obsolete key cannot be deleted Solved

Question

Hello, in CCleaner I always get the same message in the registry: obsolete program key site advisor hklm/software/site advisor and I can't get rid of it. any help would be appreciated thank you and I did a zdiag http://cjoint.com/?3BhswA02ikP    Configuration: Windows 7 / Firefox 10.0

dr.pc1 · Answer

Hi,  it's from McAfee, if you want we can uninstall it properly.

cireluz · Answer

Good evening, I do not want to uninstall McAfee, especially since I have it for 3 years.

cireluz · Answer

no one anymore ????

dr.pc1 · Answer

It's McAfee SiteAdvisor that needs to be uninstalled, not McAfee SecurityCenter, but I don't use McAfee, so I don't know if it's integrated or separate from the antivirus (McAfee SecurityCenter).

cireluz · Answer

I uninstalled it by going into uninstall programs and modifying McAfee  but CCleaner still tells me there is an obsolete key  isn't that strange !!

cireluz · Answer

Problem solved, thank you.

dr.pc1 · Answer

Sure, if you have any other issues, don't hesitate to let me know :-)  @+

cireluz · Answer

re, but could you analyze my zdiag thank you

dr.pc1 · Answer

Hello,   okay

dr.pc1 · Answer

**Download AdwCleaner (by Xplode): here  *install it on your desktop.  *Run it, click on [Delete]. Once the scan is complete, a report will open. Post the content of the report in your next response.  PS: The report is also saved under C:\AdwCleaner[S1].txt

cireluz · Answer

Hello, I'm sorry but I have internet outages every day at the same time, the joys of Numericable Anyway, I ran the analysis with AdwCleaner as well as Ad-R and TDSSKiller yesterday Here is the report: # AdwCleaner v1.408 - Report created on 08/02/2012 at 14:59:41 # Updated on 29/01/2012 by Xplode # Operating System: Windows 7 Home Premium Service Pack 1 (64 bits) # Username: eric - ERIC-PC (Administrator) # Executed from: C:\Users\eric\Downloads\adwcleaner.exe # Option [Removal]   ***** [Services] *****   ***** [Files / Folders] *****   ***** [Registry] *****  Key Deleted: HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43 Key Deleted: HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DE28F4A4FFE5B92FA3C503D1A349A7F9962A8212 Key Deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8856F961-340A-11D0-A96B-00C04FD705A2}  ***** [Registry (x64)] *****   ***** [Browsers] *****  -\ Internet Explorer v9.0.8112.16421  [OK] The registry does not contain any illegitimate entries.  -\ Mozilla Firefox v10.0 (fr)  Profile: tfewb8kj.default File: C:\Users\eric\AppData\Roaming\Mozilla\Firefox\Profiles	fewb8kj.default\prefs.js  Deleted: user_pref("weboftrust.search.ask.display", "Ask.com Web Search");  *************************  AdwCleaner[S1].txt - [1199 bytes] - [08/02/2012 14:59:41]  *************************  Temporary Folder: 1 folder(s) and 0 file(s) deleted  ########## EOF - C:\AdwCleaner[S1].txt - [1419 bytes] ##########

dr.pc1 · Answer

Give me the other reports :-)

cireluz · Answer

the reports were deleted since yesterday

dr.pc1 · Answer

Give a new ZHPDiag report, your PC should be clean :-)  * Download RogueKiller to your desktop: here  - Close all running programs  - Under Vista/Seven, right-click -> run as administrator  - Otherwise, just launch RogueKiller.exe  - When prompted, click on Search and confirm.  - Then click on Report and send it to me.  ;-)

cireluz · Answer

Here is the one from earlier http://cjoint.com/?3BiqXqLN75p

dr.pc1 · Answer

Ad-Remover is outdated, I think it's still good but you shouldn't use it anymore :-}

cireluz · Answer

what to replace it with?

cireluz · Answer

Here is the RogueKiller report (the messages crossed) RogueKiller V7.0.4 [02/08/2012] by Tigzy mail: tigzyRKgmailcom Feedback: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html Blog: http://tigzyrk.blogspot.com Operating System: Windows 7 (6.1.7601 Service Pack 1) 64 bits version Boot: Normal mode User: eric [Admin rights] Mode: Scan -- Date: 02/08/2012 5:16:11 PM ¤¤¤ Malicious processes: 0 ¤¤¤ ¤¤¤ Registry entries: 2 ¤¤¤ [HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND [HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND ¤¤¤ Particular files / folders: ¤¤¤ ¤¤¤ Driver: [NOT LOADED] ¤¤¤ ¤¤¤ Infection: ¤¤¤ ¤¤¤ HOSTS file: ¤¤¤ ¤¤¤ MBR Check: ¤¤¤ +++++ PhysicalDrive0: ST9500423AS +++++ --- User --- [MBR] 9d490dd7e6adfb6a473e12293cc8b6b4 [BSP] dea9defa67a18cc486b8c709b2ee22f0 : Windows Vista MBR Code Partition table: 0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 63 | Size: 101 MB 1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 212992 | Size: 20000 MB 2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 41172992 | Size: 456835 MB User = LL1 ... OK! User = LL2 ... OK! +++++ PhysicalDrive1: DaneElec z-PEN USB Device +++++ --- User --- [MBR] e15a1171ca48c0690979750bc33a27b8 [BSP] 5f3c989766a7725d8a45fd8cf5f55c85 : Windows XP MBR Code Partition table: 0 - [ACTIVE] FAT32 (0x0b) [VISIBLE] Offset (sectors): 32 | Size: 3934 MB User = LL1 ... OK! Error reading LL2 MBR! Finished: << RKreport[1].txt >> RKreport[1].txt

dr.pc1 · Answer

Relaunch it in deletion mode then give me a new ZHPDiag report =)

cireluz · Answer

Here is a report zdiag http://cjoint.com/?3BirCAmJ0Rr

cireluz · Answer

et rogue killer

RogueKiller V7.0.4 [08/02/2012] by Tigzy
email: tigzyRK<at>gmail<dot>com
Reports: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html
Blog: http://tigzyrk.blogspot.com

Operating System: Windows 7 (6.1.7601 Service Pack 1) 64-bit version
Boot: Normal mode
User: eric [Admin rights]
Mode: Removal -- Date: 08/02/2012 17:30:07

¤¤¤ Malicious Processes: 0 ¤¤¤

¤¤¤ Registry Entries: 2 ¤¤¤
[HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

¤¤¤ Specific Files / Folders: ¤¤¤

¤¤¤ Driver: [NOT LOADED] ¤¤¤

¤¤¤ Infection: ¤¤¤

¤¤¤ HOSTS File: ¤¤¤

¤¤¤ MBR Verification: ¤¤¤

+++++ PhysicalDrive0: ST9500423AS +++++
--- User ---
[MBR] 9d490dd7e6adfb6a473e12293cc8b6b4
[BSP] dea9defa67a18cc486b8c709b2ee22f0 : Windows Vista MBR Code
Partition table:
0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 63 | Size: 101 MB
1 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 212992 | Size: 20000 MB
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 41172992 | Size: 456835 MB
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: DaneElec z-PEN USB Device +++++
--- User ---
[MBR] e15a1171ca48c0690979750bc33a27b8
[BSP] 5f3c989766a7725d8a45fd8cf5f55c85 : Windows XP MBR Code
Partition table:
0 - [ACTIVE] FAT32 (0x0b) [VISIBLE] Offset (sectors): 32 | Size: 3934 MB
User = LL1 ... OK!
Error reading LL2 MBR!

Finished: << RKreport[3].txt >>
RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt

cireluz · Answer

and that one after cleaning by rogue killer http://cjoint.com/?3BirKXUP38H

dr.pc1 · Answer

We're nearing the end :-)

*Download and install Malwarebytes Anti-Malware: here

-Update the definition database

-Run a full scan (this may take from a few minutes to several hours)

At the end of the scan, click the button at the bottom left Remove Selected.

And send me the report in your next reply :-)

cireluz · Answer

here is the report

Malwarebytes Anti-Malware (PRO) 1.60.1.1000
www.malwarebytes.org

Database version: v2012.02.08.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
eric :: ERIC-PC [administrator]

Protection: Enabled

08/02/2012 18:16:54
mbam-log-2012-02-08 (18-16-54).txt

Scan type: Full scan
Scan options enabled: Memory | Startup | Registry | File system | Heuristic/Extra | Heuristic/Shuriken | PUP | PUM
Scan options disabled: P2P
Item(s) scanned: 303488
Elapsed time: 41 minute(s), 25 second(s)

Memory processes detected: 0
(No malicious items detected)

Memory modules detected: 0
(No malicious items detected)

Registry key(s) detected: 0
(No malicious items detected)

Registry value(s) detected: 0
(No malicious items detected)

Registry data item(s) detected: 0
(No malicious items detected)

Folder(s) detected: 0
(No malicious items detected)

File(s) detected: 0
(No malicious items detected)

(end)

dr.pc1 · Answer

To uninstall the disinfection tools:

** Download Delfix: here and then run Delfix on your desktop.

* Click on the "Remove" button and post its report in your next message.

* To uninstall it, just relaunch it and click on the uninstall button.

After:

------------------------------------------------------------------------------------------------------

* Download PureRa (by the publisher of JavaRa): here

- Run it (right-click "run as administrator" for Vista/7)

- click on "Clean"

- The tool will perform its scan then its cleaning

- at the end of the scan, you will have a line like this:

Total space cleaned: 7657532 bytes

- Just give me that line.

----------------------------------------------------------------------------------------------------

You can keep Malwarebyte's and download CCleaner to regularly clean and Revo uninstaller to properly uninstall your software and to optimize your PC, there's Glary Utilities ;-)

----------------------------------------------------------------------------------------------------

Also download WOT and ADBlock for your browser and more security for your PC.

----------------------------------------------------------------------------------------------------

A bit of reading:

Securing your computer: here

/!\ to do /!\ Enable PUP/LPI Detection: here

----------------------------------------------------------------------------------------------------
You must check every month that Adobe Flash Player and JAVA are up to date.

**You need a good antivirus like Avast or Avira etc... and a good firewall like Comodo Firewall or the one from Windows (Windows Defender)

Don't forget to set the subject to ---> resolved <---

If you still have problems, feel free to come back to CCM or contact me =)

@+

-------> dr.pc1 <-------

cireluz · Answer

thank you for your help A+:))

# DelFix v8.7 - Report created on 02/08/2012 at 21:05:10
# Updated on 12/01/11 at 20:00 by Xplode
# Operating system: Windows 7 Home Premium Service Pack 1 (64 bits)
# Username: eric - ERIC-PC (Administrator)
# Executed from: C:\Users\eric\Downloads\delfix.exe
# Option [Removal]

~~~~~~ Folder(s) ~~~~~~

Deleted: C:\ZHP
Deleted: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
Deleted: C:\Users\eric\Desktop\RK_Quarantine
Deleted: C:\Program Files (x86)\Ad-Remover
Deleted: C:\Program Files (x86)\ZHPDiag

~~~~~~ File(s) ~~~~~~

Deleted: C:\Ad-Report-SCAN[1].txt
Deleted: C:\Users\eric\Desktop\Ad-Report-CLEAN[1].txt
Deleted: C:\Users\eric\Desktop\RKreport[1].txt
Deleted: C:\Users\eric\Desktop\RKreport[2].txt
Deleted: C:\Users\eric\Desktop\RKreport[3].txt
Deleted: C:\Users\eric\Desktop\RKreport[4].txt
Deleted: C:\Users\eric\Desktop\ZHPDiag.txt
Deleted: C:\Users\eric\Downloads\adwcleaner.exe
Deleted: C:\Users\eric\Downloads\RogueKiller.exe
Deleted: C:\Users\Public\Desktop\ZHPDiag.lnk
Deleted: C:\Users\Public\Desktop\ZHPFix.lnk
Deleted: C:\Users\Public\Desktop\MBRCheck.lnk

~~~~~~ Registry ~~~~~~

Key Deleted: HKCU\Software\Ad-Remover
Key Deleted: HKLM\SOFTWARE\AdwCleaner
Key Deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1

~~~~~~ Other ~~~~~~

-> Prefetch Video

*************************

DelFix[S1].txt - [1456 bytes] - [02/08/2012 21:05:10]

########## EOF - C:\DelFix[S1].txt - [1580 bytes] ##########

Obsolete key cannot be deleted - Page 2

Texture issues in enshrouded

Canon mb5350 - cartridge replacement impossible

Football manager (club management game)

Select next line csh foreach

Win32 kamso then rootkit detection

Win32:spyware-gen [trj] detected by avast

Unknown video error on the freebox player

Make it or break it

How to open a cbr file

Please log in with manager privileges.