aswMBR stop
Hi,
I am here because the infection Babylon toolbar prevents me from obtaining logs from aswMBR as you mentioned at "before you post".
Let's me explain you.
First I am using Spybot up to date and find Babylon toolbar items.
Spybot remove that without pb but still here when rescan immediately or after reset.
unfortunately I don't have the log ( but see below)
I try also Malewarebyte in safe mode, but nothing found.
With adwcleaner, removed but still there ( seem deseapear in Internet explorer, but still here in firefox, my default browser.)
SEE THE LOG AT THE END.
Finnaly I follow your Manual Removal Guide
- no indicated folders, but I have made inspection before and I know there is nothing.
- nothing found in registry
I try Regalyz, that remove the detection by spybot.
No pb with DDS.txt and attach.txt but blocked with aswMBR ( windows stop with no indication from OS).
I keep DDS.txt and Attach.txt at your request
Windows 7 - 64 bits uptodate
Thks in advance for your help, and sorry for my poor english ;>))
Jean-louis Baudoux
--------------------------------------
here is the log of adwcleaner.
# AdwCleaner v2.000 - Rapport créé le 23/09/2012 à 16:53:15
# Mis à jour le 30/08/2012 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : jlb - JLB-HP
# Mode de démarrage : Normal
# Exécuté depuis : D:\User_util\securite\anti_Babylon\adwcleaner.exe
# Option [Recherche]
***** [Services] *****
***** [Fichiers / Dossiers] *****
Dossier Présent : C:\ProgramData\Browser Manager
***** [Registre] *****
Clé Présente : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Clé Présente : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Clé Présente : HKU\S-1-5-21-443515483-2991178796-696988582-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Donnée Présente : HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\browse~1\22643~1.41\{16cdf~1\browse~1.dll
Valeur Présente : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
***** [Navigateurs] *****
-\\ Internet Explorer v9.0.8112.16421
[OK] Le registre ne contient aucune entrée illégitime.
-\\ Mozilla Firefox v15.0 (fr)
Nom du profil : default-1348409337555 [Profil par défaut]
Fichier : C:\Users\jlb\AppData\Roaming\Mozilla\Firefox\Profiles\fqj6eua6.default-1348409337555\prefs.js
Présente : user_pref("browser.search.defaultenginename", "Search the web (Babylon)");
Présente : user_pref("browser.search.order.1", "Search the web (Babylon)");
Présente : user_pref("browser.search.selectedEngine", "Search the web (Babylon)");
Présente : user_pref("browser.startup.homepage", "hxxp://search.babylon.com/?affID=110823&tt=120912_ccp_3812_8&[...]
*************************
AdwCleaner[R19].txt - [1802 octets] - [23/09/2012 15:26:39]
AdwCleaner[R20].txt - [1909 octets] - [23/09/2012 16:53:15]
########## EOF - C:\AdwCleaner[R20].txt - [1970 octets] ##########
