Hi,
I am here because the infection Babylon toolbar prevents me from obtaining logs from aswMBR as you mentioned at "before you post".

Let's me explain you.

First I am using Spybot up to date and find Babylon toolbar items.

Spybot remove that without pb but still here when rescan immediately or after reset.
unfortunately I don't have the log ( but see below)

I try also Malewarebyte in safe mode, but nothing found.

With adwcleaner, removed but still there ( seem deseapear in Internet explorer, but still here in firefox, my default browser.)
SEE THE LOG AT THE END.

Finnaly I follow your Manual Removal Guide

- no indicated folders, but I have made inspection before and I know there is nothing.
- nothing found in registry

I try Regalyz, that remove the detection by spybot.

No pb with DDS.txt and attach.txt but blocked with aswMBR ( windows stop with no indication from OS).

I keep DDS.txt and Attach.txt at your request

Windows 7 - 64 bits uptodate


Thks in advance for your help, and sorry for my poor english ;>))
Jean-louis Baudoux

--------------------------------------

here is the log of adwcleaner.

# AdwCleaner v2.000 - Rapport créé le 23/09/2012 à 16:53:15
# Mis à jour le 30/08/2012 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : jlb - JLB-HP
# Mode de démarrage : Normal
# Exécuté depuis : D:\User_util\securite\anti_Babylon\adwcleaner.exe
# Option [Recherche]


***** [Services] *****


***** [Fichiers / Dossiers] *****

Dossier Présent : C:\ProgramData\Browser Manager

***** [Registre] *****

Clé Présente : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Clé Présente : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Clé Présente : HKU\S-1-5-21-443515483-2991178796-696988582-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Donnée Présente : HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\browse~1\22643~1.41\{16cdf~1\browse~1.dll
Valeur Présente : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]

***** [Navigateurs] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Le registre ne contient aucune entrée illégitime.

-\\ Mozilla Firefox v15.0 (fr)

Nom du profil : default-1348409337555 [Profil par défaut]
Fichier : C:\Users\jlb\AppData\Roaming\Mozilla\Firefox\Profiles\fqj6eua6.default-1348409337555\prefs.js

Présente : user_pref("browser.search.defaultenginename", "Search the web (Babylon)");
Présente : user_pref("browser.search.order.1", "Search the web (Babylon)");
Présente : user_pref("browser.search.selectedEngine", "Search the web (Babylon)");
Présente : user_pref("browser.startup.homepage", "hxxp://search.babylon.com/?affID=110823&tt=120912_ccp_3812_8&[...]

*************************

AdwCleaner[R19].txt - [1802 octets] - [23/09/2012 15:26:39]
AdwCleaner[R20].txt - [1909 octets] - [23/09/2012 16:53:15]

########## EOF - C:\AdwCleaner[R20].txt - [1970 octets] ##########