Security-X

Forum Security-X => Désinfections => Discussion démarrée par: cigale le mai 23, 2012, 09:02:49

Titre: Comment supprimer les pubs promo.vador.com et Boxore - Résolu
Posté par: cigale le mai 23, 2012, 09:02:49
Bonjour,

J'ai un grave problème avec mon PC.
Je l'ai prété à mon neveu ces 3 derniers jours pour qu'il puisse finir son rapport de stage, mais je ne retrouve pas mon PC comme avant.
De plus, je ne peux plus utiliser le PC devant mes enfants, il y a des pages qui s'ouvrent toutes seules sur du porno, la page c'est promo.vador.com
Il y a plein de trucs installés, j'ai remarqué un Boxore Client, je ne sais pas d'où il sort, en tout cas, il ne veut pas se désinstaller.
Il y a Babylon aussi.

Je dois avoir des virus.
J'ai Windows Defender mais il dit rien.

J'ai donc besoin d'aide, parce que je n'y connais rien en informatique. Je ne sais pas comment faire pour stopper ces pubs agacantes.
Titre: Re : Comment supprimer les pubs promo.vador.com et Boxore
Posté par: hyunkel30 le mai 23, 2012, 14:18:31
Bonjour Cigale,

Bienvenu sur Security-X,

Ce sont des adwares, des logiciels publicitaires installé volontairement en tant que sponsors d'autre programmes car toi ou les autres utilisateurs n'ont pas lu les conditions d'utilisations.

On va regarder cela :

Télécharge OTL (http://oldtimer.geekstogo.com/OTL.exe) (de Old Timer) sur ton bureau.
Titre: Re : Comment supprimer les pubs promo.vador.com et Boxore
Posté par: cigale le mai 23, 2012, 16:10:39
hyunkel30, merci, j'ai beaucoup de soucis avec firefox et chrome.
Je suis sous internet explorer là.

voilà les liens
http://pjjoint.malekal.com/files.php?id=20120523_r7k13l5h14z5
http://pjjoint.malekal.com/files.php?id=20120523_w11o1410i13g8

J'espère que je ne me suis pas trompée
Titre: Re : Comment supprimer les pubs promo.vador.com et Boxore
Posté par: hyunkel30 le mai 23, 2012, 19:33:34
Re,

C'est bon pour les rapports ... par contre ton pc est une ferme à adwares ...

Tu n'as pas de protection en place (antivirus), et certaons logiciels ne sont pas à jour, on verra cela en fin de procédure.

On va nettoyer d'abord :

1) Désinstalle les programmes suivant via ta liste des programmes (si présents) :

(Note : si tu ne peux désinstaller certains, passe à la suite)

- Bing Bar (barre d'outil, sauf réelle utilité)

- Complitly (adware : logiciel publicitaire)
- BabylonObjectInstaller (sponsor publicitaire)
- Babylon toolbar on IE (idem)
- Yontoo 1.10.02 (adware)
- RelevantKnowledge (idem)
- Boxore Client (idem)
- 1ClickDownloader (idem)
- 2YourFace 1.0 (idem)
- Conduit Engine (idem)
- Contextual Tool Extrafind (idem)
- OfferBox (idem)
- PlayerPlus (idem)
- PriceGong 2.6.2 (idem)
- PriceGongbar Toolbar (idem)
- SpecialSavings (idem)
- Searchcore Toolbar (idem)
- Funmoods Web Search (idem)
- Updater Service (lié à un adware)


2) Télécharge AdwCleaner (http://general-changelog-team.fr/fr/downloads/viewdownload/20-outils-de-xplode/2-adwcleaner) (de Xplode) sur ton Bureau.

/!\ Désactive tes protections résidentes : antivirus, antispyware ... Déconnecte-toi et ferme toutes les applications en cours (notamment ton navigateur)/!\

Note : le rapport est enregistré sous format ".log", il convient de changer cette extension en ".txt" si tu veux le déposer sur des sites en ligne. S'il n'apparait pas, il se trouve ici : C:\_OTL, sous la forme xxxxxxxx_xxxx.log où x sont la date et l'heure

/!\ Ce script est exclusivement réservé à l'utilisateur actuel du sujet, vous ne devez en aucun cas l'utiliser de votre propre chef sur un autre pc, sous risque d'endommager le système /!\


Titre: Re : Comment supprimer les pubs promo.vador.com et Boxore
Posté par: cigale le mai 23, 2012, 21:05:55
huynkel30,

Il me semble que le PC va mieux.

Je n'ai pas pu désinstaller  Boxore Client, Funmoods Web Search et Updater Service

Voici les rapports.

# AdwCleaner v1.607 - Rapport créé le 23/05/2012 à 20:52:05
# Mis à jour le 23/05/2012 par Xplode
# Système d'exploitation : Windows 7 Professional Service Pack 1 (32 bits)
# Nom d'utilisateur : Cigale - WIN7-PC
# Exécuté depuis : C:\Users\Cigale\Desktop\adwcleaner.exe
# Option [Suppression]


***** [Services] *****

Arrêté & Supprimé : IBUpdaterService
Arrêté & Supprimé : supdate

***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\Users\Cigale\AppData\Local\Babylon
Dossier Supprimé : C:\Users\Cigale\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda
Dossier Supprimé : C:\Users\Cigale\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdloijijlkoblmigdofommgnheckmaki
Dossier Supprimé : C:\Users\Cigale\AppData\Local\Google\Chrome\User Data\Default\Extensions\niapdbllcanepiiimjjndipklodoedlc
Dossier Supprimé : C:\Users\Cigale\AppData\Local\Temp\BabylonToolbar
Dossier Supprimé : C:\Users\Cigale\AppData\LocalLow\BabylonToolbar
Dossier Supprimé : C:\Users\Cigale\AppData\LocalLow\Funmoods
Dossier Supprimé : C:\Users\Cigale\AppData\Roaming\Babylon
Dossier Supprimé : C:\Users\Cigale\AppData\Roaming\cacaoweb
Dossier Supprimé : C:\Users\Cigale\AppData\Roaming\Complitly
Dossier Supprimé : C:\Users\Cigale\AppData\Roaming\OfferBox
Dossier Supprimé : C:\Users\Cigale\AppData\Roaming\Mozilla\Firefox\Profiles\nhxfipqb.default\ConduitCommon
Dossier Supprimé : C:\Users\Cigale\AppData\Roaming\Mozilla\Firefox\Profiles\nhxfipqb.default\extensions\{0c5f997d-f664-4afb-9652-ea7fd92f383d}
Dossier Supprimé : C:\Users\Cigale\AppData\Roaming\Mozilla\Firefox\Profiles\nhxfipqb.default\extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}
Dossier Supprimé : C:\Users\Cigale\AppData\Roaming\Mozilla\Firefox\Profiles\nhxfipqb.default\extensions\cacaoweb@cacaoweb.org
Dossier Supprimé : C:\Users\Cigale\AppData\Roaming\Mozilla\Firefox\Profiles\nhxfipqb.default\extensions\engine@conduit.com
Dossier Supprimé : C:\Users\Cigale\AppData\Roaming\Mozilla\Firefox\Profiles\nhxfipqb.default\extensions\ffxtlbr@babylon.com
Dossier Supprimé : C:\Users\Cigale\AppData\Roaming\Mozilla\Firefox\Profiles\nhxfipqb.default\extensions\ffxtlbr@funmoods.com
Dossier Supprimé : C:\Users\Cigale\AppData\Roaming\Mozilla\Firefox\Profiles\nhxfipqb.default\extensions\staged
Dossier Supprimé : C:\Users\Cigale\AppData\Roaming\Mozilla\Firefox\Profiles\nhxfipqb.default\extensions\toolbar@boounce.com
Dossier Supprimé : C:\ProgramData\Babylon
Dossier Supprimé : C:\ProgramData\IBUpdaterService
Dossier Supprimé : C:\ProgramData\Tarma Installer
Dossier Supprimé : C:\Program Files\Boxore
Dossier Supprimé : C:\Program Files\Conduit
Dossier Supprimé : C:\Program Files\ConduitEngine
Supprimé au redémarrage : C:\Program Files\RelevantKnowledge
Fichier Supprimé : C:\Users\Cigale\AppData\Roaming\Mozilla\Firefox\Profiles\nhxfipqb.default\searchplugins\Conduit.xml
Fichier Supprimé : C:\Users\Cigale\AppData\Roaming\Mozilla\Firefox\Profiles\nhxfipqb.default\searchplugins\Search_Results.xml
Fichier Supprimé : C:\Users\Cigale\Desktop\cacaoweb.exe
Fichier Supprimé : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
Fichier Supprimé : C:\Program Files\Mozilla FireFox\searchplugins\Search_Results.xml

***** [Registre] *****


Clé Supprimée : HKCU\Software\cacaoweb
Clé Supprimée : HKCU\Software\DataMngr
Clé Supprimée : HKCU\Software\Offerbox
Clé Supprimée : HKCU\Software\Softonic
Clé Supprimée : HKCU\Software\AppDataLow\Software\PriceGong
Clé Supprimée : HKCU\Software\AppDataLow\Software\Toolbar
Clé Supprimée : HKLM\SOFTWARE\Babylon
Clé Supprimée : HKLM\SOFTWARE\Boxore
Clé Supprimée : HKLM\SOFTWARE\Offerbox
Clé Supprimée : HKLM\SOFTWARE\Software
Clé Supprimée : HKLM\SOFTWARE\Tarma Installer
Clé Supprimée : HKLM\SOFTWARE\Classes\Conduit.Engine
Clé Supprimée : HKLM\SOFTWARE\Classes\f
Clé Supprimée : HKLM\SOFTWARE\Classes\funmoods.dskBnd
Clé Supprimée : HKLM\SOFTWARE\Classes\funmoods.dskBnd.1
Clé Supprimée : HKLM\SOFTWARE\Classes\funmoods.funmoodsHlpr
Clé Supprimée : HKLM\SOFTWARE\Classes\funmoods.funmoodsHlpr.1
Clé Supprimée : HKLM\SOFTWARE\Classes\funmoodsApp.appCore
Clé Supprimée : HKLM\SOFTWARE\Classes\funmoodsApp.appCore.1
Clé Supprimée : HKLM\SOFTWARE\Classes\Software.OneClickCtrl.8
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.CoreClass
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.CoreClass.1
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.OnDemandCOMClassMachine
Clé Supprimée : HKLM\SOFTWARE\Classes\SoftwareUpdate.OnDemandCOMClassMachine.1.0
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\BHO.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Features\64A6E60055D801F4BB8AC269354B72B8
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Products\64A6E60055D801F4BB8AC269354B72B8
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\1C875DDE39636004CA8CDAEC335B4160
Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\BA086F2D38A8E1A47912955A68B3AD24
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\1C875DDE39636004CA8CDAEC335B4160
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\BA086F2D38A8E1A47912955A68B3AD24
Clé Supprimée : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43
Clé Supprimée : HKLM\SOFTWARE\Classes\MIME\Database\Content Type\application/x-vnd.software.oneclickctrl.8
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\fdloijijlkoblmigdofommgnheckmaki
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{006E6A46-8D55-4F10-BBA8-2C9653B4278B}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Updater Service
Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [cacaoweb]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Boxore Client]

***** [Registre - GUID] *****

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{32451DFC-C23B-4E12-866C-FC7982238504}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{092A2C6B-43EE-4F9F-8F8E-14ED5E11C14B}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{1185823F-F22F-4027-80E5-4F68ACD5DE5E}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{257A6158-1416-4B31-9BF8-29FF49F3814F}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{32451DFC-C23B-4E12-866C-FC7982238504}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{965B9DBE-B104-44AC-950A-8A5F97AFF439}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A9DB719C-7156-415E-B49D-BAD039DE4F13}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{AC5C4189-A8A0-4C9D-8910-C9CEF8360077}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{F03FD9D0-4F2B-497C-8A71-DD41D70B07D9}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{736EF78E-5A04-46F9-893E-EDEC6EA5DF45}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{7A1BCE27-099C-4628-B63A-AEC00C6376B3}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{AF3AFF7C-B9E9-48DD-9002-212B6DEAAC02}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DBE82879-914A-422F-BAE9-2ECC80BE536F}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E12D7149-73EF-45E4-A1E9-99FD7DAE62D3}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F2B184F1-547C-4EE9-BFC4-AC489C7077D9}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{1D085C0A-E4F4-4F66-BDBF-4BE51015BFC3}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1185823F-F22F-4027-80E5-4F68ACD5DE5E}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1185823F-F22F-4027-80E5-4F68ACD5DE5E}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1185823F-F22F-4027-80E5-4F68ACD5DE5E}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{0C5F997D-F664-4AFB-9652-EA7FD92F383D}]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{0C5F997D-F664-4AFB-9652-EA7FD92F383D}]

***** [Navigateurs] *****

-\\ Internet Explorer v9.0.8112.16421

Remplacé : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://start.funmoods.com/?f=1&a=iron2&chnl=iron2&cd=2XzutAtN2Y1L1QzuzytD0EyC0B0AyCzyyE0Azz0A0CtCyC0CtN0D0TzutBtDtCtBtDyDtBtC&cr=824331451 --> hxxp://www.google.fr
Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.babylon.com/home?AF=18508 --> hxxp://www.google.fr
Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Backup.Old.Start Page] = hxxp://search.babylon.com/?affID=110000&babsrc=HP_ss&mntrId=3406c16c00000000000090e6ba694a8a --> hxxp://www.google.fr

-\\ Mozilla Firefox v6.0.2 (fr)

Nom du profil : default
Fichier : C:\Users\Cigale\AppData\Roaming\Mozilla\Firefox\Profiles\nhxfipqb.default\prefs.js

C:\Users\Cigale\AppData\Roaming\Mozilla\Firefox\Profiles\nhxfipqb.default\user.js ... Supprimé !

Supprimée : user_pref("CT2832419..clientLogIsEnabled", false);
Supprimée : user_pref("CT2832419..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Supprimée : user_pref("CT2832419..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Supprimée : user_pref("CT2832419.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Supprimée : user_pref("CT2832419.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Supprimée : user_pref("CT2832419.BrowserCompStateIsOpen_129457033076388140", true);
Supprimée : user_pref("CT2832419.BrowserCompStateIsOpen_129457033079356896", true);
Supprimée : user_pref("CT2832419.BrowserCompStateIsOpen_1330953104000", true);
Supprimée : user_pref("CT2832419.CT2832419", "CT2832419");
Supprimée : user_pref("CT2832419.CurrentServerDate", "23-5-2012");
Supprimée : user_pref("CT2832419.DSChangedManually", false);
Supprimée : user_pref("CT2832419.DSInstall", true);
Supprimée : user_pref("CT2832419.DSProtectChoice", true);
Supprimée : user_pref("CT2832419.DSProtectCount", 5);
Supprimée : user_pref("CT2832419.DialogsAlignMode", "LTR");
Supprimée : user_pref("CT2832419.DialogsGetterLastCheckTime", "Tue May 22 2012 18:05:18 GMT+0200");
Supprimée : user_pref("CT2832419.DownloadReferralCookieData", "");
Supprimée : user_pref("CT2832419.EMailNotifierPollDate", "Wed May 23 2012 20:36:21 GMT+0200");
Supprimée : user_pref("CT2832419.FirstServerDate", "22-5-2012");
Supprimée : user_pref("CT2832419.FirstTime", true);
Supprimée : user_pref("CT2832419.FirstTimeFF3", true);
Supprimée : user_pref("CT2832419.FixPageNotFoundErrors", true);
Supprimée : user_pref("CT2832419.GroupingServerCheckInterval", 1440);
Supprimée : user_pref("CT2832419.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Supprimée : user_pref("CT2832419.HPInstall", false);
Supprimée : user_pref("CT2832419.HasUserGlobalKeys", true);
Supprimée : user_pref("CT2832419.HomePageProtectorEnabled", false);
Supprimée : user_pref("CT2832419.HomepageBeforeUnload", "hxxp://www.searchcore.net/426");
Supprimée : user_pref("CT2832419.Initialize", true);
Supprimée : user_pref("CT2832419.InitializeCommonPrefs", true);
Supprimée : user_pref("CT2832419.InstallationAndCookieDataSentCount", 3);
Supprimée : user_pref("CT2832419.InstallationType", "Unknown");
Supprimée : user_pref("CT2832419.InstalledDate", "Tue May 22 2012 18:05:23 GMT+0200");
Supprimée : user_pref("CT2832419.InvalidateCache", false);
Supprimée : user_pref("CT2832419.IsAlertDBUpdated", true);
Supprimée : user_pref("CT2832419.IsGrouping", false);
Supprimée : user_pref("CT2832419.IsInitSetupIni", true);
Supprimée : user_pref("CT2832419.IsMulticommunity", false);
Supprimée : user_pref("CT2832419.IsOpenThankYouPage", true);
Supprimée : user_pref("CT2832419.IsOpenUninstallPage", true);
Supprimée : user_pref("CT2832419.IsProtectorsInit", true);
Supprimée : user_pref("CT2832419.LanguagePackLastCheckTime", "Wed May 23 2012 20:25:23 GMT+0200");
Supprimée : user_pref("CT2832419.LanguagePackReloadIntervalMM", 1440);
Supprimée : user_pref("CT2832419.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Supprimée : user_pref("CT2832419.LastLogin_3.11.0.3", "Wed May 23 2012 20:25:25 GMT+0200");
Supprimée : user_pref("CT2832419.LatestVersion", "3.13.0.6");
Supprimée : user_pref("CT2832419.Locale", "en");
Supprimée : user_pref("CT2832419.MCDetectTooltipHeight", "83");
Supprimée : user_pref("CT2832419.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Supprimée : user_pref("CT2832419.MCDetectTooltipWidth", "295");
Supprimée : user_pref("CT2832419.MyStuffEnabledAtInstallation", true);
Supprimée : user_pref("CT2832419.OriginalFirstVersion", "3.11.0.3");
Supprimée : user_pref("CT2832419.RadioIsPodcast", false);
Supprimée : user_pref("CT2832419.RadioLastCheckTime", "Wed May 23 2012 20:25:20 GMT+0200");
Supprimée : user_pref("CT2832419.RadioLastUpdateIPServer", "3");
Supprimée : user_pref("CT2832419.RadioLastUpdateServer", "129333474659230000");
Supprimée : user_pref("CT2832419.RadioMediaID", "21524215");
Supprimée : user_pref("CT2832419.RadioMediaType", "Media Player");
Supprimée : user_pref("CT2832419.RadioMenuSelectedID", "EBRadioMenu_CT283241921524215");
Supprimée : user_pref("CT2832419.RadioShrinkedFromSetup", false);
Supprimée : user_pref("CT2832419.RadioStationName", "Radio%20IO%20-%2080s%20New%20Wave%20");
Supprimée : user_pref("CT2832419.RadioStationURL", "hxxp://eradioportal.com/radioio_80s_New_Wave.asx");
Supprimée : user_pref("CT2832419.SHRINK_TOOLBAR", 1);
Supprimée : user_pref("CT2832419.SearchCaption", "PriceGongbar Customized Web Search");
Supprimée : user_pref("CT2832419.SearchEngineBeforeUnload", "PriceGongbar Customized Web Search");
Supprimée : user_pref("CT2832419.SearchFromAddressBarIsInit", true);
Supprimée : user_pref("CT2832419.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT283[...]
Supprimée : user_pref("CT2832419.SearchInNewTabEnabled", true);
Supprimée : user_pref("CT2832419.SearchInNewTabIntervalMM", 1440);
Supprimée : user_pref("CT2832419.SearchInNewTabLastCheckTime", "Wed May 23 2012 20:25:19 GMT+0200");
Supprimée : user_pref("CT2832419.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Supprimée : user_pref("CT2832419.SearchProtectorEnabled", true);
Supprimée : user_pref("CT2832419.SearchProtectorToolbarDisabled", false);
Supprimée : user_pref("CT2832419.SendProtectorDataViaLogin", true);
Supprimée : user_pref("CT2832419.ServiceMapLastCheckTime", "Wed May 23 2012 20:25:21 GMT+0200");
Supprimée : user_pref("CT2832419.SettingsLastCheckTime", "Wed May 23 2012 20:25:19 GMT+0200");
Supprimée : user_pref("CT2832419.SettingsLastUpdate", "1337602565");
Supprimée : user_pref("CT2832419.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT2832419&SearchSource=13");
Supprimée : user_pref("CT2832419.ThirdPartyComponentsInterval", 504);
Supprimée : user_pref("CT2832419.ThirdPartyComponentsLastCheck", "Tue May 22 2012 18:05:11 GMT+0200");
Supprimée : user_pref("CT2832419.ThirdPartyComponentsLastUpdate", "1331805997");
Supprimée : user_pref("CT2832419.ToolbarShrinkedFromSetup", false);
Supprimée : user_pref("CT2832419.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2832419");
Supprimée : user_pref("CT2832419.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Supprimée : user_pref("CT2832419.UserID", "UN00710228442404403");
Supprimée : user_pref("CT2832419.ValidationData_Toolbar", 0);
Supprimée : user_pref("CT2832419.WeatherNetwork", "");
Supprimée : user_pref("CT2832419.WeatherPollDate", "Wed May 23 2012 20:25:21 GMT+0200");
Supprimée : user_pref("CT2832419.WeatherUnit", "C");
Supprimée : user_pref("CT2832419.alertChannelId", "1224481");
Supprimée : user_pref("CT2832419.backendstorage.appbuttondisablenull", "30");
Supprimée : user_pref("CT2832419.backendstorage.cbcountry_000", "4652");
Supprimée : user_pref("CT2832419.backendstorage.cbfirsttime", "547565204D617920323220323031322031383A30363A33332[...]
Supprimée : user_pref("CT2832419.backendstorage.shoppingapp.gk.exipres", "53756E204D617920323720323031322031383A[...]
Supprimée : user_pref("CT2832419.backendstorage.shoppingapp.gk.geolocation", "6672616E6365");
Supprimée : user_pref("CT2832419.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Supprimée : user_pref("CT2832419.globalFirstTimeInfoLastCheckTime", "Tue May 22 2012 18:05:18 GMT+0200");
Supprimée : user_pref("CT2832419.homepageProtectorEnableByLogin", true);
Supprimée : user_pref("CT2832419.initDone", true);
Supprimée : user_pref("CT2832419.isAppTrackingManagerOn", true);
Supprimée : user_pref("CT2832419.isFirstRadioInstallation", false);
Supprimée : user_pref("CT2832419.myStuffEnabled", true);
Supprimée : user_pref("CT2832419.myStuffPublihserMinWidth", 400);
Supprimée : user_pref("CT2832419.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Supprimée : user_pref("CT2832419.myStuffServiceIntervalMM", 1440);
Supprimée : user_pref("CT2832419.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Supprimée : user_pref("CT2832419.navigateToUrlOnSearch", false);
Supprimée : user_pref("CT2832419.revertSettingsEnabled", true);
Supprimée : user_pref("CT2832419.searchProtectorDialogDelayInSec", 10);
Supprimée : user_pref("CT2832419.searchProtectorEnableByLogin", true);
Supprimée : user_pref("CT2832419.testingCtid", "");
Supprimée : user_pref("CT2832419.toolbarAppMetaDataLastCheckTime", "Wed May 23 2012 20:25:22 GMT+0200");
Supprimée : user_pref("CT2832419.toolbarContextMenuLastCheckTime", "Tue May 22 2012 18:05:24 GMT+0200");
Supprimée : user_pref("CT2832419.usagesFlag", 2);
Supprimée : user_pref("CommunityToolbar.ConduitSearchList", "PriceGongbar Customized Web Search");
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2832419/CT2832419[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1224481/1220154/FR", "\"0\"[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2832419", [...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.11[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2832419",[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"67e[...]
Supprimée : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Cigale\\AppData\\Roaming\\Mozilla\\[...]
Supprimée : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.11.0.3");
Supprimée : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.babylon.com/?affID=18173&b[...]
Supprimée : user_pref("CommunityToolbar.ToolbarsList", "CT2832419");
Supprimée : user_pref("CommunityToolbar.ToolbarsList2", "CT2832419");
Supprimée : user_pref("CommunityToolbar.ToolbarsList4", "CT2832419");
Supprimée : user_pref("CommunityToolbar.globalUserId", "d949d9c0-cd9a-44a6-8924-e26d7aba849b");
Supprimée : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Supprimée : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Supprimée : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2832419");
Supprimée : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Tue May 22 2012 18:05:2[...]
Supprimée : user_pref("CommunityToolbar.notifications.alertEnabled", true);
Supprimée : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
Supprimée : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Wed May 23 2012 15:22:51 GMT+020[...]
Supprimée : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Supprimée : user_pref("CommunityToolbar.notifications.locale", "en");
Supprimée : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Supprimée : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Wed May 23 2012 20:25:20 GMT+0200");
Supprimée : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Supprimée : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Supprimée : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Supprimée : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Supprimée : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Supprimée : user_pref("CommunityToolbar.notifications.userId", "59fdc577-fe50-4843-a1fe-02249a5f99af");
Supprimée : user_pref("CommunityToolbar.originalHomepage", "hxxp://www.searchcore.net/426");
Supprimée : user_pref("CommunityToolbar.originalSearchEngine", "Search the web (Babylon)");
Supprimée : user_pref("backup.old.browser.search.defaultenginename", "Search the web (Babylon)");
Supprimée : user_pref("backup.old.browser.search.selectedEngine", "Search the web (Babylon)");
Supprimée : user_pref("backup.old.browser.startup.homepage", "hxxp://search.babylon.com/home?affID=18173");
Supprimée : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Supprimée : user_pref("browser.search.defaultenginename", "Search the web (Babylon)");
Supprimée : user_pref("browser.search.defaultthis.engineName", "PriceGongbar Customized Web Search");
Supprimée : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2832419&Sea[...]
Supprimée : user_pref("browser.search.selectedEngine", "PriceGongbar Customized Web Search");
Supprimée : user_pref("extensions.BabylonToolbar.admin", false);
Supprimée : user_pref("extensions.BabylonToolbar.aflt", "babclient");
Supprimée : user_pref("extensions.BabylonToolbar.babExt", "");
Supprimée : user_pref("extensions.BabylonToolbar.babTrack", "");
Supprimée : user_pref("extensions.BabylonToolbar.bbDpng", 23);
Supprimée : user_pref("extensions.BabylonToolbar.dfltLng", "fr");
Supprimée : user_pref("extensions.BabylonToolbar.dfltSrch", true);
Supprimée : user_pref("extensions.BabylonToolbar.hmpg", true);
Supprimée : user_pref("extensions.BabylonToolbar.id", "3406c16c00000000000090e6ba694a8a");
Supprimée : user_pref("extensions.BabylonToolbar.instlDay", "15482");
Supprimée : user_pref("extensions.BabylonToolbar.instlRef", "std");
Supprimée : user_pref("extensions.BabylonToolbar.keyWordUrl", "hxxp://search.babylon.com/?affID=18173&babsrc=KW_[...]
Supprimée : user_pref("extensions.BabylonToolbar.lastDP", 23);
Supprimée : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.5.3.1718:09:31");
Supprimée : user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "6.0");
Supprimée : user_pref("extensions.BabylonToolbar.newTab", false);
Supprimée : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_bb");
Supprimée : user_pref("extensions.BabylonToolbar.noFFXTlbr", false);
Supprimée : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Supprimée : user_pref("extensions.BabylonToolbar.propectorlck", 76340001);
Supprimée : user_pref("extensions.BabylonToolbar.prtkDS", 1);
Supprimée : user_pref("extensions.BabylonToolbar.prtkHmpg", 0);
Supprimée : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Supprimée : user_pref("extensions.BabylonToolbar.ptch_0717", true);
Supprimée : user_pref("extensions.BabylonToolbar.smplGrp", "none");
Supprimée : user_pref("extensions.BabylonToolbar.srcExt", "");
Supprimée : user_pref("extensions.BabylonToolbar.tlbrId", "base");
Supprimée : user_pref("extensions.BabylonToolbar.vrsn", "1.5.3.17");
Supprimée : user_pref("extensions.BabylonToolbar.vrsnTs", "1.5.3.1718:09:31");
Supprimée : user_pref("extensions.BabylonToolbar.vrsni", "1.5.3.17");
Supprimée : user_pref("extensions.BabylonToolbar_i.aflt", "babclient");
Supprimée : user_pref("extensions.BabylonToolbar_i.babExt", "");
Supprimée : user_pref("extensions.BabylonToolbar_i.babTrack", "");
Supprimée : user_pref("extensions.BabylonToolbar_i.hardId", "3406c16c00000000000090e6ba694a8a");
Supprimée : user_pref("extensions.BabylonToolbar_i.id", "3406c16c00000000000090e6ba694a8a");
Supprimée : user_pref("extensions.BabylonToolbar_i.instlDay", "15482");
Supprimée : user_pref("extensions.BabylonToolbar_i.instlRef", "std");
Supprimée : user_pref("extensions.BabylonToolbar_i.newTab", false);
Supprimée : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
Supprimée : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
Supprimée : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Supprimée : user_pref("extensions.BabylonToolbar_i.srcExt", "");
Supprimée : user_pref("extensions.BabylonToolbar_i.tlbrId", "base");
Supprimée : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
Supprimée : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1718:09:31");
Supprimée : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
Supprimée : user_pref("extensions.boounce.categorySelection", 163);
Supprimée : user_pref("extensions.boounce.currentUserConfig", 405430);
Supprimée : user_pref("extensions.boounce.dataExpiry", "1338307537757");
Supprimée : user_pref("extensions.boounce.firstrun", false);
Supprimée : user_pref("extensions.boounce.installSource ", "softpublisher");
Supprimée : user_pref("extensions.boounce.newsReadVersion", "0.6");
Supprimée : user_pref("extensions.boounce.userGuid", "ea4372793ba04236937277f702663ec1");
Supprimée : user_pref("extensions.enabledAddons", "cacaoweb@cacaoweb.org:1.0.26,ffxtlbr@funmoods.com:1.5.0,{1FD9[...]
Supprimée : user_pref("extensions.foxlingo.addit.defaultAddons", "{ \"software\": {\"20\": {\"id\": \"20\",\"tit[...]
Supprimée : user_pref("extensions.funmoods.aflt", "iron2");
Supprimée : user_pref("extensions.funmoods.autoRvrt", false);
Supprimée : user_pref("extensions.funmoods.cntry", "FR");
Supprimée : user_pref("extensions.funmoods.dfltLng", "");
Supprimée : user_pref("extensions.funmoods.dfltSrch", true);
Supprimée : user_pref("extensions.funmoods.dnsErr", true);
Supprimée : user_pref("extensions.funmoods.envrmnt", "production");
Supprimée : user_pref("extensions.funmoods.excTlbr", false);
Supprimée : user_pref("extensions.funmoods.hdrMd5", "BA933EEF18CCA17F2A70A505B3729F85");
Supprimée : user_pref("extensions.funmoods.hmpg", true);
Supprimée : user_pref("extensions.funmoods.hmpgUrl", "hxxp://start.funmoods.com/?f=1&a=iron2&chnl=iron2&cd=2Xzut[...]
Supprimée : user_pref("extensions.funmoods.id", "3406c16c00000000000090e6ba694a8a");
Supprimée : user_pref("extensions.funmoods.instlDay", "15481");
Supprimée : user_pref("extensions.funmoods.instlRef", "iron2");
Supprimée : user_pref("extensions.funmoods.isdcmntcmplt", true);
Supprimée : user_pref("extensions.funmoods.lastVrsnTs", "1.5.23.2217:48:47");
Supprimée : user_pref("extensions.funmoods.mntrvrsn", "1.3.0");
Supprimée : user_pref("extensions.funmoods.newTab", true);
Supprimée : user_pref("extensions.funmoods.newTabUrl", "hxxp://start.funmoods.com/?f=2&a=iron2&chnl=iron2&cd=2Xz[...]
Supprimée : user_pref("extensions.funmoods.prdct", "funmoods");
Supprimée : user_pref("extensions.funmoods.prtnrId", "funmoods");
Supprimée : user_pref("extensions.funmoods.sg", "none");
Supprimée : user_pref("extensions.funmoods.smplGrp", "none");
Supprimée : user_pref("extensions.funmoods.srchPrvdr", "Search");
Supprimée : user_pref("extensions.funmoods.tlbrId", "base");
Supprimée : user_pref("extensions.funmoods.tlbrSrchUrl", "");
Supprimée : user_pref("extensions.funmoods.vrsn", "1.5.23.22");
Supprimée : user_pref("extensions.funmoods.vrsnTs", "1.5.23.2217:48:47");
Supprimée : user_pref("extensions.funmoods.vrsni", "1.5.23.22");
Supprimée : user_pref("extensions.funmoods_i.newTab", true);
Supprimée : user_pref("extensions.funmoods_i.smplGrp", "none");
Supprimée : user_pref("extensions.funmoods_i.vrsnTs", "1.5.23.2217:48:47");
Supprimée : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2832419&SearchSource=2&q=[...]

-\\ Google Chrome v19.0.1084.46

Fichier : C:\Users\Cigale\AppData\Local\Google\Chrome\User Data\Default\Preferences

Supprimée :                "update_url": "hxxp://funmoods.com/public/download/chrome/update.xml",
Supprimée :                   "default_icon": "browser_icon_babylon48.png",
Supprimée :                   "default_title": "Babylon Toolbar"
Supprimée :                "description": "Babylon ToolBar",
Supprimée :                   "128": "babylon48.png",
Supprimée :                   "48": "babylon48.png"
Supprimée :                "name": "Babylon Toolbar",
Supprimée :                   "path": "BabylonChromeToolBar.dll",
Supprimée :                "update_url": "hxxp://img.babylon.com/ext/chrome/update/update1.xml",
Supprimée :                "name": "Funmoods",
Supprimée :                "update_url": "hxxp://funmoods.com/public/download/chrome/update.xml",
Supprimée :          "name": "Babylon ToolBar",
Supprimée :          "path": "C:\\Users\\Cigale\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\[...]
Supprimée :          "name": "Babylon ToolBar"

*************************

AdwCleaner[S1].txt - [33163 octets] - [23/05/2012 20:52:05]

########## EOF - C:\AdwCleaner[S1].txt - [33292 octets] ##########

Titre: Re : Comment supprimer les pubs promo.vador.com et Boxore
Posté par: cigale le mai 23, 2012, 21:06:46
All processes killed
========== OTL ==========
Error: No service named supdate) Software Update Service (supdate was found to stop!
Service\Driver key supdate) Software Update Service (supdate not found.
C:\Program Files\Software\Update\SoftwareUpdate.exe moved successfully.
Error: No service named IBUpdaterService was found to stop!
Service\Driver key IBUpdaterService not found.
File C:\ProgramData\IBUpdaterService\ibsvc.exe not found.
Error: No service named OfferBox update service was found to stop!
Service\Driver key OfferBox update service not found.
File C:\Program Files\OfferBox\OfferBoxUpdateService.exe not found.
Error: No service named RelevantKnowledge was found to stop!
Service\Driver key RelevantKnowledge not found.
File C:\Program Files\RelevantKnowledge\rlservice.exe not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{0c5f997d-f664-4afb-9652-ea7fd92f383d} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0c5f997d-f664-4afb-9652-ea7fd92f383d}\ not found.
File C:\Program Files\PriceGongbar\tbPric.dll not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2426}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2426}\ not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Backup.Old.Start Page| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{0c5f997d-f664-4afb-9652-ea7fd92f383d} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0c5f997d-f664-4afb-9652-ea7fd92f383d}\ not found.
File C:\Program Files\PriceGongbar\tbPric.dll not found.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{1BD7A1B7-08A9-617A-8101-4F7C954CC1AC}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1BD7A1B7-08A9-617A-8101-4F7C954CC1AC}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2426}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2426}\ not found.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer| /E : value set successfully!
Prefs.js: "Search the web (Babylon)" removed from backup.old.browser.search.defaultenginename
Prefs.js: "Search the web (Babylon)" removed from backup.old.browser.search.selectedEngine
Prefs.js: "http://search.babylon.com/home?affID=18173" removed from browser.startup.homepage
Prefs.js: "Search the web (Babylon)" removed from browser.search.defaultenginename
Prefs.js: "PriceGongbar Customized Web Search" removed from browser.search.defaultthis.engineName
Prefs.js: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2832419&SearchSource=3&q={searchTerms}" removed from browser.search.defaulturl
Prefs.js: "Search Results" removed from browser.search.order.1
Prefs.js: "PriceGongbar Customized Web Search" removed from browser.search.selectedEngine
Prefs.js: "http://www.searchcore.net/426" removed from browser.startup.homepage
Prefs.js: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2832419&SearchSource=2&q=" removed from keyword.URL
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@www.dlmanager.net/omaha/tools//Software Update;version=8\ deleted successfully.
C:\Program Files\Software\Update\1.2.195.0\npSoftwareOneClick8.dll moved successfully.
File HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\support@2yourface.com: C:\Program Files\2YourFace\ffextension not found.
File HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3C5F0F00-683D-4847-89C8-E7AF64FD1CFB}: C:\Program Files\RelevantKnowledge not found.
File HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\specialsavings@superfish.com: C:\Users\Cigale\AppData\Roaming\Mozilla\Firefox\Profiles/nhxfipqb.default\extensions\specialsavings@superfish.com not found.
File HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\support@2yourface.com: C:\Program Files\2YourFace\ffextension not found.
Folder C:\Users\Cigale\AppData\Roaming\mozilla\Firefox\Profiles\nhxfipqb.default\extensions\{0c5f997d-f664-4afb-9652-ea7fd92f383d}\ not found.
Folder C:\Users\Cigale\AppData\Roaming\mozilla\Firefox\Profiles\nhxfipqb.default\extensions\{33e0daa6-3af3-d8b5-6752-10e949c61516}\ not found.
Folder C:\Users\Cigale\AppData\Roaming\mozilla\Firefox\Profiles\nhxfipqb.default\extensions\{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}\ not found.
Folder C:\Users\Cigale\AppData\Roaming\mozilla\Firefox\Profiles\nhxfipqb.default\extensions\{af6ac4f2-9825-4fb6-a600-92bc5361f209}\ not found.
Folder C:\Users\Cigale\AppData\Roaming\mozilla\Firefox\Profiles\nhxfipqb.default\extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}\ not found.
Folder C:\Users\Cigale\AppData\Roaming\mozilla\Firefox\Profiles\nhxfipqb.default\extensions\cacaoweb@cacaoweb.org\ not found.
Folder C:\Users\Cigale\AppData\Roaming\mozilla\Firefox\Profiles\nhxfipqb.default\extensions\engine@conduit.com\ not found.
Folder C:\Users\Cigale\AppData\Roaming\mozilla\Firefox\Profiles\nhxfipqb.default\extensions\ffxtlbr@babylon.com\ not found.
Folder C:\Users\Cigale\AppData\Roaming\mozilla\Firefox\Profiles\nhxfipqb.default\extensions\ffxtlbr@funmoods.com\ not found.
Folder C:\Users\Cigale\AppData\Roaming\mozilla\Firefox\Profiles\nhxfipqb.default\extensions\plugin@yontoo.com\ not found.
C:\Users\Cigale\AppData\Roaming\mozilla\Firefox\Profiles\nhxfipqb.default\extensions\specialsavings@superfish.com\defaults\preferences folder moved successfully.
C:\Users\Cigale\AppData\Roaming\mozilla\Firefox\Profiles\nhxfipqb.default\extensions\specialsavings@superfish.com\defaults folder moved successfully.
C:\Users\Cigale\AppData\Roaming\mozilla\Firefox\Profiles\nhxfipqb.default\extensions\specialsavings@superfish.com\components folder moved successfully.
C:\Users\Cigale\AppData\Roaming\mozilla\Firefox\Profiles\nhxfipqb.default\extensions\specialsavings@superfish.com\chrome\superfish\skin folder moved successfully.
C:\Users\Cigale\AppData\Roaming\mozilla\Firefox\Profiles\nhxfipqb.default\extensions\specialsavings@superfish.com\chrome\superfish\content folder moved successfully.
C:\Users\Cigale\AppData\Roaming\mozilla\Firefox\Profiles\nhxfipqb.default\extensions\specialsavings@superfish.com\chrome\superfish folder moved successfully.
C:\Users\Cigale\AppData\Roaming\mozilla\Firefox\Profiles\nhxfipqb.default\extensions\specialsavings@superfish.com\chrome folder moved successfully.
C:\Users\Cigale\AppData\Roaming\mozilla\Firefox\Profiles\nhxfipqb.default\extensions\specialsavings@superfish.com folder moved successfully.
Folder C:\Users\Cigale\AppData\Roaming\mozilla\Firefox\Profiles\nhxfipqb.default\extensions\toolbar@boounce.com\ not found.
File C:\Users\Cigale\AppData\Roaming\Mozilla\Firefox\Profiles\nhxfipqb.default\searchplugins\conduit.xml not found.
C:\Users\Cigale\AppData\Roaming\Mozilla\Firefox\Profiles\nhxfipqb.default\searchplugins\Search.xml moved successfully.
File C:\Users\Cigale\AppData\Roaming\Mozilla\Firefox\Profiles\nhxfipqb.default\searchplugins\Search_Results.xml not found.
Folder C:\Program Files\mozilla firefox\extensions\{a4e17a99-99a9-8bd8-be5b-79627f9467d7}\ not found.
Folder C:\PROGRAM FILES\2YOURFACE\FFEXTENSION\ not found.
Folder C:\PROGRAM FILES\RELEVANTKNOWLEDGE\ not found.
Folder C:\PROGRAM FILES\SEARCHCORE TOOLBAR\DATAMNGR\FIREFOXEXTENSION\ not found.
File C:\Program Files\mozilla firefox\searchplugins\babylon.xml not found.
File C:\Program Files\mozilla firefox\searchplugins\Search_Results.xml not found.
C:\Users\Cigale\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.5_1\BabylonChromeToolBar.dll moved successfully.
C:\Users\Cigale\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmblfngognklgemafekefcdjcnkdhmdm\1.0_0\2YourFace_Util.dll moved successfully.
C:\Users\Cigale\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkndcbhcgphcfkkddanakjiepeknbgle\1.3.332.1_0\plugins/rlcm.dll moved successfully.
File C:\Program Files\Software\Update\1.2.195.0\npSoftwareOneClick8.dll not found.
C:\Users\Cigale\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok\5.6.2_0\res folder moved successfully.
C:\Users\Cigale\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok\5.6.2_0\options folder moved successfully.
C:\Users\Cigale\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok\5.6.2_0\menu_dlg folder moved successfully.
C:\Users\Cigale\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok\5.6.2_0 folder moved successfully.
C:\Users\Cigale\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\1.0.1_0\jquery folder moved successfully.
C:\Users\Cigale\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\1.0.1_0\images folder moved successfully.
C:\Users\Cigale\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\1.0.1_0\icons folder moved successfully.
C:\Users\Cigale\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\1.0.1_0\css\ui-lightness\menu\theme folder moved successfully.
C:\Users\Cigale\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\1.0.1_0\css\ui-lightness\menu folder moved successfully.
C:\Users\Cigale\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\1.0.1_0\css\ui-lightness folder moved successfully.
C:\Users\Cigale\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\1.0.1_0\css\tango folder moved successfully.
C:\Users\Cigale\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\1.0.1_0\css folder moved successfully.
C:\Users\Cigale\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj\1.0.1_0 folder moved successfully.
C:\Users\Cigale\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.5_1 folder moved successfully.
File C:\Users\Cigale\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda\1.1_0 not found.
File C:\Users\Cigale\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdloijijlkoblmigdofommgnheckmaki\1.5.1_0 not found.
C:\Users\Cigale\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeaihkehdlhkocphopopahkfjcfcphef\1.1_0 folder moved successfully.
C:\Users\Cigale\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmblfngognklgemafekefcdjcnkdhmdm\1.0_0 folder moved successfully.
C:\Users\Cigale\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkndcbhcgphcfkkddanakjiepeknbgle\1.3.332.1_0\plugins folder moved successfully.
C:\Users\Cigale\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkndcbhcgphcfkkddanakjiepeknbgle\1.3.332.1_0 folder moved successfully.
File C:\Users\Cigale\AppData\Local\Google\Chrome\User Data\Default\Extensions\niapdbllcanepiiimjjndipklodoedlc\1.0.1_0 not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0c5f997d-f664-4afb-9652-ea7fd92f383d}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0c5f997d-f664-4afb-9652-ea7fd92f383d}\ not found.
File C:\Program Files\PriceGongbar\tbPric.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}\ not found.
File C:\Users\Cigale\AppData\Roaming\Complitly\Complitly.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1185823F-F22F-4027-80E5-4F68ACD5DE5E}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1185823F-F22F-4027-80E5-4F68ACD5DE5E}\ not found.
File C:\Program Files\2YourFace\bho.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1631550F-191D-4826-B069-D9439253D926}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1631550F-191D-4826-B069-D9439253D926}\ not found.
File C:\Program Files\PriceGong\2.6.2\PriceGongIE.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}\ not found.
File C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}\ not found.
File C:\Program Files\ConduitEngine\ConduitEngine.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{418b6d35-2455-3130-113b-9dfe9b4f11d1}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{418b6d35-2455-3130-113b-9dfe9b4f11d1}\ not found.
File C:\Windows\System32\339a5031.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}\ not found.
File C:\Program Files\SpecialSavings\SpecialSavingsSinged.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}\ not found.
File C:\PROGRA~1\Funmoods\1.5.23.22\bh\escort.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7DA17D5A-5718-4130-A605-FC316C827836}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7DA17D5A-5718-4130-A605-FC316C827836}\ not found.
File C:\PROGRA~1\SEARCH~1\Datamngr\BROWSE~1.DLL not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{af6ac4f2-9825-4fb6-a600-92bc5361f209}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{af6ac4f2-9825-4fb6-a600-92bc5361f209}\ deleted successfully.
File C:\PROGRA~1\SEARCH~1\Datamngr\ToolBar\searchcoredtx.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}\ not found.
File C:\Program Files\Yontoo\YontooIEClient.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{0c5f997d-f664-4afb-9652-ea7fd92f383d} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0c5f997d-f664-4afb-9652-ea7fd92f383d}\ not found.
File C:\Program Files\PriceGongbar\tbPric.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{30F9B915-B755-4826-820B-08FBA6BD249D} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}\ not found.
File C:\Program Files\ConduitEngine\ConduitEngine.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{98889811-442D-49dd-99D7-DC866BE87DBC} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{98889811-442D-49dd-99D7-DC866BE87DBC}\ not found.
File C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}\ not found.
File C:\PROGRA~1\Funmoods\1.5.23.22\escorTlbr.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{af6ac4f2-9825-4fb6-a600-92bc5361f209} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{af6ac4f2-9825-4fb6-a600-92bc5361f209}\ not found.
File C:\PROGRA~1\SEARCH~1\Datamngr\ToolBar\searchcoredtx.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\10 deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{0C5F997D-F664-4AFB-9652-EA7FD92F383D} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0C5F997D-F664-4AFB-9652-EA7FD92F383D}\ not found.
File C:\Program Files\PriceGongbar\tbPric.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Boxore Client not found.
File C:\Program Files\Boxore\BoxoreClient\boxore.exe not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\DATAMNGR not found.
File C:\PROGRA~1\SEARCH~1\Datamngr\DATAMN~1.EXE not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\offerbox not found.
File C:\Program Files\OfferBox\OfferBox.exe not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\cacaoweb not found.
File C:\Users\Cigale\AppData\Roaming\cacaoweb\cacaoweb.exe not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{A69A551A-1AAE-4B67-8C2E-52F8B8A19504}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A69A551A-1AAE-4B67-8C2E-52F8B8A19504}\ not found.
File C:\Program Files\SpecialSavings\SpecialSavingsSinged.dll not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll deleted successfully.
File C:\PROGRA~1\SEARCH~1\Datamngr\datamngr.dll not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:C:\PROGRA~1\SEARCH~1\Datamngr\IEBHO.dll deleted successfully.
File C:\PROGRA~1\SEARCH~1\Datamngr\IEBHO.dll not found.
Folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\ not found.
Folder C:\Program Files\RelevantKnowledge\ not found.
Folder C:\Users\Cigale\AppData\Roaming\Complitly\ not found.
Folder C:\Program Files\Complitly\ not found.
Folder C:\Program Files\2YourFace\ not found.
Folder C:\Program Files\Boxore\ not found.
C:\Users\Cigale\AppData\Local\Software\CrashReports folder moved successfully.
C:\Users\Cigale\AppData\Local\Software folder moved successfully.
C:\Program Files\Software\Update\Download folder moved successfully.
C:\Program Files\Software\Update\1.2.195.0 folder moved successfully.
C:\Program Files\Software\Update folder moved successfully.
C:\Program Files\Software\CrashReports folder moved successfully.
C:\Program Files\Software folder moved successfully.
Folder C:\Users\Cigale\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PlayerPlus\ not found.
Folder C:\Program Files\PlayerPlus\ not found.
Folder C:\Program Files\Searchcore Toolbar\ not found.
C:\ProgramData\boost_interprocess\3E61C9B7EF37CD01 folder moved successfully.
C:\ProgramData\boost_interprocess\3E51CAAD3538CD01 folder moved successfully.
C:\ProgramData\boost_interprocess folder moved successfully.
Folder C:\Users\Cigale\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpecialSavings\ not found.
Folder C:\Program Files\SpecialSavings\ not found.
Folder C:\ProgramData\IBUpdaterService\ not found.
Folder C:\Program Files\Yontoo\ not found.
Folder C:\Program Files\Funmoods\ not found.
Folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong\ not found.
Folder C:\Program Files\Conduit\ not found.
Folder C:\Program Files\ConduitEngine\ not found.
Folder C:\Program Files\PriceGongbar\ not found.
Folder C:\Program Files\PriceGong\ not found.
Folder C:\Users\Cigale\AppData\Roaming\OfferBox\ not found.
Folder C:\Program Files\OfferBox\ not found.
Folder C:\Users\Cigale\AppData\Roaming\cacaoweb\ not found.
Folder C:\Users\Cigale\AppData\Roaming\BabylonToolbar\ not found.
Folder C:\Program Files\BabylonToolbar\ not found.
Folder C:\Users\Cigale\AppData\Roaming\Babylon\ not found.
Folder C:\Users\Cigale\AppData\Local\Babylon\ not found.
Folder C:\ProgramData\Babylon\ not found.
Folder C:\Program Files\1ClickDownload\ not found.
File C:\Users\Cigale\Desktop\cacaoweb.exe not found.
File C:\Windows\System32\339a5031.dll not found.
File C:\Windows\System32\efe4be70.exe not found.
File C:\Users\Cigale\Desktop\PlayerPlus.exe.lnk not found.
C:\Users\Cigale\AppData\Local\funmoods-speeddial.crx moved successfully.
C:\Users\Cigale\AppData\Local\funmoods.crx moved successfully.
File C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OfferBox.lnk not found.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{393EF29C-283D-4859-B4E4-CAD5065E21F1} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{393EF29C-283D-4859-B4E4-CAD5065E21F1}\ not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{3C56BA04-0DCF-4544-A94F-C4353B28A599} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3C56BA04-0DCF-4544-A94F-C4353B28A599}\ not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{47604A42-03C3-4ADA-A8A7-7D0685725110} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{47604A42-03C3-4ADA-A8A7-7D0685725110}\ not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4BE4DC38-CDB6-4674-A71C-4A41052F0F7D} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4BE4DC38-CDB6-4674-A71C-4A41052F0F7D}\ not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B90ADD2C-362D-4D2F-8D2F-D51AAD60FBE9} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B90ADD2C-362D-4D2F-8D2F-D51AAD60FBE9}\ not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F0A35CA7-E732-4C66-8A0A-60C67EDD8EB0} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F0A35CA7-E732-4C66-8A0A-60C67EDD8EB0}\ not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{2B194494-CA26-43B0-AFB1-DB5746932124}C:\program files\1clickdownload\1clickdownload.exe deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{ED55FA14-3972-4233-B342-708143779895}C:\program files\1clickdownload\1clickdownload.exe deleted successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Cigale
->Temp folder emptied: 48599716 bytes
->Temporary Internet Files folder emptied: 56819296 bytes
->FireFox cache emptied: 52155784 bytes
->Google Chrome cache emptied: 25560444 bytes
->Flash cache emptied: 2656 bytes
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Public
 
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 8378736 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 183,00 mb
 
 
OTL by OldTimer - Version 3.2.43.1 log created on 05232012_205615

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

---------------------

Encore merci
Titre: Re : Comment supprimer les pubs promo.vador.com et Boxore
Posté par: hyunkel30 le mai 23, 2012, 22:22:52
Re,

Ok les rapports cela aurait été mieux de les héberger comme demandé, pas grave ;)

Est-ce que parmi les programmes qui ne voulaient pas se désinstaller, il y en a qui reste encore à présent dans la liste des programmes ?

As-tu encore des soucis sur ce pc ?
Titre: Re : Comment supprimer les pubs promo.vador.com et Boxore
Posté par: cigale le mai 24, 2012, 07:37:19
Bonjour,

Il restait Funmoods Web Search et Boxore Client, mais en cliquant sur les lignes, cette fois-ci, les 2 programmes ont bien voulu se désinstaller.

Firefox et Google Chrome se comportent maintenant normalement et je n'ai plus de pubs, ni porno, ni autre.

Je te remercie pour ton aide.
Titre: Re : Comment supprimer les pubs promo.vador.com et Boxore
Posté par: hyunkel30 le mai 24, 2012, 10:46:32
Re,

Parfait, on va nettoyer les outils utilisés et on conclu :

1) Désinstalle AdwCleaner :

Titre: Re : Comment supprimer les pubs promo.vador.com et Boxore
Posté par: cigale le mai 24, 2012, 12:52:14
Bonjour,

hyunkel30, voilà j'ai tout fait.

Je te remercie beaucoup pour ton aide.