check Window] FWSesAlWndTitle

[00:00:0453] [Check Window] SYM_AVPAPP_WINDOW_NAME_{1BE293D4-E7AD-4314-B8C9-C088A7CC1E69}

[00:00:0453] [Check Window] Volume Notification Hidden Window

[00:00:0453] [Check Window] Annuler l'ajout de contenus ?

[00:00:0453] [Check Window] Skype™ [4] - viggo561

[00:00:0453] [Check Window] MCI command handling window

[00:00:0469] [Check Window] DeviceManager

[00:00:0469] [Check Window] Nokia Ovi Suite 3.0.0.284

[00:00:0469] [Check Window] DDE Server Window

[00:00:0469] [Check Window] NokiaOviSuite

[00:00:0469] [Check Window] NokiaOviSuite

[00:00:0469] [Check Window] DDE Server Window

[00:00:0469] [Check Window] C:\Documents and Settings\Pieter Wenk\Application Data\Skype

[00:00:0469] [Check Window] GDI+ Window

[00:00:0469] [Check Window] RTCMediaMessageWindow

[00:00:0484] [Check Window] CRTCMediaController

[00:00:0484] [Check Window] CUccPlatform

[00:00:0484] [Check Window] KHALHIDC_MainWindow

[00:00:0484] [Check Window] KHALHIDC_MainWindow

[00:00:0484] [Check Window] KHALHIDC_MainWindow

[00:00:0484] [Check Window] KHALMOU_MainWindow

[00:00:0484] [Check Window] KHALHIDN_MainWindow

[00:00:0484] [Check Window] KHALHIDC_MainWindow

[00:00:0484] [Check Window] KHALHIDM_MainWindow

[00:00:0484] [Check Window] KHALUSB_MainWindow

[00:00:0500] [Check Window] KHALHPP_MainWindow

[00:00:0500] [Check Window] KHALITouch_MainWindow

[00:00:0500] [Check Window] KHALMouseware_MainWindow

[00:00:0500] [Check Window] KHALMainProcessWindow

[00:00:0500] [Check Window] Setpoint Gaming Notification Window

[00:00:0500] [Check Window] GPGOE

[00:00:0516] [Check Window] Logitech Desktop Messenger Agent

[00:00:0516] [Check Window] DDE Server Window

[00:00:0516] [Check Window] WinAMRestoreWnd

[00:00:0516] [Check Window] _GD_Crawl

[00:00:0516] [Check Window] BCHelperService

[00:00:0516] [Check Window] ccSvcHst

[00:00:0516] [Check Window] HelperMsgListenerWnd

[00:00:0531] [Check Window] NVSVCPMMWindowClass

[00:00:0531] [Check Window] NokiaMServer

[00:00:0531] [Check Window] iTouchWin

[00:00:0531] [Check Window] Dell Media Experience

[00:00:0531] [Check Window] DVDSentry

[00:00:0531] [Check Window] Connections Tray

[00:00:0547] [Check Window] Creative Diagnostics Agent

[00:00:0547] [Check Window] Malwarebytes Anti-Malware

[00:00:0547] [Check Window] Jauge d'énergie

[00:00:0547] [Check Window] MS_WebcheckMonitor

[00:00:0547] [Check Window] BCM V.92 56K Modem Monitor

[00:00:0547] [Check Window] dlbk POR Monitor

[00:00:0547] [Check Window] LEXLMPM

[00:00:0563] [Check Window]

[00:00:0563] [Check Window] LexPPS BCE Comm Window

[00:00:0563] [Check Window] GDI+ Window

[00:00:0563] [Check Window] GDI+ Window

[00:00:0563] [Check Window] _form_Tray

[00:00:0563] [Check Window] Swisscom Quick Help

[00:00:0578] [Check Window] Swisscom Quick Help

[00:00:0578] [Check Window] GDI+ Window

[00:00:0578] [Check Window] Sans titre - Bloc-notes

[00:00:0578] [Check Window] Courrier entrant - barfwenkpieter - Mozilla Thunderbird

[00:00:0578] [Check Window] Téléchargements

[00:00:0578] [Check Window] yieldmanager, pop ups - Malwarebytes Forum - Mozilla Firefox

[00:00:0594] [Check Window] Program Manager

[00:00:0594] [Check Window] M

[00:00:0594] [Check Window] Default IME

[00:00:0594] [Check Window] M

[00:00:0594] [Check Window] Default IME

[00:00:0594] [Check Window] Default IME

[00:00:0609] [Check Window] Mefault IME

[00:00:0609] [Check Window] Default IME

[00:00:0609] [Check Window] M

[00:00:0609] [Check Window] Default IME

[00:00:0609] [Check Window] M

[00:00:0609] [Check Window] Default IME

[00:00:0609] [Check Window] Default IME

[00:00:0625] [Check Window] Default IME

[00:00:0625] [Check Window] Default IME

[00:00:0625] [Check Window] Default IME

[00:00:0625] [Check Window] Default IME

[00:00:0625] [Check Window] Default IME

[00:00:0625] [Check Window] Default IME

[00:00:0641] [Check Window] Default IME

[00:00:0641] [Check Window] Default IME

[00:00:0641] [Check Window] Default IME

[00:00:0641] [Check Window] Default IME

[00:00:0641] [Check Window] Default IME

[00:00:0641] [Check Window] Default IME

[00:00:0641] [Check Window] M

[00:00:0656] [Check Window] Default IME

[00:00:0656] [Check Window] Default IME

[00:00:0656] [Check Window] Default IME

[00:00:0656] [Check Window] Default IME

[00:00:0656] [Check Window] Default IME

[00:00:0656] [Check Window] Default IME

[00:00:0656] [Check Window] Default IME

[00:00:0672] [Check Window] Default IME

[00:00:0672] [Check Window] Default IME

[00:00:0672] [Check Window] Default IME

[00:00:0672] [Check Window] Default IME

[00:00:0672] [Check Window] Default IME

[00:00:0672] [Check Window] Default IME

[00:00:0688] [Check Window] Default IME

[00:00:0688] [Check Window] Default IME

[00:00:0688] [Check Window] Default IME

[00:00:0688] [Check Window] Default IME

[00:00:0688] [Check Window] Default IME

[00:00:0688] [Check Window] Default IME

[00:00:0688] [Check Window] M

[00:00:0703] [Check Window] Default IME

[00:00:0703] [Check Window] M

[00:00:0703] [Check Window] Default IME

[00:00:0703] [Check Window] Default IME

[00:00:0703] [Check Window] Default IME

[00:00:0703] [Check Window] Default IME

[00:00:0703] [Check Window] Default IME

[00:00:0719] [Check Window] Default IME

[00:00:0719] [Check Window] Default IME

[00:00:0719] [Check Window] Default IME

[00:00:0719] [Check Window] Default IME

[00:00:0719] [Check Window] Default IME

[00:00:0719] [Check Window] Default IME

[00:00:0719] [Check Window] Default IME

[00:00:0734] [Check Window] Default IME

[00:00:0734] [Check Window] Default IME

[00:00:0734] [Check Window] M

[00:00:0734] [Check Window] Default IME

[00:00:0734] [Check Window] Default IME

[00:00:0734] [Check Window] Default IME

[00:00:0734] [Check Window] Default IME

[00:00:0734] [Check Window] Default IME

[00:00:0734] [Check Window] Default IME

[00:00:0750] [Check Window] Default IME

[00:00:0750] [Check Window] Default IME

[00:00:0750] [Check Window] Default IME

[00:00:0750] [Check Window] Default IME

[00:00:0750] [Check Window] Default IME

[00:00:0750] [Check Window] M

[00:00:0750] [Check Window] Default IME

[00:00:0750] [Check Window] Default IME

[00:00:0750] [Check Window] M

[00:00:0766] [Check Window] Default IME

[00:00:0766] [Check Window] M

[00:00:0766] [Check Window] Default IME

[00:00:0766] [Check Window] M

[00:00:0766] [Check Window] Default IME

[00:00:0766] [Check Window] M

[00:00:0766] [Check Window] Default IME

[00:00:0781] [Check Processes] Service PID : 920

I did not receive any invitations nor suggestions for fixes.

Once this file was on my desk...RogueKiller is not existing anymore. Gone. :mellow:

Now how may get reliefe with these popups which seems to be initiaded ny yieldmanager & cie.

many thanks for your help.

Regards

Link to post
Share on other sites

It didn't work or run properly >> please do this instead:

Please download AdwCleaner from here and save it on your Desktop.

  1. Right-click on adwcleaner.exe and select Run As Administrator to launch the application.
  2. Now click on the Search tab.
  3. Please post the contents of the log-file created in your next post.

Note: The log can also be located at C:\ >> AdwCleaner[XX].txt >> XX <-- Denotes the number of times the application has been ran, so in this should be something like R1.

MrC

Link to post
Share on other sites

It didn't work or run properly >> please do this instead:

Please download AdwCleaner from here and save it on your Desktop.

  1. Right-click on adwcleaner.exe and select Run As Administrator to launch the application.
  2. Now click on the Search tab.
  3. Please post the contents of the log-file created in your next post.

Note: The log can also be located at C:\ >> AdwCleaner[XX].txt >> XX <-- Denotes the number of times the application has been ran, so in this should be something like R1.

MrC

I downloaded AdwCleaner. Clicked on the exe file and selected as suggested Run as administrator.

Did not start and I got the message:: No password etc.

I never did fix a password ony this computer. I am the only person using it. :D

How to run it ? As user ?

Regards

Link to post
Share on other sites

Run it anyway that works, MrC

Run it anyway that works, MrC

OK I just runed it, asked search and that's what I got:

# AdwCleaner v2.002 - Rapport créé le 19/09/2012 à 19:03:57

# Mis à jour le 16/09/2012 par Xplode

# Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits)

# Nom d'utilisateur : Pieter Wenk - VIGGO

# Mode de démarrage : Normal

# Exécuté depuis : C:\Documents and Settings\Pieter Wenk\Mes documents\Backup_Forum\adwcleaner.exe

# Option [Recherche]

***** [services] *****

***** [Fichiers / Dossiers] *****

Dossier Présent : C:\Documents and Settings\All Users\Application Data\Babylon

Dossier Présent : C:\Documents and Settings\Pieter Wenk\AppData\LocalLow\bbrs_002.tb

Dossier Présent : C:\Documents and Settings\Pieter Wenk\Application Data\Babylon

Dossier Présent : C:\Documents and Settings\Pieter Wenk\Application Data\Mozilla\Firefox\Profiles\jj1p94pu.default\extensions\bbrs_002@blabbers.com

Dossier Présent : C:\Documents and Settings\Pieter Wenk\Application Data\Mozilla\Firefox\Profiles\jj1p94pu.default\extensions\ffxtlbr@babylon.com

Dossier Présent : C:\Documents and Settings\Pieter Wenk\Local Settings\Application Data\Babylon

Dossier Présent : C:\Program Files\BabylonToolbar

Dossier Présent : C:\Program Files\BrowserCompanion

Dossier Présent : C:\Program Files\FunWebProducts

Dossier Présent : C:\Program Files\MyWebSearch

Fichier Présent : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml

Fichier Présent : C:\user.js

***** [Registre] *****

Clé Présente : HKCU\Software\BabylonToolbar

Clé Présente : HKCU\Software\BrowserCompanion

Clé Présente : HKCU\Software\FunWebProducts

Clé Présente : HKCU\Software\Microsoft\Internet Explorer\MenuExt\&Search

Clé Présente : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF6-072E-44CF-8957-5838F569A31D}

Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EAB-A523-4961-B6BB-170DE4475CCA}

Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}

Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{963B125B-8B21-49A2-A3A8-E37092276531}

Clé Présente : HKCU\Software\MyWebSearch

Clé Présente : HKCU\Software\pdfforge.org

Clé Présente : HKLM\Software\Babylon

Clé Présente : HKLM\Software\BabylonToolbar

Clé Présente : HKLM\Software\BrowserCompanion

Clé Présente : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}

Clé Présente : HKLM\SOFTWARE\Classes\AppID\{20EDC024-43C5-423E-B7F5-FD93523E0D9F}

Clé Présente : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}

Clé Présente : HKLM\SOFTWARE\Classes\AppID\{373ED12D-B306-43AC-9485-A7C5133DC34C}

Clé Présente : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

Clé Présente : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}

Clé Présente : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}

Clé Présente : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Clé Présente : HKLM\SOFTWARE\Classes\AppID\{ED6535E7-F778-48A5-A060-549D30024511}

Clé Présente : HKLM\SOFTWARE\Classes\AppID\escort.DLL

Clé Présente : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL

Clé Présente : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL

Clé Présente : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL

Clé Présente : HKLM\SOFTWARE\Classes\AppID\esrv.EXE

Clé Présente : HKLM\SOFTWARE\Classes\AppID\tdataprotocol.DLL

Clé Présente : HKLM\SOFTWARE\Classes\AppID\updatebho.DLL

Clé Présente : HKLM\SOFTWARE\Classes\AppID\wit4ie.DLL

Clé Présente : HKLM\SOFTWARE\Classes\b

Clé Présente : HKLM\SOFTWARE\Classes\Babylon.dskBnd

Clé Présente : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1

Clé Présente : HKLM\SOFTWARE\Classes\bbylnApp.appCore

Clé Présente : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{00A6FAF6-072E-44CF-8957-5838F569A31D}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{00CBB66B-1D3B-46D3-9577-323A336ACB50}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{1E0DE227-5CE4-4EA3-AB0C-8B03E1AA76BC}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{25560540-9571-4D7B-9389-0F166788785A}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{5ACE96C0-C70A-4A4D-AF14-2E7B869345E1}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{7473D292-B7BB-4F24-AE82-7E2CE94BB6A9}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{7473D294-B7BB-4F24-AE82-7E2CE94BB6A9}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{7473D296-B7BB-4F24-AE82-7E2CE94BB6A9}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{84DA4FDF-A1CF-4195-8688-3E961F505983}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{963B125B-8B21-49A2-A3A8-E37092276531}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{98D9753D-D73B-42D5-8C85-4469CDA897AB}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{A9571378-68A1-443D-B082-284F960C6D17}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}

Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}

Clé Présente : HKLM\SOFTWARE\Classes\escort.escortIEPane

Clé Présente : HKLM\SOFTWARE\Classes\escort.escortIEPane.1

Clé Présente : HKLM\SOFTWARE\Classes\escort.escrtBtn.1

Clé Présente : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc

Clé Présente : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1

Clé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.DataControl

Clé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.DataControl.1

Clé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.HistoryKillerScheduler

Clé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.HistoryKillerScheduler.1

Clé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.HistorySwatterControlBar

Clé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.HistorySwatterControlBar.1

Clé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.HTMLMenu

Clé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.HTMLMenu.1

Clé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.HTMLMenu.2

Clé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.IECookiesManager

Clé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.IECookiesManager.1

Clé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.KillerObjManager

Clé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.KillerObjManager.1

Clé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.PopSwatterBarButton

Clé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.PopSwatterBarButton.1

Clé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.PopSwatterSettingsControl

Clé Présente : HKLM\SOFTWARE\Classes\FunWebProducts.PopSwatterSettingsControl.1

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{07B18EAC-A523-4961-B6BB-170DE4475CCA}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{1093995A-BA37-41D2-836E-091067C4AD17}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{120927BF-1700-43BC-810F-FAB92549B390}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{1F52A5FA-A705-4415-B975-88503B291728}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{247A115F-06C2-4FB3-967D-2D62D3CF4F0A}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{2E3537FC-CF2F-4F56-AF54-5A6A3DD375CC}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{3E53E2CB-86DB-4A4A-8BD9-FFEB7A64DF82}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{3E720451-B472-4954-B7AA-33069EB53906}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{3E720453-B472-4954-B7AA-33069EB53906}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{63D0ED2B-B45B-4458-8B3B-60C69BBBD83C}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{63D0ED2D-B45B-4458-8B3B-60C69BBBD83C}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{6E74766C-4D93-4CC0-96D1-47B8E07FF9CA}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{741DE825-A6F0-4497-9AA6-8023CF9B0FFF}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{7473D291-B7BB-4F24-AE82-7E2CE94BB6A9}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{7473D293-B7BB-4F24-AE82-7E2CE94BB6A9}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{7473D295-B7BB-4F24-AE82-7E2CE94BB6A9}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{7473D297-B7BB-4F24-AE82-7E2CE94BB6A9}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{817923CB-4744-4216-B250-CF7EDA8F1767}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{90449521-D834-4703-BB4E-D3AA44042FF8}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{991AAC62-B100-47CE-8B75-253965244F69}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{9F0C17EB-EF2C-4278-9136-2D547656BC03}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{BBABDC90-F3D5-4801-863A-EE6AE529862D}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{D6FF3684-AD3B-48EB-BBB4-B9E6C5A355C1}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{DE38C398-B328-4F4C-A3AD-1B5E4ED93477}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25E}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25F}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}

Clé Présente : HKLM\SOFTWARE\Classes\Interface\{EB9E5C1C-B1F9-4C2B-BE8A-27D6446FDAF8}

Clé Présente : HKLM\SOFTWARE\Classes\MyWebSearch.HTMLPanel

Clé Présente : HKLM\SOFTWARE\Classes\MyWebSearch.HTMLPanel.1

Clé Présente : HKLM\SOFTWARE\Classes\MyWebSearch.OutlookAddin

Clé Présente : HKLM\SOFTWARE\Classes\MyWebSearch.OutlookAddin.1

Clé Présente : HKLM\SOFTWARE\Classes\MyWebSearch.PseudoTransparentPlugin

Clé Présente : HKLM\SOFTWARE\Classes\MyWebSearch.PseudoTransparentPlugin.1

Clé Présente : HKLM\SOFTWARE\Classes\MyWebSearchToolBar.SettingsPlugin

Clé Présente : HKLM\SOFTWARE\Classes\MyWebSearchToolBar.SettingsPlugin.1

Clé Présente : HKLM\SOFTWARE\Classes\MyWebSearchToolBar.ToolbarPlugin

Clé Présente : HKLM\SOFTWARE\Classes\MyWebSearchToolBar.ToolbarPlugin.1

Clé Présente : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\base64

Clé Présente : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\chrome

Clé Présente : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\prox

Clé Présente : HKLM\SOFTWARE\Classes\ScreenSaverControl.ScreenSaverInstaller

Clé Présente : HKLM\SOFTWARE\Classes\ScreenSaverControl.ScreenSaverInstaller.1

Clé Présente : HKLM\SOFTWARE\Classes\tdataprotocol.CTData

Clé Présente : HKLM\SOFTWARE\Classes\tdataprotocol.CTData.1

Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A}

Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554}

Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}

Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906}

Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}

Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9}

Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{830B56CB-FD22-44AA-9887-7898F4F4158D}

Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{8830DDF0-3042-404D-A62C-384A85E34833}

Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{8CA01F0E-987C-49C3-B852-2F1AC4A7094C}

Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14}

Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{955B782E-CDC8-4CEE-B6F6-AD7D541A8D8A}

Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{C8CECDE3-1AE1-4C4A-AD82-6D5B00212144}

Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D}

Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{F42228FB-E84E-479E-B922-FBBD096E792C}

Clé Présente : HKLM\SOFTWARE\Classes\updatebho.TimerBHO

Clé Présente : HKLM\SOFTWARE\Classes\updatebho.TimerBHO.1

Clé Présente : HKLM\SOFTWARE\Classes\wit4ie.WitBHO

Clé Présente : HKLM\SOFTWARE\Classes\wit4ie.WitBHO.2

Clé Présente : HKLM\Software\FocusInteractive

Clé Présente : HKLM\Software\Fun Web Products

Clé Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}

Clé Présente : HKLM\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss

Clé Présente : HKLM\SOFTWARE\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin

Clé Présente : HKLM\SOFTWARE\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin

Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BabylonToolbar

Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BrowserCompanion

Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\mywebsearch bar uninstall

Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00CBB66B-1D3B-46D3-9577-323A336ACB50}

Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}

Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{963B125B-8B21-49A2-A3A8-E37092276531}

Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar

Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BrowserCompanion

Clé Présente : HKLM\Software\MyWebSearch

Clé Présente : HKLM\Software\pdfforge.org

Clé Présente : HKLM\SOFTWARE\Software

Clé Présente : HKU\S-1-5-21-3578607322-2379885239-3417506529-1005\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

Valeur Présente : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{00A6FAF6-072E-44CF-8957-5838F569A31D}]

Valeur Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [MyWebSearch Email Plugin]

Valeur Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]

Valeur Présente : HKLM\SOFTWARE\Microsoft\Windows Media\Wmsdk\Sources [F3PopularScreenSavers]

Valeur Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\post platform [FunWebProducts]

Valeur Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [browser companion helper]

***** [Navigateurs] *****

-\\ Internet Explorer v8.0.6001.18702

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.babylon.com/?babsrc=HP_ss&affID=101388&mntrId=3498bd3300000000000000d041b1db8b

[HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://search.babylon.com/?babsrc=NT_ss&affID=101388&mntrId=3498bd3300000000000000d041b1db8b

-\\ Mozilla Firefox v15.0.1 (fr)

Nom du profil : default

Fichier : C:\Documents and Settings\Pieter Wenk\Application Data\Mozilla\Firefox\Profiles\jj1p94pu.default\prefs.js

Présente : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");

Présente : user_pref("extensions.BabylonToolbar_i.babExt", "");

Présente : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=101388");

Présente : user_pref("extensions.BabylonToolbar_i.hardId", "3498bd3300000000000000d041b1db8b");

Présente : user_pref("extensions.BabylonToolbar_i.id", "3498bd3300000000000000d041b1db8b");

Présente : user_pref("extensions.BabylonToolbar_i.instlDay", "15420");

Présente : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");

Présente : user_pref("extensions.BabylonToolbar_i.newTab", false);

Présente : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");

Présente : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");

Présente : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");

Présente : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");

Présente : user_pref("extensions.BabylonToolbar_i.tlbrId", "base");

Présente : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");

Présente : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1720:43:56");

Présente : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");

-\\ Google Chrome v21.0.1180.89

Fichier : C:\Documents and Settings\Pieter Wenk\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

[OK] Le fichier ne contient aucune entrée illégitime.

*************************

AdwCleaner[R1].txt - [19239 octets] - [19/09/2012 19:03:57]

########## EOF - C:\AdwCleaner[R1].txt - [19300 octets] ##########

BTW: I always use Firefox always the latest versions. Never I.E. :D

many thanks for your help

Regards

Link to post
Share on other sites

  1. Please re-run AdwCleaner
  2. Click on Delete button.
  3. Confirm each time with OK.
  4. Your computer will be rebooted automatically. A text file will open after the restart. Please post the content of that logfile in your reply.

Note: You can find the logfile at C:\AdwCleaner[sn].txt as well - n is the order number.

MrC

Link to post
Share on other sites

  1. Please re-run AdwCleaner
  2. Click on Delete button.
  3. Confirm each time with OK.
  4. Your computer will be rebooted automatically. A text file will open after the restart. Please post the content of that logfile in your reply.

Note: You can find the logfile at C:\AdwCleaner[sn].txt as well - n is the order number.

MrC

OK. In fact I have not closed AdwCleaner. I just have minimised the window. I just have to restore it.

It shows of course the option: Supression :D ...but what is it going to supress ?

My worry: Does Windows load again correctly once I hit supression ? :unsure:

Many thanks for your help

Regards

Link to post
Share on other sites

OK, I'm not sure what language that's in, but you want to click the middle box which is "Delete" in English"

It's going to delete all that's listed in the log.

If you're concerned about it...

Please create a new system restore point before hitting the delete button.

MrC

OK, I'm not sure what language that's in, but you want to click the middle box which is "Delete" in English"

It's going to delete all that's listed in the log.

If you're concerned about it...

Please create a new system restore point before hitting the delete button.

MrC

It's in french. :D Delete = suppression.

I have ghost which is regularily making backups... but without Windows is loading it's not easy to restore.

Now does Windows load again once I have deleted all what's in the log.file ? yes/ no :D

Best regards

Link to post
Share on other sites

Yes it will, MrC

OK. It's done.

Below the report of delet:

# AdwCleaner v2.002 - Rapport créé le 19/09/2012 à 20:52:35

# Mis à jour le 16/09/2012 par Xplode

# Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits)

# Nom d'utilisateur : Pieter Wenk - VIGGO

# Mode de démarrage : Normal

# Exécuté depuis : C:\Documents and Settings\Pieter Wenk\Mes documents\Backup_Forum\adwcleaner.exe

# Option [suppression]

***** [services] *****

***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\Documents and Settings\All Users\Application Data\Babylon

Dossier Supprimé : C:\Documents and Settings\Pieter Wenk\AppData\LocalLow\bbrs_002.tb

Dossier Supprimé : C:\Documents and Settings\Pieter Wenk\Application Data\Babylon

Dossier Supprimé : C:\Documents and Settings\Pieter Wenk\Application Data\Mozilla\Firefox\Profiles\jj1p94pu.default\extensions\bbrs_002@blabbers.com

Dossier Supprimé : C:\Documents and Settings\Pieter Wenk\Application Data\Mozilla\Firefox\Profiles\jj1p94pu.default\extensions\ffxtlbr@babylon.com

Dossier Supprimé : C:\Documents and Settings\Pieter Wenk\Local Settings\Application Data\Babylon

Dossier Supprimé : C:\Program Files\BabylonToolbar

Dossier Supprimé : C:\Program Files\FunWebProducts

Fichier Supprimé : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml

Fichier Supprimé : C:\user.js

Supprimé au redémarrage : C:\Program Files\BrowserCompanion

Supprimé au redémarrage : C:\Program Files\MyWebSearch

***** [Registre] *****

Clé Supprimée : HKCU\Software\BabylonToolbar

Clé Supprimée : HKCU\Software\BrowserCompanion

Clé Supprimée : HKCU\Software\FunWebProducts

Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\MenuExt\&Search

Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF6-072E-44CF-8957-5838F569A31D}

Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EAB-A523-4961-B6BB-170DE4475CCA}

Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}

Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{963B125B-8B21-49A2-A3A8-E37092276531}

Clé Supprimée : HKCU\Software\MyWebSearch

Clé Supprimée : HKCU\Software\pdfforge.org

Clé Supprimée : HKLM\Software\Babylon

Clé Supprimée : HKLM\Software\BabylonToolbar

Clé Supprimée : HKLM\Software\BrowserCompanion

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{20EDC024-43C5-423E-B7F5-FD93523E0D9F}

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{373ED12D-B306-43AC-9485-A7C5133DC34C}

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{ED6535E7-F778-48A5-A060-549D30024511}

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escort.DLL

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\esrv.EXE

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\tdataprotocol.DLL

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\updatebho.DLL

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\wit4ie.DLL

Clé Supprimée : HKLM\SOFTWARE\Classes\b

Clé Supprimée : HKLM\SOFTWARE\Classes\Babylon.dskBnd

Clé Supprimée : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1

Clé Supprimée : HKLM\SOFTWARE\Classes\bbylnApp.appCore

Clé Supprimée : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{00A6FAF6-072E-44CF-8957-5838F569A31D}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{00CBB66B-1D3B-46D3-9577-323A336ACB50}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{1E0DE227-5CE4-4EA3-AB0C-8B03E1AA76BC}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{25560540-9571-4D7B-9389-0F166788785A}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{5ACE96C0-C70A-4A4D-AF14-2E7B869345E1}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{7473D292-B7BB-4F24-AE82-7E2CE94BB6A9}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{7473D294-B7BB-4F24-AE82-7E2CE94BB6A9}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{7473D296-B7BB-4F24-AE82-7E2CE94BB6A9}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{84DA4FDF-A1CF-4195-8688-3E961F505983}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{963B125B-8B21-49A2-A3A8-E37092276531}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{98D9753D-D73B-42D5-8C85-4469CDA897AB}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A9571378-68A1-443D-B082-284F960C6D17}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}

Clé Supprimée : HKLM\SOFTWARE\Classes\escort.escortIEPane

Clé Supprimée : HKLM\SOFTWARE\Classes\escort.escortIEPane.1

Clé Supprimée : HKLM\SOFTWARE\Classes\escort.escrtBtn.1

Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc

Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1

Clé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.DataControl

Clé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.DataControl.1

Clé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.HistoryKillerScheduler

Clé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.HistoryKillerScheduler.1

Clé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.HistorySwatterControlBar

Clé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.HistorySwatterControlBar.1

Clé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.HTMLMenu

Clé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.HTMLMenu.1

Clé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.HTMLMenu.2

Clé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.IECookiesManager

Clé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.IECookiesManager.1

Clé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.KillerObjManager

Clé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.KillerObjManager.1

Clé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.PopSwatterBarButton

Clé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.PopSwatterBarButton.1

Clé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.PopSwatterSettingsControl

Clé Supprimée : HKLM\SOFTWARE\Classes\FunWebProducts.PopSwatterSettingsControl.1

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{07B18EAC-A523-4961-B6BB-170DE4475CCA}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1093995A-BA37-41D2-836E-091067C4AD17}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{120927BF-1700-43BC-810F-FAB92549B390}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1F52A5FA-A705-4415-B975-88503B291728}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{247A115F-06C2-4FB3-967D-2D62D3CF4F0A}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2E3537FC-CF2F-4F56-AF54-5A6A3DD375CC}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3E53E2CB-86DB-4A4A-8BD9-FFEB7A64DF82}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3E720451-B472-4954-B7AA-33069EB53906}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3E720453-B472-4954-B7AA-33069EB53906}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{63D0ED2B-B45B-4458-8B3B-60C69BBBD83C}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{63D0ED2D-B45B-4458-8B3B-60C69BBBD83C}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{6E74766C-4D93-4CC0-96D1-47B8E07FF9CA}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{741DE825-A6F0-4497-9AA6-8023CF9B0FFF}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{7473D291-B7BB-4F24-AE82-7E2CE94BB6A9}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{7473D293-B7BB-4F24-AE82-7E2CE94BB6A9}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{7473D295-B7BB-4F24-AE82-7E2CE94BB6A9}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{7473D297-B7BB-4F24-AE82-7E2CE94BB6A9}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{817923CB-4744-4216-B250-CF7EDA8F1767}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{90449521-D834-4703-BB4E-D3AA44042FF8}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{991AAC62-B100-47CE-8B75-253965244F69}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{9F0C17EB-EF2C-4278-9136-2D547656BC03}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{BBABDC90-F3D5-4801-863A-EE6AE529862D}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D6FF3684-AD3B-48EB-BBB4-B9E6C5A355C1}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DE38C398-B328-4F4C-A3AD-1B5E4ED93477}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25E}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25F}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EB9E5C1C-B1F9-4C2B-BE8A-27D6446FDAF8}

Clé Supprimée : HKLM\SOFTWARE\Classes\MyWebSearch.HTMLPanel

Clé Supprimée : HKLM\SOFTWARE\Classes\MyWebSearch.HTMLPanel.1

Clé Supprimée : HKLM\SOFTWARE\Classes\MyWebSearch.OutlookAddin

Clé Supprimée : HKLM\SOFTWARE\Classes\MyWebSearch.OutlookAddin.1

Clé Supprimée : HKLM\SOFTWARE\Classes\MyWebSearch.PseudoTransparentPlugin

Clé Supprimée : HKLM\SOFTWARE\Classes\MyWebSearch.PseudoTransparentPlugin.1

Clé Supprimée : HKLM\SOFTWARE\Classes\MyWebSearchToolBar.SettingsPlugin

Clé Supprimée : HKLM\SOFTWARE\Classes\MyWebSearchToolBar.SettingsPlugin.1

Clé Supprimée : HKLM\SOFTWARE\Classes\MyWebSearchToolBar.ToolbarPlugin

Clé Supprimée : HKLM\SOFTWARE\Classes\MyWebSearchToolBar.ToolbarPlugin.1

Clé Supprimée : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\base64

Clé Supprimée : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\chrome

Clé Supprimée : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\prox

Clé Supprimée : HKLM\SOFTWARE\Classes\ScreenSaverControl.ScreenSaverInstaller

Clé Supprimée : HKLM\SOFTWARE\Classes\ScreenSaverControl.ScreenSaverInstaller.1

Clé Supprimée : HKLM\SOFTWARE\Classes\tdataprotocol.CTData

Clé Supprimée : HKLM\SOFTWARE\Classes\tdataprotocol.CTData.1

Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A}

Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554}

Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}

Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906}

Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}

Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9}

Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{830B56CB-FD22-44AA-9887-7898F4F4158D}

Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{8830DDF0-3042-404D-A62C-384A85E34833}

Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{8CA01F0E-987C-49C3-B852-2F1AC4A7094C}

Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14}

Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{955B782E-CDC8-4CEE-B6F6-AD7D541A8D8A}

Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{C8CECDE3-1AE1-4C4A-AD82-6D5B00212144}

Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D}

Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{F42228FB-E84E-479E-B922-FBBD096E792C}

Clé Supprimée : HKLM\SOFTWARE\Classes\updatebho.TimerBHO

Clé Supprimée : HKLM\SOFTWARE\Classes\updatebho.TimerBHO.1

Clé Supprimée : HKLM\SOFTWARE\Classes\wit4ie.WitBHO

Clé Supprimée : HKLM\SOFTWARE\Classes\wit4ie.WitBHO.2

Clé Supprimée : HKLM\Software\FocusInteractive

Clé Supprimée : HKLM\Software\Fun Web Products

Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}

Clé Supprimée : HKLM\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss

Clé Supprimée : HKLM\SOFTWARE\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin

Clé Supprimée : HKLM\SOFTWARE\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin

Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BabylonToolbar

Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BrowserCompanion

Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\mywebsearch bar uninstall

Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00CBB66B-1D3B-46D3-9577-323A336ACB50}

Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}

Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{963B125B-8B21-49A2-A3A8-E37092276531}

Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar

Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BrowserCompanion

Clé Supprimée : HKLM\Software\MyWebSearch

Clé Supprimée : HKLM\Software\pdfforge.org

Clé Supprimée : HKLM\SOFTWARE\Software

Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{00A6FAF6-072E-44CF-8957-5838F569A31D}]

Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [MyWebSearch Email Plugin]

Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]

Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows Media\Wmsdk\Sources [F3PopularScreenSavers]

Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\post platform [FunWebProducts]

Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [browser companion helper]

***** [Navigateurs] *****

-\\ Internet Explorer v8.0.6001.18702

Restauré : [HKCU\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]

Restauré : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes - DefaultScope]

Restauré : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]

Restauré : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]

Restauré : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]

Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.babylon.com/?babsrc=HP_ss&affID=101388&mntrId=3498bd3300000000000000d041b1db8b --> hxxp://www.google.com

Remplacé : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://search.babylon.com/?babsrc=NT_ss&affID=101388&mntrId=3498bd3300000000000000d041b1db8b --> hxxp://www.google.com

-\\ Mozilla Firefox v15.0.1 (fr)

Nom du profil : default

Fichier : C:\Documents and Settings\Pieter Wenk\Application Data\Mozilla\Firefox\Profiles\jj1p94pu.default\prefs.js

C:\Documents and Settings\Pieter Wenk\Application Data\Mozilla\Firefox\Profiles\jj1p94pu.default\user.js ... Supprimé !

Supprimée : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");

Supprimée : user_pref("extensions.BabylonToolbar_i.babExt", "");

Supprimée : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=101388");

Supprimée : user_pref("extensions.BabylonToolbar_i.hardId", "3498bd3300000000000000d041b1db8b");

Supprimée : user_pref("extensions.BabylonToolbar_i.id", "3498bd3300000000000000d041b1db8b");

Supprimée : user_pref("extensions.BabylonToolbar_i.instlDay", "15420");

Supprimée : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");

Supprimée : user_pref("extensions.BabylonToolbar_i.newTab", false);

Supprimée : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");

Supprimée : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");

Supprimée : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");

Supprimée : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");

Supprimée : user_pref("extensions.BabylonToolbar_i.tlbrId", "base");

Supprimée : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");

Supprimée : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1720:43:56");

Supprimée : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");

-\\ Google Chrome v21.0.1180.89

Fichier : C:\Documents and Settings\Pieter Wenk\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

[OK] Le fichier ne contient aucune entrée illégitime.

*************************

AdwCleaner[R1].txt - [19370 octets] - [19/09/2012 19:03:57]

AdwCleaner[s1].txt - [20027 octets] - [19/09/2012 20:52:35]

########## EOF - C:\AdwCleaner[s1].txt - [20088 octets] ##########

And now I hope I should not get again these anoying pop ups.

It seems, that you made a short visit on my site: www.b-a-r-f.com which has as might have seen also a support forum with above 5000 members. :D

In fact, these pop ups I got ONLY when connected on my site. It happened more or less without let's say system.

It could happen when opening a topic in porder to answer, or when registering etc.

The site is on a dedicated server running under Linux Debian/Apache. My technical asministator is possibly one of the best french Linux/Apache professional. He published a large number of articles in the french Linux magazine. :D

I did of course ask him, if on the server it might be possible,that a non desired..hm customer did put a malware (link etc)

which could trigger these kind of pop ups ?

He doubt that this might be possible. The server has of course a well configurated firewall, anti spam and virus protection.

If you have an idea, where he migjht have to have a look, many thanks to let me know.

Many thanks

Regards

Link to post
Share on other sites

Looks Good.....

Please Update and run a Quick Scan with MBAM, post the report.

Make sure that everything is checked, and click Remove Selected.

Please let me know how computer is running now, MrC

OK. It seems to work. Since now more than 24 hours non pop up did show up. :D

I guess it worked.

The promotors of yieldmanager & Cie I heared are companies such as yahoo. This is close to what i understand irresponsable.

Many thanks for this great help.

Best regards

Link to post
Share on other sites

Great thumbsup.gif

Lets check your computers security before you go and we have a little cleanup to do also:

Download Security Check by screen317 from HERE or HERE.

  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.

MrC

Link to post
Share on other sites

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.