How to remove Babylon Search?
Solved
LexiYume
Posted messages
42
Status
Membre
-
D.L.59 Posted messages 2 Status Membre -
D.L.59 Posted messages 2 Status Membre -
Hello,
Not long ago, I fell into the "wolf's den", Babylon Search.
I removed it from my Control Panel, but it still appears when I use Google Chrome.
I have two software programs, CCleaner and Malwarebytes. Are they sufficient to remove Babylon? If so, please let me know how I should proceed to get rid of this "virus" (since I'm afraid of deleting software from my PC while using them).
Also, I have Windows 7.
Thank you in advance for your responses,
LexiYume.
Not long ago, I fell into the "wolf's den", Babylon Search.
I removed it from my Control Panel, but it still appears when I use Google Chrome.
I have two software programs, CCleaner and Malwarebytes. Are they sufficient to remove Babylon? If so, please let me know how I should proceed to get rid of this "virus" (since I'm afraid of deleting software from my PC while using them).
Also, I have Windows 7.
Thank you in advance for your responses,
LexiYume.
36 réponses
- 1
- 2
Suivant
Hello,
To start, Babylon Search is not really a virus, consider it more like a parasite.
First;
1) Open Google (or another browser), click on the wrench icon at the top right, then click on Settings.
2) Go to * Search * and just below it, it says * Manage search engines ... * then delete it.
There you go, hoping I have helped you further, have a good day! :)
To start, Babylon Search is not really a virus, consider it more like a parasite.
First;
1) Open Google (or another browser), click on the wrench icon at the top right, then click on Settings.
2) Go to * Search * and just below it, it says * Manage search engines ... * then delete it.
There you go, hoping I have helped you further, have a good day! :)
Nonsense. Once you've done that, you haven't actually removed that damn bar; you've just prevented it from displaying physically on your computer, and in the meantime, it's still happily sending your data to third-party companies.
You need to use AdwCleaner. It's the only one that can get rid of this crap.
You need to use AdwCleaner. It's the only one that can get rid of this crap.
Hello,
To remove Babylon, simply use AdwCleaner downloadable here:
http://general-changelog-team.fr/fr/downloads/view.download/2
If your antivirus or browser tells you there is a virus or any nonsense like that, just ignore it/them.
Once on AdwCleaner, click on [Delete] :)!
Then post the link that is located at the root of your PC (C:/AdwCleaner[S1].txt)
A helper should normally take care of you, and this link will be useful to them.
There you go.
See you later :)
At your service.
To remove Babylon, simply use AdwCleaner downloadable here:
http://general-changelog-team.fr/fr/downloads/view.download/2
If your antivirus or browser tells you there is a virus or any nonsense like that, just ignore it/them.
Once on AdwCleaner, click on [Delete] :)!
Then post the link that is located at the root of your PC (C:/AdwCleaner[S1].txt)
A helper should normally take care of you, and this link will be useful to them.
There you go.
See you later :)
At your service.
# AdwCleaner v2.001 - Report created on 15/09/2012 at 12:07:54
# Updated on 09/09/2012 by Xplode
# Operating System: Windows 7 Home Premium Service Pack 1 (64 bits)
# Username: Alexiane - ALEXIANE-PC
# Boot Mode: Normal
# Executed from: C:\Users\Alexiane\Downloads\adwcleaner (1).exe
# Option [Removal]
***** [Services] *****
Stopped & Removed: Browser Manager
Stopped & Removed: supdate
***** [Files / Folders] *****
Folder Removed: C:\Program Files (x86)\01NET.com
Folder Removed: C:\Program Files (x86)\Boxore
Folder Removed: C:\Program Files (x86)\Conduit
Folder Removed: C:\Program Files (x86)\Giant Savings
Folder Removed: C:\Program Files (x86)\Software
Folder Removed: C:\ProgramData\Babylon
Folder Removed: C:\Users\Alexiane\AppData\Local\Conduit
Folder Removed: C:\Users\Alexiane\AppData\Local\Giant Savings
Folder Removed: C:\Users\Alexiane\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeaihkehdlhkocphopopahkfjcfcphef
Folder Removed: C:\Users\Alexiane\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndkhncnongaclekkbelchmeafffimifj
Folder Removed: C:\Users\Alexiane\AppData\Local\Software
Folder Removed: C:\Users\Alexiane\AppData\LocalLow\01NET.com
Folder Removed: C:\Users\Alexiane\AppData\LocalLow\BabylonToolbar
Folder Removed: C:\Users\Alexiane\AppData\LocalLow\Conduit
Folder Removed: C:\Users\Alexiane\AppData\Roaming\Babylon
Folder Removed: C:\Users\Alexiane\AppData\Roaming\Mozilla\Firefox\Profiles\8dtoo4x9.default\CT3128284
Folder Removed: C:\Users\Alexiane\AppData\Roaming\Mozilla\Firefox\Profiles\8dtoo4x9.default\extensions\{8e5025c2-8ea3-430d-80b8-a14151068a6d}
Folder Removed: C:\Users\Alexiane\AppData\Roaming\Mozilla\Firefox\Profiles\8dtoo4x9.default\extensions\crossriderapp4479@crossrider.com
Folder Removed: C:\Users\Alexiane\AppData\Roaming\Mozilla\Firefox\Profiles\8dtoo4x9.default\extensions\ffxtlbr@babylon.com
Folder Removed: C:\Users\Alexiane\AppData\Roaming\Mozilla\Firefox\Profiles\8dtoo4x9.default\Smartbar
File Removed: C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml
File Removed: C:\user.js
File Removed: C:\Users\Alexiane\AppData\Roaming\Mozilla\Firefox\Profiles\8dtoo4x9.default\searchplugins\Conduit.xml
File Removed: C:\Windows\Tasks\SoftwareUpdateTaskMachineCore.job
File Removed: C:\Windows\Tasks\SoftwareUpdateTaskMachineUA.job
Removed on restart: C:\ProgramData\Browser Manager
***** [Registry] *****
Key Removed: HKCU\Software\AppDataLow\Software\01NET.com
Key Removed: HKCU\Software\AppDataLow\Software\Conduit
Key Removed: HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Removed: HKCU\Software\AppDataLow\Software\Crossrider
Key Removed: HKCU\Software\AppDataLow\Software\Giant Savings
Key Removed: HKCU\Software\AppDataLow\Software\SmartBar
Key Removed: HKCU\Software\AppDataLow\Toolbar
Key Removed: HKCU\Software\BrowserMngr
Key Removed: HKCU\Software\Conduit
Key Removed: HKCU\Software\Cr_Installer
Key Removed: HKCU\Software\DataMngr
Key Removed: HKCU\Software\Google\Chrome\Extensions\ehdmaehkiiampolokajdcelladmnopgp
Key Removed: HKCU\Software\InstalledBrowserExtensions
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110011441179}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8E5025C2-8EA3-430D-80B8-A14151068A6D}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110011441179}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8E5025C2-8EA3-430D-80B8-A14151068A6D}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Removed: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Removed: HKLM\Software\01NET.com
Key Removed: HKLM\Software\Babylon
Key Removed: HKLM\Software\Boxore
Key Removed: HKLM\Software\BrowserMngr
Key Removed: HKLM\SOFTWARE\Classes\AppID\{32451DFC-C23B-4E12-866C-FC7982238504}
Key Removed: HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Removed: HKLM\SOFTWARE\Classes\CrossriderApp0004479.BHO
Key Removed: HKLM\SOFTWARE\Classes\CrossriderApp0004479.BHO.1
Key Removed: HKLM\SOFTWARE\Classes\CrossriderApp0004479.FBApi
Key Removed: HKLM\SOFTWARE\Classes\CrossriderApp0004479.FBApi.1
Key Removed: HKLM\SOFTWARE\Classes\CrossriderApp0004479.Sandbox
Key Removed: HKLM\SOFTWARE\Classes\CrossriderApp0004479.Sandbox.1
Key Removed: HKLM\SOFTWARE\Classes\Installer\Features\64A6E60055D801F4BB8AC269354B72B8
Key Removed: HKLM\SOFTWARE\Classes\Installer\Products\64A6E60055D801F4BB8AC269354B72B8
Key Removed: HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\1C875DDE39636004CA8CDAEC335B4160
Key Removed: HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\BA086F2D38A8E1A47912955A68B3AD24
Key Removed: HKLM\SOFTWARE\Classes\MIME\Database\Content Type\application/x-vnd.software.oneclickctrl.8
Key Removed: HKLM\SOFTWARE\Classes\Software.OneClickCtrl.8
Key Removed: HKLM\SOFTWARE\Classes\SoftwareUpdate.CoreClass
Key Removed: HKLM\SOFTWARE\Classes\SoftwareUpdate.CoreClass.1
Key Removed: HKLM\SOFTWARE\Classes\SoftwareUpdate.OnDemandCOMClassMachine
Key Removed: HKLM\SOFTWARE\Classes\SoftwareUpdate.OnDemandCOMClassMachine.1.0
Key Removed: HKLM\SOFTWARE\Classes\Toolbar.CT3128284
Key Removed: HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440044444479}
Key Removed: HKLM\Software\Conduit
Key Removed: HKLM\Software\DataMngr
Key Removed: HKLM\Software\ilivid
Key Removed: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011441179}
Key Removed: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{151867D5-7359-40AF-8764-66E58D06283C}
Key Removed: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63435521-BE15-44D9-A4BE-A5A0000D9662}
Key Removed: HKLM\SOFTWARE\MozillaPlugins\@www.dlmanager.net/omaha/tools//Software Update;version=8
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{092A2C6B-43EE-4F9F-8F8E-14ED5E11C14B}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{11111111-1111-1111-1111-110011441179}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{151867D5-7359-40AF-8764-66E58D06283C}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{22222222-2222-2222-2222-220022442279}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{257A6158-1416-4B31-9BF8-29FF49F3814F}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{32451DFC-C23B-4E12-866C-FC7982238504}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{33333333-3333-3333-3333-330033443379}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{63435521-BE15-44D9-A4BE-A5A0000D9662}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{8E5025C2-8EA3-430D-80B8-A14151068A6D}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AC5C4189-A8A0-4C9D-8910-C9CEF8360077}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{55555555-5555-5555-5555-550055445579}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{66666666-6666-6666-6666-660066446679}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{736EF78E-5A04-46F9-893E-EDEC6EA5DF45}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{77777777-7777-7777-7777-770077447779}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7A1BCE27-099C-4628-B63A-AEC00C6376B3}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{AF3AFF7C-B9E9-48DD-9002-212B6DEAAC02}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DBE82879-914A-422F-BAE9-2ECC80BE536F}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E12D7149-73EF-45E4-A1E9-99FD7DAE62D3}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F2B184F1-547C-4EE9-BFC4-AC489C7077D9}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ehdmaehkiiampolokajdcelladmnopgp
Key Removed: HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jeaihkehdlhkocphopopahkfjcfcphef
Key Removed: HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ndkhncnongaclekkbelchmeafffimifj
Key Removed: HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011441179}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{26D526F7-A4DD-48F8-882E-A4068C528437}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{63435521-BE15-44D9-A4BE-A5A0000D9662}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{96ACE83C-8570-497A-A356-1B83994CC679}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110011441179}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5025C2-8EA3-430D-80B8-A14151068A6D}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{006E6A46-8D55-4F10-BBA8-2C9653B4278B}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\01NET.com Toolbar
Key Removed: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Giant Savings
Key Removed: HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550055445579}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660066446679}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{77777777-7777-7777-7777-770077447779}
Key Removed: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\1C875DDE39636004CA8CDAEC335B4160
Key Removed: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\BA086F2D38A8E1A47912955A68B3AD24
Key Removed: HKU\S-1-5-21-1282535277-2699107094-3230090534-1002\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Data Removed: HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\browse~1\22630~1.40\{16cdf~1\browse~1.dll c:\windows\syswow64\nvinit.dll
Value Removed: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{8E5025C2-8EA3-430D-80B8-A14151068A6D}]
Value Removed: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{8E5025C2-8EA3-430D-80B8-A14151068A6D}]
Value Removed: HKCU\Software\Mozilla\Firefox\Extensions [{b64982b1-d112-42b5-b1e4-d3867c4533f8}]
Value Removed: HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{8E5025C2-8EA3-430D-80B8-A14151068A6D}]
Value Removed: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Boxore Client]
Value Removed: HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{8E5025C2-8EA3-430D-80B8-A14151068A6D}]
Value Removed: HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
***** [Browsers] *****
-\\ Internet Explorer v9.0.8112.16421
Restored: [HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restored: [HKCU\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restored: [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restored: [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings - DefaultScope]
Restored: [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restored: [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restored: [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restored: [HKU\S-1-5-21-1282535277-2699107094-3230090534-1000\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Replaced: [HKCU\Software\Microsoft\Internet Explorer\Main - BrowserMngr Start Page] = hxxp://search.babylon.com/?affID=113357&tt=3612_4&babsrc=HP_ss&mntrId=c4ebe8bd00000000000060d81927743c --> hxxp://www.google.com
Replaced: [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://search.babylon.com/?affID=113357&tt=3612_4&babsrc=NT_ss&mntrId=c4ebe8bd00000000000060d81927743c --> hxxp://www.google.com
-\\ Mozilla Firefox v14.0.1 (fr)
Profile name: default
File: C:\Users\Alexiane\AppData\Roaming\Mozilla\Firefox\Profiles\8dtoo4x9.default\prefs.js
C:\Users\Alexiane\AppData\Roaming\Mozilla\Firefox\Profiles\8dtoo4x9.default\user.js ... Removed!
Removed: user_pref("CT3128284.1000082.isPlayDisplay", "true");
Removed: user_pref("CT3128284.1000082.state", "{\"state\":\"stopped\",\"text\":\"RMC\",\"description\":\"RMC\[...]
Removed: user_pref("CT3128284.1000234.TWC_TMP_city", "LYON");
Removed: user_pref("CT3128284.1000234.TWC_TMP_country", "FR");
Removed: user_pref("CT3128284.3128284a129638404769606799000000paramsGK0", "{\"updateReqTime\":1347549716259,\[...]
Removed: user_pref("CT3128284.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Removed: user_pref("CT3128284.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Removed: user_pref("CT3128284.FirstTime", "true");
Removed: user_pref("CT3128284.FirstTimeFF3", "true");
Removed: user_pref("CT3128284.RSS_Pub_Config", "{\"settings\":{\"icon\":\"hxxp://storage.conduit.com/bankimag[...]
Removed: user_pref("CT3128284.RSSapp3128284a129638404769606799000000ReadItemsArr", "%7B%22572365%22%3A0%2C%22[...]
Removed: user_pref("CT3128284.RSSapp3128284a129638404769606799000000cat0", "%5B%7B%22type%22%3A%22rss%22%2C%2[...]
Removed: user_pref("CT3128284.RSSapp3128284a129638404769606799000000cat1", "%5B%7B%22type%22%3A%22rss%22%2C%2[...]
Removed: user_pref("CT3128284.RSSapp3128284a129638404769606799000000embeddedVersion", "2.4.0");
Removed: user_pref("CT3128284.RSSapp3128284a129638404769606799000000feedsObj", "%7B%22channels%22%3A%7B%22id%[...]
Removed: user_pref("CT3128284.RSSapp3128284a129638404769606799000000lastReportTime", "1347549717256 ");
Removed: user_pref("CT3128284.RSSapp3128284a129638404769606799000000newFeeds", "newFeeds");
Removed: user_pref("CT3128284.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT312[...]
Removed: user_pref("CT3128284.UserID", "UN39127353105834452");
Removed: user_pref("CT3128284.addressBarTakeOverEnabledInHidden", "true");
Removed: user_pref("CT3128284.autoDisableScopes", -1);
Removed: user_pref("CT3128284.browser.search.defaultthis.engineName", true);
Removed: user_pref("CT3128284.defaultSearch", "true");
Removed: user_pref("CT3128284.embeddedsData", "[{\"appId\":\"129638404645388048\",\"apiPermissions\":{\"cross[...]
Removed: user_pref("CT3128284.enableAlerts", "always");
Removed: user_pref("CT3128284.enableSearchFromAddressBar", "true");
Removed: user_pref("CT3128284.firstTimeDialogOpened", "true");
Removed: user_pref("CT3128284.fixPageNotFoundError", "true");
Removed: user_pref("CT3128284.fixPageNotFoundErrorInHidden", "true");
Removed: user_pref("CT3128284.fixUrls", true);
Removed: user_pref("CT3128284.installId", "ct3128284_01net.com.exe");
Removed: user_pref("CT3128284.installType", "ConduitNSISIntegration");
Removed: user_pref("CT3128284.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Removed: user_pref("CT3128284.isNewTabEnabled", true);
Removed: user_pref("CT3128284.isPerformedSmartBarTransition", "true");
Removed: user_pref("CT3128284.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Removed: user_pref("CT3128284.keyword", true);
Removed: user_pref("CT3128284.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%[...]
Removed: user_pref("CT3128284.openThankYouPage", "false");
Removed: user_pref("CT3128284.openUninstallPage", "true");
Removed: user_pref("CT3128284.search.searchAppId", "129638404645388048");
Removed: user_pref("CT3128284.search.searchCount", "0");
Removed: user_pref("CT3128284.searchInNewTabEnabledInHidden", "true");
Removed: user_pref("CT3128284.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Removed: user_pref("CT3128284.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Removed: user_pref("CT3128284.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"3\[...]
Removed: user_pref("CT3128284.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Removed: user_pref("CT3128284.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Removed: user_pref("CT3128284.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Removed: user_pref("CT3128284.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Removed: user_pref("CT3128284.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data[...]
Removed: user_pref("CT3128284.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1345076964287");
Removed: user_pref("CT3128284.serviceLayer_services_appTracking_lastUpdate", "1345078567736");
Removed: user_pref("CT3128284.serviceLayer_services_appsMetadata_lastUpdate", "1345076963695");
Removed: user_pref("CT3128284.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1345078567916");
Removed: user_pref("CT3128284.serviceLayer_services_login_10.10.12.503_lastUpdate", "1345970317706");
Removed: user_pref("CT3128284.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1345078567971");
Removed: user_pref("CT3128284.serviceLayer_services_searchAPI_lastUpdate", "1345076960166");
Removed: user_pref("CT3128284.serviceLayer_services_serviceMap_lastUpdate", "1345076959250");
Removed: user_pref("CT3128284.serviceLayer_services_toolbarContextMenu_lastUpdate", "1345078567820");
Removed: user_pref("CT3128284.serviceLayer_services_toolbarSettings_lastUpdate", "1345076960279");
Removed: user_pref("CT3128284.serviceLayer_services_translation_lastUpdate", "1345076964046");
Removed: user_pref("CT3128284.settingsINI", true);
Removed: user_pref("CT3128284.shouldFirstTimeDialog", "false");
Removed: user_pref("CT3128284.smartbar.CTID", "CT3128284");
Removed: user_pref("CT3128284.smartbar.Uninstall", "0");
Removed: user_pref("CT3128284.smartbar.homepage", true);
Removed: user_pref("CT3128284.smartbar.toolbarName", "01NET.com ");
Removed: user_pref("CT3128284.toolbarBornServerTime", "26-8-2012");
Removed: user_pref("CT3128284.toolbarCurrentServerTime", "26-8-2012");
Removed: user_pref("CT3128284.twitter_v1.8.0_twitter_app_open_t_f", "false");
Removed: user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3128284&SearchSource=1[...]
Removed: user_pref("Smartbar.ConduitSearchEngineList", "01NET.com Customized Web Search");
Removed: user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3128284[...]
Removed: user_pref("Smartbar.keywordURLSelectedCTID", "CT3128284");
Removed: user_pref("avg.install.userHPSettings", "hxxp://search.babylon.com/?affID=113357&tt=3612_4&babsrc=HP[...]
Removed: user_pref("avg.install.userSPSettings", "Search the web (Babylon)");
Removed: user_pref("browser.newtab.url", "hxxp://search.babylon.com/?affID=113357&tt=3612_2&babsrc=NT_ss&mntr[...]
Removed: user_pref("browser.search.defaultenginename", "Search the web (Babylon)");
Removed: user_pref("browser.search.order.1", "Search the web (Babylon)");
Removed: user_pref("browser.search.selectedEngine", "01NET.com Customized Web Search");
Removed: user_pref("browser.startup.homepage", "hxxp://search.babylon.com/?affID=113357&tt=3612_4&babsrc=HP_s[...]
Removed: user_pref("extensions.BabylonToolbar.admin", false);
Removed: user_pref("extensions.BabylonToolbar.aflt", "babsst");
Removed: user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");
Removed: user_pref("extensions.BabylonToolbar.autoRvrt", "false");
Removed: user_pref("extensions.BabylonToolbar.babExt", "");
Removed: user_pref("extensions.BabylonToolbar.babTrack", "affID=113357&tt=3612_2");
Removed: user_pref("extensions.BabylonToolbar.bbDpng", "13");
Removed: user_pref("extensions.BabylonToolbar.cntry", "FR");
Removed: user_pref("extensions.BabylonToolbar.dfltLng", "en");
Removed: user_pref("extensions.BabylonToolbar.envrmnt", "production");
Removed: user_pref("extensions.BabylonToolbar.excTlbr", false);
Removed: user_pref("extensions.BabylonToolbar.hdrMd5", "B176DC8CF448B0CD07E6CCDEFFF44167");
Removed: user_pref("extensions.BabylonToolbar.hmpg", false);
Removed: user_pref("extensions.BabylonToolbar.id", "c4ebe8bd00000000000060d81927743c");
Removed: user_pref("extensions.BabylonToolbar.instlDay", "15592");
Removed: user_pref("extensions.BabylonToolbar.instlRef", "sst");
Removed: user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.6.9.1218:21:14");
Removed: user_pref("extensions.BabylonToolbar.mntrvrsn", "1.3.1");
Removed: user_pref("extensions.BabylonToolbar.newTab", false);
Removed: user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Removed: user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Removed: user_pref("extensions.BabylonToolbar.sg", "czb");
Removed: user_pref("extensions.BabylonToolbar.smplGrp", "czb");
Removed: user_pref("extensions.BabylonToolbar.srcExt", "ss");
Removed: user_pref("extensions.BabylonToolbar.tlbrId", "tb9");
Removed: user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=[...]
Removed: user_pref("extensions.BabylonToolbar.vrsn", "1.6.9.12");
Removed: user_pref("extensions.BabylonToolbar.vrsnTs", "1.6.9.1218:21:14");
Removed: user_pref("extensions.BabylonToolbar.vrsni", "1.6.9.12");
Removed: user_pref("extensions.BabylonToolbar_i.babExt", "");
Removed: user_pref("extensions.BabylonToolbar_i.babTrack", "affID=113357&tt=3612_2");
Removed: user_pref("extensions.BabylonToolbar_i.newTab", false);
Removed: user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Removed: user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Removed: user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.6.9.1218:21:14");
Removed: user_pref("extensions.crossriderapp4479.4479.InstallationThankYouPage", true);
Removed: user_pref("extensions.crossriderapp4479.4479.InstallationTime", 1342214737);
Removed: user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.searchUserConifrmation", false[...]
Removed: user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.setHomepage", false);
Removed: user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.setNewTab", false);
Removed: user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.setSearch", false);
Removed: user_pref("extensions.crossriderapp4479.4479.active", true);
Removed: user_pref("extensions.crossriderapp4479.4479.addressbar", "");
Removed: user_pref("extensions.crossriderapp4479.4479.affid", "0");
Removed: user_pref("extensions.crossriderapp4479.4479.backgroundjs", "\n\n\"undefined\"!=typeof _GPL_BG_NEW&&[...]
Removed: user_pref("extensions.crossriderapp4479.4479.backgroundver", 6);
Removed: user_pref("extensions.crossriderapp4479.4479.can_run_bg_code", true);
Removed: user_pref("extensions.crossriderapp4479.4479.certdomaininstaller", "");
Removed: user_pref("extensions.crossriderapp4479.4479.changeprevious", false);
Removed: user_pref("extensions.crossriderapp4479.4479.cookie.InstallationTime.expiration", "Fri Feb 01 2030 0[...]
Removed: user_pref("extensions.crossriderapp4479.4479.cookie.InstallationTime.value", "1342214737");
Removed: user_pref("extensions.crossriderapp4479.4479.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00[...]
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 [...]
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_aoi.value", "1342214737");
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_country_code.expiration", "Thu Sep 20 2012 [...]
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_country_code.value", "%22FR%22");
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_crr.expiration", "Fri Feb 01 2030 00:00:00 [...]
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_crr.value", "1347549723");
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 [...]
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_hotfix20111102645.value", "%221%22");
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_installer_params.expiration", "Fri Feb 01 2[...]
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_installer_params.value", "%7B%22source_id%2[...]
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030[...]
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_parent_zoneid.value", "%2244939%22");
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00[...]
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_product_id.value", "%221242%22");
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:[...]
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_zoneid.value", "%2256055%22");
Removed: user_pref("extensions.crossriderapp4479.4479.description", "Save big with Giant Savings! Coupons dis[...]
Removed: user_pref("extensions.crossriderapp4479.4479.domain", "");
Removed: user_pref("extensions.crossriderapp4479.4479.emailsig", "");
Removed: user_pref("extensions.crossriderapp4479.4479.enablesearch", false);
Removed: user_pref("extensions.crossriderapp4479.4479.exposesites", "");
Removed: user_pref("extensions.crossriderapp4479.4479.fbremoteurl", "");
Removed: user_pref("extensions.crossriderapp4479.4479.group", 0);
Removed: user_pref("extensions.crossriderapp4479.4479.homepage", "");
Removed: user_pref("extensions.crossriderapp4479.4479.iframe", false);
Removed: user_pref("extensions.crossriderapp4479.4479.internaldb.InstallerIdentifiers.expiration", "Fri Feb 0[...]
Removed: user_pref("extensions.crossriderapp4479.4479.internaldb.InstallerIdentifiers.value", "%7B%22installe[...]
Removed: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_appVer.expiration", "Fri Feb 01 20[...]
Removed: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_appVer.value", "35");
Removed: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_lastVersion.expiration", "Fri Feb [...]
Removed: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_lastVersion.value", "0");
Removed: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_meta.expiration", "Fri Feb 01 2030[...]
Removed: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_meta.value", "%7B%7D");
Removed: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_nextCheck.expiration", "Thu Sep 13[...]
Removed: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_nextCheck.value", "true");
Removed: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_queue.expiration", "Fri Feb 01 203[...]
Removed: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_queue.value", "%7B%7D");
Removed: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_remote_resources.expiration", "Fri[...]
Removed: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_remote_resources.value", "%7B%22re[...]
Removed: user_pref("extensions.crossriderapp4479.4479.js", "\n\nif(\"undefined\"!=typeof _GPL_PLUGIN){var _GP[...]
Removed: user_pref("extensions.crossriderapp4479.4479.manifesturl", "");
Removed: user_pref("extensions.crossriderapp4479.4479.name", "Giant Savings");
Removed: user_pref("extensions.crossriderapp4479.4479.newtab", "");
Removed: user_pref("extensions.crossriderapp4479.4479.opensearch", "");
# Updated on 09/09/2012 by Xplode
# Operating System: Windows 7 Home Premium Service Pack 1 (64 bits)
# Username: Alexiane - ALEXIANE-PC
# Boot Mode: Normal
# Executed from: C:\Users\Alexiane\Downloads\adwcleaner (1).exe
# Option [Removal]
***** [Services] *****
Stopped & Removed: Browser Manager
Stopped & Removed: supdate
***** [Files / Folders] *****
Folder Removed: C:\Program Files (x86)\01NET.com
Folder Removed: C:\Program Files (x86)\Boxore
Folder Removed: C:\Program Files (x86)\Conduit
Folder Removed: C:\Program Files (x86)\Giant Savings
Folder Removed: C:\Program Files (x86)\Software
Folder Removed: C:\ProgramData\Babylon
Folder Removed: C:\Users\Alexiane\AppData\Local\Conduit
Folder Removed: C:\Users\Alexiane\AppData\Local\Giant Savings
Folder Removed: C:\Users\Alexiane\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeaihkehdlhkocphopopahkfjcfcphef
Folder Removed: C:\Users\Alexiane\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndkhncnongaclekkbelchmeafffimifj
Folder Removed: C:\Users\Alexiane\AppData\Local\Software
Folder Removed: C:\Users\Alexiane\AppData\LocalLow\01NET.com
Folder Removed: C:\Users\Alexiane\AppData\LocalLow\BabylonToolbar
Folder Removed: C:\Users\Alexiane\AppData\LocalLow\Conduit
Folder Removed: C:\Users\Alexiane\AppData\Roaming\Babylon
Folder Removed: C:\Users\Alexiane\AppData\Roaming\Mozilla\Firefox\Profiles\8dtoo4x9.default\CT3128284
Folder Removed: C:\Users\Alexiane\AppData\Roaming\Mozilla\Firefox\Profiles\8dtoo4x9.default\extensions\{8e5025c2-8ea3-430d-80b8-a14151068a6d}
Folder Removed: C:\Users\Alexiane\AppData\Roaming\Mozilla\Firefox\Profiles\8dtoo4x9.default\extensions\crossriderapp4479@crossrider.com
Folder Removed: C:\Users\Alexiane\AppData\Roaming\Mozilla\Firefox\Profiles\8dtoo4x9.default\extensions\ffxtlbr@babylon.com
Folder Removed: C:\Users\Alexiane\AppData\Roaming\Mozilla\Firefox\Profiles\8dtoo4x9.default\Smartbar
File Removed: C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml
File Removed: C:\user.js
File Removed: C:\Users\Alexiane\AppData\Roaming\Mozilla\Firefox\Profiles\8dtoo4x9.default\searchplugins\Conduit.xml
File Removed: C:\Windows\Tasks\SoftwareUpdateTaskMachineCore.job
File Removed: C:\Windows\Tasks\SoftwareUpdateTaskMachineUA.job
Removed on restart: C:\ProgramData\Browser Manager
***** [Registry] *****
Key Removed: HKCU\Software\AppDataLow\Software\01NET.com
Key Removed: HKCU\Software\AppDataLow\Software\Conduit
Key Removed: HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Removed: HKCU\Software\AppDataLow\Software\Crossrider
Key Removed: HKCU\Software\AppDataLow\Software\Giant Savings
Key Removed: HKCU\Software\AppDataLow\Software\SmartBar
Key Removed: HKCU\Software\AppDataLow\Toolbar
Key Removed: HKCU\Software\BrowserMngr
Key Removed: HKCU\Software\Conduit
Key Removed: HKCU\Software\Cr_Installer
Key Removed: HKCU\Software\DataMngr
Key Removed: HKCU\Software\Google\Chrome\Extensions\ehdmaehkiiampolokajdcelladmnopgp
Key Removed: HKCU\Software\InstalledBrowserExtensions
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110011441179}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8E5025C2-8EA3-430D-80B8-A14151068A6D}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110011441179}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8E5025C2-8EA3-430D-80B8-A14151068A6D}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Removed: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Removed: HKLM\Software\01NET.com
Key Removed: HKLM\Software\Babylon
Key Removed: HKLM\Software\Boxore
Key Removed: HKLM\Software\BrowserMngr
Key Removed: HKLM\SOFTWARE\Classes\AppID\{32451DFC-C23B-4E12-866C-FC7982238504}
Key Removed: HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Removed: HKLM\SOFTWARE\Classes\CrossriderApp0004479.BHO
Key Removed: HKLM\SOFTWARE\Classes\CrossriderApp0004479.BHO.1
Key Removed: HKLM\SOFTWARE\Classes\CrossriderApp0004479.FBApi
Key Removed: HKLM\SOFTWARE\Classes\CrossriderApp0004479.FBApi.1
Key Removed: HKLM\SOFTWARE\Classes\CrossriderApp0004479.Sandbox
Key Removed: HKLM\SOFTWARE\Classes\CrossriderApp0004479.Sandbox.1
Key Removed: HKLM\SOFTWARE\Classes\Installer\Features\64A6E60055D801F4BB8AC269354B72B8
Key Removed: HKLM\SOFTWARE\Classes\Installer\Products\64A6E60055D801F4BB8AC269354B72B8
Key Removed: HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\1C875DDE39636004CA8CDAEC335B4160
Key Removed: HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\BA086F2D38A8E1A47912955A68B3AD24
Key Removed: HKLM\SOFTWARE\Classes\MIME\Database\Content Type\application/x-vnd.software.oneclickctrl.8
Key Removed: HKLM\SOFTWARE\Classes\Software.OneClickCtrl.8
Key Removed: HKLM\SOFTWARE\Classes\SoftwareUpdate.CoreClass
Key Removed: HKLM\SOFTWARE\Classes\SoftwareUpdate.CoreClass.1
Key Removed: HKLM\SOFTWARE\Classes\SoftwareUpdate.OnDemandCOMClassMachine
Key Removed: HKLM\SOFTWARE\Classes\SoftwareUpdate.OnDemandCOMClassMachine.1.0
Key Removed: HKLM\SOFTWARE\Classes\Toolbar.CT3128284
Key Removed: HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440044444479}
Key Removed: HKLM\Software\Conduit
Key Removed: HKLM\Software\DataMngr
Key Removed: HKLM\Software\ilivid
Key Removed: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011441179}
Key Removed: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{151867D5-7359-40AF-8764-66E58D06283C}
Key Removed: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63435521-BE15-44D9-A4BE-A5A0000D9662}
Key Removed: HKLM\SOFTWARE\MozillaPlugins\@www.dlmanager.net/omaha/tools//Software Update;version=8
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{092A2C6B-43EE-4F9F-8F8E-14ED5E11C14B}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{11111111-1111-1111-1111-110011441179}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{151867D5-7359-40AF-8764-66E58D06283C}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{22222222-2222-2222-2222-220022442279}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{257A6158-1416-4B31-9BF8-29FF49F3814F}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{32451DFC-C23B-4E12-866C-FC7982238504}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{33333333-3333-3333-3333-330033443379}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{63435521-BE15-44D9-A4BE-A5A0000D9662}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{8E5025C2-8EA3-430D-80B8-A14151068A6D}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AC5C4189-A8A0-4C9D-8910-C9CEF8360077}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{55555555-5555-5555-5555-550055445579}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{66666666-6666-6666-6666-660066446679}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{736EF78E-5A04-46F9-893E-EDEC6EA5DF45}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{77777777-7777-7777-7777-770077447779}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7A1BCE27-099C-4628-B63A-AEC00C6376B3}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{AF3AFF7C-B9E9-48DD-9002-212B6DEAAC02}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DBE82879-914A-422F-BAE9-2ECC80BE536F}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E12D7149-73EF-45E4-A1E9-99FD7DAE62D3}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F2B184F1-547C-4EE9-BFC4-AC489C7077D9}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ehdmaehkiiampolokajdcelladmnopgp
Key Removed: HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jeaihkehdlhkocphopopahkfjcfcphef
Key Removed: HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ndkhncnongaclekkbelchmeafffimifj
Key Removed: HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011441179}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{26D526F7-A4DD-48F8-882E-A4068C528437}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{63435521-BE15-44D9-A4BE-A5A0000D9662}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{96ACE83C-8570-497A-A356-1B83994CC679}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110011441179}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5025C2-8EA3-430D-80B8-A14151068A6D}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{006E6A46-8D55-4F10-BBA8-2C9653B4278B}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Key Removed: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\01NET.com Toolbar
Key Removed: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Giant Savings
Key Removed: HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550055445579}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660066446679}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{77777777-7777-7777-7777-770077447779}
Key Removed: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\1C875DDE39636004CA8CDAEC335B4160
Key Removed: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\BA086F2D38A8E1A47912955A68B3AD24
Key Removed: HKU\S-1-5-21-1282535277-2699107094-3230090534-1002\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Data Removed: HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\browse~1\22630~1.40\{16cdf~1\browse~1.dll c:\windows\syswow64\nvinit.dll
Value Removed: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{8E5025C2-8EA3-430D-80B8-A14151068A6D}]
Value Removed: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{8E5025C2-8EA3-430D-80B8-A14151068A6D}]
Value Removed: HKCU\Software\Mozilla\Firefox\Extensions [{b64982b1-d112-42b5-b1e4-d3867c4533f8}]
Value Removed: HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{8E5025C2-8EA3-430D-80B8-A14151068A6D}]
Value Removed: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Boxore Client]
Value Removed: HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{8E5025C2-8EA3-430D-80B8-A14151068A6D}]
Value Removed: HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]
***** [Browsers] *****
-\\ Internet Explorer v9.0.8112.16421
Restored: [HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restored: [HKCU\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restored: [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restored: [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings - DefaultScope]
Restored: [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restored: [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restored: [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Restored: [HKU\S-1-5-21-1282535277-2699107094-3230090534-1000\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
Replaced: [HKCU\Software\Microsoft\Internet Explorer\Main - BrowserMngr Start Page] = hxxp://search.babylon.com/?affID=113357&tt=3612_4&babsrc=HP_ss&mntrId=c4ebe8bd00000000000060d81927743c --> hxxp://www.google.com
Replaced: [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://search.babylon.com/?affID=113357&tt=3612_4&babsrc=NT_ss&mntrId=c4ebe8bd00000000000060d81927743c --> hxxp://www.google.com
-\\ Mozilla Firefox v14.0.1 (fr)
Profile name: default
File: C:\Users\Alexiane\AppData\Roaming\Mozilla\Firefox\Profiles\8dtoo4x9.default\prefs.js
C:\Users\Alexiane\AppData\Roaming\Mozilla\Firefox\Profiles\8dtoo4x9.default\user.js ... Removed!
Removed: user_pref("CT3128284.1000082.isPlayDisplay", "true");
Removed: user_pref("CT3128284.1000082.state", "{\"state\":\"stopped\",\"text\":\"RMC\",\"description\":\"RMC\[...]
Removed: user_pref("CT3128284.1000234.TWC_TMP_city", "LYON");
Removed: user_pref("CT3128284.1000234.TWC_TMP_country", "FR");
Removed: user_pref("CT3128284.3128284a129638404769606799000000paramsGK0", "{\"updateReqTime\":1347549716259,\[...]
Removed: user_pref("CT3128284.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Removed: user_pref("CT3128284.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Removed: user_pref("CT3128284.FirstTime", "true");
Removed: user_pref("CT3128284.FirstTimeFF3", "true");
Removed: user_pref("CT3128284.RSS_Pub_Config", "{\"settings\":{\"icon\":\"hxxp://storage.conduit.com/bankimag[...]
Removed: user_pref("CT3128284.RSSapp3128284a129638404769606799000000ReadItemsArr", "%7B%22572365%22%3A0%2C%22[...]
Removed: user_pref("CT3128284.RSSapp3128284a129638404769606799000000cat0", "%5B%7B%22type%22%3A%22rss%22%2C%2[...]
Removed: user_pref("CT3128284.RSSapp3128284a129638404769606799000000cat1", "%5B%7B%22type%22%3A%22rss%22%2C%2[...]
Removed: user_pref("CT3128284.RSSapp3128284a129638404769606799000000embeddedVersion", "2.4.0");
Removed: user_pref("CT3128284.RSSapp3128284a129638404769606799000000feedsObj", "%7B%22channels%22%3A%7B%22id%[...]
Removed: user_pref("CT3128284.RSSapp3128284a129638404769606799000000lastReportTime", "1347549717256 ");
Removed: user_pref("CT3128284.RSSapp3128284a129638404769606799000000newFeeds", "newFeeds");
Removed: user_pref("CT3128284.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT312[...]
Removed: user_pref("CT3128284.UserID", "UN39127353105834452");
Removed: user_pref("CT3128284.addressBarTakeOverEnabledInHidden", "true");
Removed: user_pref("CT3128284.autoDisableScopes", -1);
Removed: user_pref("CT3128284.browser.search.defaultthis.engineName", true);
Removed: user_pref("CT3128284.defaultSearch", "true");
Removed: user_pref("CT3128284.embeddedsData", "[{\"appId\":\"129638404645388048\",\"apiPermissions\":{\"cross[...]
Removed: user_pref("CT3128284.enableAlerts", "always");
Removed: user_pref("CT3128284.enableSearchFromAddressBar", "true");
Removed: user_pref("CT3128284.firstTimeDialogOpened", "true");
Removed: user_pref("CT3128284.fixPageNotFoundError", "true");
Removed: user_pref("CT3128284.fixPageNotFoundErrorInHidden", "true");
Removed: user_pref("CT3128284.fixUrls", true);
Removed: user_pref("CT3128284.installId", "ct3128284_01net.com.exe");
Removed: user_pref("CT3128284.installType", "ConduitNSISIntegration");
Removed: user_pref("CT3128284.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Removed: user_pref("CT3128284.isNewTabEnabled", true);
Removed: user_pref("CT3128284.isPerformedSmartBarTransition", "true");
Removed: user_pref("CT3128284.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Removed: user_pref("CT3128284.keyword", true);
Removed: user_pref("CT3128284.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%[...]
Removed: user_pref("CT3128284.openThankYouPage", "false");
Removed: user_pref("CT3128284.openUninstallPage", "true");
Removed: user_pref("CT3128284.search.searchAppId", "129638404645388048");
Removed: user_pref("CT3128284.search.searchCount", "0");
Removed: user_pref("CT3128284.searchInNewTabEnabledInHidden", "true");
Removed: user_pref("CT3128284.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Removed: user_pref("CT3128284.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Removed: user_pref("CT3128284.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"3\[...]
Removed: user_pref("CT3128284.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Removed: user_pref("CT3128284.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Removed: user_pref("CT3128284.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Removed: user_pref("CT3128284.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Removed: user_pref("CT3128284.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data[...]
Removed: user_pref("CT3128284.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1345076964287");
Removed: user_pref("CT3128284.serviceLayer_services_appTracking_lastUpdate", "1345078567736");
Removed: user_pref("CT3128284.serviceLayer_services_appsMetadata_lastUpdate", "1345076963695");
Removed: user_pref("CT3128284.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1345078567916");
Removed: user_pref("CT3128284.serviceLayer_services_login_10.10.12.503_lastUpdate", "1345970317706");
Removed: user_pref("CT3128284.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1345078567971");
Removed: user_pref("CT3128284.serviceLayer_services_searchAPI_lastUpdate", "1345076960166");
Removed: user_pref("CT3128284.serviceLayer_services_serviceMap_lastUpdate", "1345076959250");
Removed: user_pref("CT3128284.serviceLayer_services_toolbarContextMenu_lastUpdate", "1345078567820");
Removed: user_pref("CT3128284.serviceLayer_services_toolbarSettings_lastUpdate", "1345076960279");
Removed: user_pref("CT3128284.serviceLayer_services_translation_lastUpdate", "1345076964046");
Removed: user_pref("CT3128284.settingsINI", true);
Removed: user_pref("CT3128284.shouldFirstTimeDialog", "false");
Removed: user_pref("CT3128284.smartbar.CTID", "CT3128284");
Removed: user_pref("CT3128284.smartbar.Uninstall", "0");
Removed: user_pref("CT3128284.smartbar.homepage", true);
Removed: user_pref("CT3128284.smartbar.toolbarName", "01NET.com ");
Removed: user_pref("CT3128284.toolbarBornServerTime", "26-8-2012");
Removed: user_pref("CT3128284.toolbarCurrentServerTime", "26-8-2012");
Removed: user_pref("CT3128284.twitter_v1.8.0_twitter_app_open_t_f", "false");
Removed: user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3128284&SearchSource=1[...]
Removed: user_pref("Smartbar.ConduitSearchEngineList", "01NET.com Customized Web Search");
Removed: user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3128284[...]
Removed: user_pref("Smartbar.keywordURLSelectedCTID", "CT3128284");
Removed: user_pref("avg.install.userHPSettings", "hxxp://search.babylon.com/?affID=113357&tt=3612_4&babsrc=HP[...]
Removed: user_pref("avg.install.userSPSettings", "Search the web (Babylon)");
Removed: user_pref("browser.newtab.url", "hxxp://search.babylon.com/?affID=113357&tt=3612_2&babsrc=NT_ss&mntr[...]
Removed: user_pref("browser.search.defaultenginename", "Search the web (Babylon)");
Removed: user_pref("browser.search.order.1", "Search the web (Babylon)");
Removed: user_pref("browser.search.selectedEngine", "01NET.com Customized Web Search");
Removed: user_pref("browser.startup.homepage", "hxxp://search.babylon.com/?affID=113357&tt=3612_4&babsrc=HP_s[...]
Removed: user_pref("extensions.BabylonToolbar.admin", false);
Removed: user_pref("extensions.BabylonToolbar.aflt", "babsst");
Removed: user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");
Removed: user_pref("extensions.BabylonToolbar.autoRvrt", "false");
Removed: user_pref("extensions.BabylonToolbar.babExt", "");
Removed: user_pref("extensions.BabylonToolbar.babTrack", "affID=113357&tt=3612_2");
Removed: user_pref("extensions.BabylonToolbar.bbDpng", "13");
Removed: user_pref("extensions.BabylonToolbar.cntry", "FR");
Removed: user_pref("extensions.BabylonToolbar.dfltLng", "en");
Removed: user_pref("extensions.BabylonToolbar.envrmnt", "production");
Removed: user_pref("extensions.BabylonToolbar.excTlbr", false);
Removed: user_pref("extensions.BabylonToolbar.hdrMd5", "B176DC8CF448B0CD07E6CCDEFFF44167");
Removed: user_pref("extensions.BabylonToolbar.hmpg", false);
Removed: user_pref("extensions.BabylonToolbar.id", "c4ebe8bd00000000000060d81927743c");
Removed: user_pref("extensions.BabylonToolbar.instlDay", "15592");
Removed: user_pref("extensions.BabylonToolbar.instlRef", "sst");
Removed: user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.6.9.1218:21:14");
Removed: user_pref("extensions.BabylonToolbar.mntrvrsn", "1.3.1");
Removed: user_pref("extensions.BabylonToolbar.newTab", false);
Removed: user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Removed: user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Removed: user_pref("extensions.BabylonToolbar.sg", "czb");
Removed: user_pref("extensions.BabylonToolbar.smplGrp", "czb");
Removed: user_pref("extensions.BabylonToolbar.srcExt", "ss");
Removed: user_pref("extensions.BabylonToolbar.tlbrId", "tb9");
Removed: user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=[...]
Removed: user_pref("extensions.BabylonToolbar.vrsn", "1.6.9.12");
Removed: user_pref("extensions.BabylonToolbar.vrsnTs", "1.6.9.1218:21:14");
Removed: user_pref("extensions.BabylonToolbar.vrsni", "1.6.9.12");
Removed: user_pref("extensions.BabylonToolbar_i.babExt", "");
Removed: user_pref("extensions.BabylonToolbar_i.babTrack", "affID=113357&tt=3612_2");
Removed: user_pref("extensions.BabylonToolbar_i.newTab", false);
Removed: user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Removed: user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Removed: user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.6.9.1218:21:14");
Removed: user_pref("extensions.crossriderapp4479.4479.InstallationThankYouPage", true);
Removed: user_pref("extensions.crossriderapp4479.4479.InstallationTime", 1342214737);
Removed: user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.searchUserConifrmation", false[...]
Removed: user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.setHomepage", false);
Removed: user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.setNewTab", false);
Removed: user_pref("extensions.crossriderapp4479.4479.InstallationUserSettings.setSearch", false);
Removed: user_pref("extensions.crossriderapp4479.4479.active", true);
Removed: user_pref("extensions.crossriderapp4479.4479.addressbar", "");
Removed: user_pref("extensions.crossriderapp4479.4479.affid", "0");
Removed: user_pref("extensions.crossriderapp4479.4479.backgroundjs", "\n\n\"undefined\"!=typeof _GPL_BG_NEW&&[...]
Removed: user_pref("extensions.crossriderapp4479.4479.backgroundver", 6);
Removed: user_pref("extensions.crossriderapp4479.4479.can_run_bg_code", true);
Removed: user_pref("extensions.crossriderapp4479.4479.certdomaininstaller", "");
Removed: user_pref("extensions.crossriderapp4479.4479.changeprevious", false);
Removed: user_pref("extensions.crossriderapp4479.4479.cookie.InstallationTime.expiration", "Fri Feb 01 2030 0[...]
Removed: user_pref("extensions.crossriderapp4479.4479.cookie.InstallationTime.value", "1342214737");
Removed: user_pref("extensions.crossriderapp4479.4479.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00[...]
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 [...]
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_aoi.value", "1342214737");
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_country_code.expiration", "Thu Sep 20 2012 [...]
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_country_code.value", "%22FR%22");
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_crr.expiration", "Fri Feb 01 2030 00:00:00 [...]
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_crr.value", "1347549723");
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 [...]
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_hotfix20111102645.value", "%221%22");
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_installer_params.expiration", "Fri Feb 01 2[...]
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_installer_params.value", "%7B%22source_id%2[...]
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030[...]
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_parent_zoneid.value", "%2244939%22");
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00[...]
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_product_id.value", "%221242%22");
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:[...]
Removed: user_pref("extensions.crossriderapp4479.4479.cookie._GPL_zoneid.value", "%2256055%22");
Removed: user_pref("extensions.crossriderapp4479.4479.description", "Save big with Giant Savings! Coupons dis[...]
Removed: user_pref("extensions.crossriderapp4479.4479.domain", "");
Removed: user_pref("extensions.crossriderapp4479.4479.emailsig", "");
Removed: user_pref("extensions.crossriderapp4479.4479.enablesearch", false);
Removed: user_pref("extensions.crossriderapp4479.4479.exposesites", "");
Removed: user_pref("extensions.crossriderapp4479.4479.fbremoteurl", "");
Removed: user_pref("extensions.crossriderapp4479.4479.group", 0);
Removed: user_pref("extensions.crossriderapp4479.4479.homepage", "");
Removed: user_pref("extensions.crossriderapp4479.4479.iframe", false);
Removed: user_pref("extensions.crossriderapp4479.4479.internaldb.InstallerIdentifiers.expiration", "Fri Feb 0[...]
Removed: user_pref("extensions.crossriderapp4479.4479.internaldb.InstallerIdentifiers.value", "%7B%22installe[...]
Removed: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_appVer.expiration", "Fri Feb 01 20[...]
Removed: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_appVer.value", "35");
Removed: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_lastVersion.expiration", "Fri Feb [...]
Removed: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_lastVersion.value", "0");
Removed: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_meta.expiration", "Fri Feb 01 2030[...]
Removed: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_meta.value", "%7B%7D");
Removed: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_nextCheck.expiration", "Thu Sep 13[...]
Removed: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_nextCheck.value", "true");
Removed: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_queue.expiration", "Fri Feb 01 203[...]
Removed: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_queue.value", "%7B%7D");
Removed: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_remote_resources.expiration", "Fri[...]
Removed: user_pref("extensions.crossriderapp4479.4479.internaldb.Resources_remote_resources.value", "%7B%22re[...]
Removed: user_pref("extensions.crossriderapp4479.4479.js", "\n\nif(\"undefined\"!=typeof _GPL_PLUGIN){var _GP[...]
Removed: user_pref("extensions.crossriderapp4479.4479.manifesturl", "");
Removed: user_pref("extensions.crossriderapp4479.4479.name", "Giant Savings");
Removed: user_pref("extensions.crossriderapp4479.4479.newtab", "");
Removed: user_pref("extensions.crossriderapp4479.4479.opensearch", "");
I just used AdwCleaner. (I followed the advice of billmaxime and Homerlulu, whom I thank in passing.)
After restarting my PC, I noticed that Google had become my default page again.
Should I still take a look at Malwarebytes?
@mortze4: I know that Babylon is not a virus, but... I didn't really know how to define it. Thanks nonetheless for your response.
After restarting my PC, I noticed that Google had become my default page again.
Should I still take a look at Malwarebytes?
@mortze4: I know that Babylon is not a virus, but... I didn't really know how to define it. Thanks nonetheless for your response.
Your PC was a real piece of crap filled with adware!
Anyway, run a Malwarebytes like Billmaxime advised you to, and post the report
At your service.
Anyway, run a Malwarebytes like Billmaxime advised you to, and post the report
At your service.
AdwCleaner doesn't work, I used it to remove Babylon, but it deleted several useful things and I still have Babylon!
Hello,
Could you post the report that removed "useful things" so that I can pass the information on to Xplode, please?
For the remnants of Babylon, see here:
https://www.malekal.com/desinstaller-un-programme-et-extensions-firefox/
https://www.malekal.com/reparer-google-chrome/?t=35837&start=
Thank you
Could you post the report that removed "useful things" so that I can pass the information on to Xplode, please?
For the remnants of Babylon, see here:
https://www.malekal.com/desinstaller-un-programme-et-extensions-firefox/
https://www.malekal.com/reparer-google-chrome/?t=35837&start=
Thank you
never download those little spywares and other antivirus programs suggested to you here!!! they are viruses themselves that will only damage your PC!!!
to remove Babylon.. simply delete Firefox.. which will eliminate the unwanted plug-ins!!! reinstall it afterwards when the operation is complete!!!
to remove Babylon.. simply delete Firefox.. which will eliminate the unwanted plug-ins!!! reinstall it afterwards when the operation is complete!!!
-"Never download those little spywares and other anti-viruses that are offered to you here"
What do you mean by here? The CCM site? You are misinformed because CCM's policy is to fight against adwares. Many freeware sites do indeed add adware to the offered software to finance their site, but not here.
To avoid getting adware on your PC, just don't download anything randomly, uncheck commercial offers (toolbars, browsers, free scans, emoticons, etc...) and download from safe places (the software creator's site or CCM) --> See complete explanation above.
-"They are themselves viruses that would only damage your PC!!!"
An adware is not a virus. It's advertising software. It won't damage your PC like some viruses but will cause annoyances and nuisances (page redirections that can lead to porn or pedophile sites with the risks that we know for children; unwanted pop-up ads, fraudulent commercial offers, spying on your privacy for commercial purposes through your consumption habits, etc...)
- "To remove Babylon... simply uninstall Firefox.. which will eliminate the unwanted plug-ins!!! Reinstall it afterwards once the operation is complete!!!"
Certainly not. First of all, Babylon does not only install on Firefox, it also affects other browsers including Internet Explorer. Then, there is the registry where keys remain.
What do you mean by here? The CCM site? You are misinformed because CCM's policy is to fight against adwares. Many freeware sites do indeed add adware to the offered software to finance their site, but not here.
To avoid getting adware on your PC, just don't download anything randomly, uncheck commercial offers (toolbars, browsers, free scans, emoticons, etc...) and download from safe places (the software creator's site or CCM) --> See complete explanation above.
-"They are themselves viruses that would only damage your PC!!!"
An adware is not a virus. It's advertising software. It won't damage your PC like some viruses but will cause annoyances and nuisances (page redirections that can lead to porn or pedophile sites with the risks that we know for children; unwanted pop-up ads, fraudulent commercial offers, spying on your privacy for commercial purposes through your consumption habits, etc...)
- "To remove Babylon... simply uninstall Firefox.. which will eliminate the unwanted plug-ins!!! Reinstall it afterwards once the operation is complete!!!"
Certainly not. First of all, Babylon does not only install on Firefox, it also affects other browsers including Internet Explorer. Then, there is the registry where keys remain.
Hello,
I’ve also tried everything to remove Babylon, as well as Claro and SweetIM that were ruining my life, nothing worked, and this morning, by miracle, I succeeded.
I am using Windows 7, default search engine: Google.
Here’s how I did it:
Go to Google, then do the following
1) right-click on the three little lines at the top right
2) click on "Settings"
3) under "On startup"
a) select: "Open a specific page or set of pages"
b) left-click on "Set pages"
c) remove: Babylon, Claro, Mystart, SweetIM, etc. !!!!
d) leave only the search engine that interests you (for me GOOGLE)
e) click on OK
4) under "Search" (a little further down)
a) left-click on "Manage search engines"
b) delete all the search engines as before
c) leave only the one that interests you
d) click on OK
And there you go, no more pirate tabs, hopefully, it lasts
Hoping this helps you.
Best regards, Aldo
I’ve also tried everything to remove Babylon, as well as Claro and SweetIM that were ruining my life, nothing worked, and this morning, by miracle, I succeeded.
I am using Windows 7, default search engine: Google.
Here’s how I did it:
Go to Google, then do the following
1) right-click on the three little lines at the top right
2) click on "Settings"
3) under "On startup"
a) select: "Open a specific page or set of pages"
b) left-click on "Set pages"
c) remove: Babylon, Claro, Mystart, SweetIM, etc. !!!!
d) leave only the search engine that interests you (for me GOOGLE)
e) click on OK
4) under "Search" (a little further down)
a) left-click on "Manage search engines"
b) delete all the search engines as before
c) leave only the one that interests you
d) click on OK
And there you go, no more pirate tabs, hopefully, it lasts
Hoping this helps you.
Best regards, Aldo
Hello! I myself have been annoyed by the fucking Babylon, I tried, I think, everything possible and I attempted another thing that worked wonderfully under Windows 7.
Open a web page > options (top right) > Settings > Extensions (top left) > find "iClaro" and click on the trash can.
It's really simple and it worked for me, I hope it will be the same for you! ;-)
Emilie
Open a web page > options (top right) > Settings > Extensions (top left) > find "iClaro" and click on the trash can.
It's really simple and it worked for me, I hope it will be the same for you! ;-)
Emilie
re
yes you can do it (to reassure you)
do a complete scan (all disks)
the scan lasts about 2h
see you later
yes you can do it (to reassure you)
do a complete scan (all disks)
the scan lasts about 2h
see you later
And another one (me!) who can't get rid of this crap!
I've tried all the methods described: uninstallation in programs and features, browser reset, and even malware with safemode startup. But nothing works, it’s still there. So I need help. I launched AdwCleaner last week but preferred to try the other methods first before bothering you here, here's the report (but today I ran it again twice, of course, empty report, I hope that doesn't mess everything up..).
Is there anyone to help me? A big thank you!
# AdwCleaner v1.301 - Report created on 10/29/2012 at 22:08:38
# Updated on 08/28/11 at 21:00 by Xplode
# Operating System: Windows Vista (TM) Home Premium Service Pack 2 (32-bit)
# Username: Marie - JACQUES (Administrator)
# Executed from: C:\Users\Marie\Desktop\pc repair\adwcleaner0.exe
# Option [Removal]
***** [KillNav] *****
# chrome.exe [PID:4568] -> Killed
***** [Processes] *****
***** [Services] *****
***** [Files / Folders] *****
Folder Deleted: C:\Users\Marie\AppData\Roaming\Babylon
Folder Deleted: C:\Users\Marie\AppData\Local\Conduit
Folder Deleted: C:\Program Files\Conduit
Folder Deleted: C:\Users\Marie\AppData\Roaming\Mozilla\Firefox\Profiles\1u7hk1tx.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}
Folder Deleted: C:\Users\Marie\AppData\Roaming\Mozilla\Firefox\Profiles\1u7hk1tx.default\extensions\ffxtlbr@babylon.com
Folder Deleted: C:\Users\Marie\AppData\Roaming\Mozilla\Firefox\Profiles\1u7hk1tx.default\searchqutoolbar
***** [Registry] *****
Key Deleted: HKCU\Software\DataMngr
Key Deleted: HKCU\Software\AppDataLow\Toolbar
Key Deleted: HKCU\Software\AppDataLow\Software\Conduit
Key Deleted: HKCU\Software\AppDataLow\Software\PriceGong
Key Deleted: HKLM\SOFTWARE\Conduit
Key Deleted: HKLM\SOFTWARE\DataMngr
Key Deleted: HKLM\SOFTWARE\SearchquMediabarTb
Key Deleted: HKLM\SOFTWARE\Classes\Conduit.Engine
Key Deleted: HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard
Key Deleted: HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard.1
Key Deleted: HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO
Key Deleted: HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO.1
Key Deleted: HKLM\SOFTWARE\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153}
Key Deleted: HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB}
Key Deleted: HKLM\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Deleted: HKLM\SOFTWARE\Classes\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1}
Key Deleted: HKLM\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}
Key Deleted: HKLM\SOFTWARE\Classes\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515}
Key Deleted: HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Key Deleted: HKLM\SOFTWARE\Classes\CLSID\{9D717F81-9148-4f12-8568-69135F087DB0}
Key Deleted: HKLM\SOFTWARE\Classes\CLSID\{99079a25-328f-4bd4-be04-00955acaa0a7}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
Key Deleted: HKLM\SOFTWARE\Classes\TypeLib\{01BCB858-2F62-4F06-A8F4-48F927C15333}
Key Deleted: HKLM\SOFTWARE\Classes\TypeLib\{841D5A49-E48D-413C-9C28-EB3D9081D705}
Key Deleted: HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
Key Deleted: HKLM\SOFTWARE\Classes\TypeLib\{5B4144E1-B61D-495A-9A50-CD1A95D86D15}
Key Deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Key Deleted: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Key Deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99079a25-328f-4bd4-be04-00955acaa0a7}
Key Deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9D717F81-9148-4f12-8568-69135F087DB0}
Key Deleted: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99079a25-328f-4bd4-be04-00955acaa0a7}
Key Deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079a25-328f-4bd4-be04-00955acaa0a7}
Key Deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4f12-8568-69135F087DB0}
Value Deleted: HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{99079a25-328f-4bd4-be04-00955acaa0a7}]
Value Deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [DataMngr]
***** [Browsers] *****
-\\ Internet Explorer v9.0.8112.16421
[OK] The registry contains no illegitimate entries.
-\\ Mozilla Firefox v11.0 (fr)
Profile: 1u7hk1tx.default
File: C:\Users\Marie\AppData\Roaming\Mozilla\Firefox\Profiles\1u7hk1tx.default\prefs.js
Deleted: user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Deleted: user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
Deleted: user_pref("extensions.BabylonToolbar_i.babExt", "");
Deleted: user_pref("extensions.BabylonToolbar_i.babTrack", "affID=108988");
Deleted: user_pref("extensions.BabylonToolbar_i.hardId", "400e653100000000000000210030aa20");
Deleted: user_pref("extensions.BabylonToolbar_i.id", "400e653100000000000000210030aa20");
Deleted: user_pref("extensions.BabylonToolbar_i.instlDay", "15422");
Deleted: user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
Deleted: user_pref("extensions.BabylonToolbar_i.newTab", false);
Deleted: user_pref("extensions.BabylonToolbar_i.newTabUrl", "http://search.babylon.com/?AF=110810&babsrc=NT_ss&mntrId=400e653100000000000000210030aa20");
Deleted: user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
Deleted: user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
Deleted: user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Deleted: user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Deleted: user_pref("extensions.BabylonToolbar_i.tlbrId", "base");
Deleted: user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
Deleted: user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1721:14:11");
Deleted: user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
Deleted: user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"{20a82645-c095-46ed-80e3-08825760534b}\":{\"descriptor\":\"c:\\\\Windows\\\\Microsoft.NET\\\\Framework\\\\v3.5\\\\Windows Presentation Foundation\\\\DotNetAssistantExtension\",\"mtime\":1251853261680}}},{\"name\":\"app-global\",\"addons\":{\"{1FD91A9C-410C-4090-BBCC-55D3450EF433}\":{\"descriptor\":\"C:\\\\Program Files\\\\Searchqu Toolbar\\\\Datamngr\\\\FirefoxExtension\",\"mtime\":1333038626766},\"{972ce4c6-7e08-4474-a285-3208198ce6fd}\":{\"descriptor\":\"C:\\\\Program Files\\\\Mozilla Firefox\\\\extensions\\\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\",\"mtime\":1340705987164}}},{\"name\":\"app-profile\",\"addons\":{\"ffxtlbr@babylon.com\":{\"descriptor\":\"C:\\\\Users\\\\Marie\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\1u7hk1tx.default\\\\extensions\\\\ffxtlbr@babylon.com\",\"mtime\":1332533643698},\"foxyproxy@eric.h.jung\":{\"descriptor\":\"C:\\\\Users\\\\Marie\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\1u7hk1tx.default\\\\extensions\\\\foxyproxy@eric.h.jung\",\"mtime\":1349716510906},\"helperbar@helperbar.com\":{\"descriptor\":\"C:\\\\Users\\\\Marie\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\1u7hk1tx.default\\\\extensions\\\\helperbar@helperbar.com\",\"mtime\":1351080370648},\"{1FD91A9C-410C-4090-BBCC-55D3450EF433}\":{\"descriptor\":\"C:\\\\Program Files\\\\Searchqu Toolbar\\\\Datamngr\\\\FirefoxExtension\",\"mtime\":1333038626766},\"{33e0daa6-3af3-d8b5-6752-10e949c61516}\":{\"descriptor\":\"C:\\\\Users\\\\Marie\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\1u7hk1tx.default\\\\extensions\\\\{33e0daa6-3af3-d8b5-6752-10e949c61516}\",\"mtime\":1323531246655},\"{99079a25-328f-4bd4-be04-00955acaa0a7}\":{\"descriptor\":\"C:\\\\Users\\\\Marie\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\1u7hk1tx.default\\\\extensions\\\\{99079a25-328f-4bd4-be04-00955acaa0a7}\",\"mtime\":1333038614172}}}]");
-\\ Google Chrome v [Unable to retrieve version]
File: C:\Users\Marie\AppData\Local\Google\Chrome\User Data\Default\Preferences
[OK] The file contains no illegitimate entries.
*************************
AdwCleaner[S1].txt - [1484 bytes] - [08/28/2011 20:15:22]
AdwCleaner[S2].txt - [1088 bytes] - [08/28/2011 20:56:44]
AdwCleaner[R1].txt - [1209 bytes] - [10/20/2011 13:10:38]
AdwCleaner[S3].txt - [8336 bytes] - [10/29/2012 22:08:38]
########## EOF - C:\AdwCleaner[S3].txt - [8464 bytes] ##########
I've tried all the methods described: uninstallation in programs and features, browser reset, and even malware with safemode startup. But nothing works, it’s still there. So I need help. I launched AdwCleaner last week but preferred to try the other methods first before bothering you here, here's the report (but today I ran it again twice, of course, empty report, I hope that doesn't mess everything up..).
Is there anyone to help me? A big thank you!
# AdwCleaner v1.301 - Report created on 10/29/2012 at 22:08:38
# Updated on 08/28/11 at 21:00 by Xplode
# Operating System: Windows Vista (TM) Home Premium Service Pack 2 (32-bit)
# Username: Marie - JACQUES (Administrator)
# Executed from: C:\Users\Marie\Desktop\pc repair\adwcleaner0.exe
# Option [Removal]
***** [KillNav] *****
# chrome.exe [PID:4568] -> Killed
***** [Processes] *****
***** [Services] *****
***** [Files / Folders] *****
Folder Deleted: C:\Users\Marie\AppData\Roaming\Babylon
Folder Deleted: C:\Users\Marie\AppData\Local\Conduit
Folder Deleted: C:\Program Files\Conduit
Folder Deleted: C:\Users\Marie\AppData\Roaming\Mozilla\Firefox\Profiles\1u7hk1tx.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}
Folder Deleted: C:\Users\Marie\AppData\Roaming\Mozilla\Firefox\Profiles\1u7hk1tx.default\extensions\ffxtlbr@babylon.com
Folder Deleted: C:\Users\Marie\AppData\Roaming\Mozilla\Firefox\Profiles\1u7hk1tx.default\searchqutoolbar
***** [Registry] *****
Key Deleted: HKCU\Software\DataMngr
Key Deleted: HKCU\Software\AppDataLow\Toolbar
Key Deleted: HKCU\Software\AppDataLow\Software\Conduit
Key Deleted: HKCU\Software\AppDataLow\Software\PriceGong
Key Deleted: HKLM\SOFTWARE\Conduit
Key Deleted: HKLM\SOFTWARE\DataMngr
Key Deleted: HKLM\SOFTWARE\SearchquMediabarTb
Key Deleted: HKLM\SOFTWARE\Classes\Conduit.Engine
Key Deleted: HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard
Key Deleted: HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard.1
Key Deleted: HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO
Key Deleted: HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO.1
Key Deleted: HKLM\SOFTWARE\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153}
Key Deleted: HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB}
Key Deleted: HKLM\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Deleted: HKLM\SOFTWARE\Classes\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1}
Key Deleted: HKLM\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}
Key Deleted: HKLM\SOFTWARE\Classes\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515}
Key Deleted: HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Key Deleted: HKLM\SOFTWARE\Classes\CLSID\{9D717F81-9148-4f12-8568-69135F087DB0}
Key Deleted: HKLM\SOFTWARE\Classes\CLSID\{99079a25-328f-4bd4-be04-00955acaa0a7}
Key Deleted: HKLM\SOFTWARE\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
Key Deleted: HKLM\SOFTWARE\Classes\TypeLib\{01BCB858-2F62-4F06-A8F4-48F927C15333}
Key Deleted: HKLM\SOFTWARE\Classes\TypeLib\{841D5A49-E48D-413C-9C28-EB3D9081D705}
Key Deleted: HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
Key Deleted: HKLM\SOFTWARE\Classes\TypeLib\{5B4144E1-B61D-495A-9A50-CD1A95D86D15}
Key Deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Key Deleted: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Key Deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99079a25-328f-4bd4-be04-00955acaa0a7}
Key Deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9D717F81-9148-4f12-8568-69135F087DB0}
Key Deleted: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99079a25-328f-4bd4-be04-00955acaa0a7}
Key Deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079a25-328f-4bd4-be04-00955acaa0a7}
Key Deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4f12-8568-69135F087DB0}
Value Deleted: HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{99079a25-328f-4bd4-be04-00955acaa0a7}]
Value Deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [DataMngr]
***** [Browsers] *****
-\\ Internet Explorer v9.0.8112.16421
[OK] The registry contains no illegitimate entries.
-\\ Mozilla Firefox v11.0 (fr)
Profile: 1u7hk1tx.default
File: C:\Users\Marie\AppData\Roaming\Mozilla\Firefox\Profiles\1u7hk1tx.default\prefs.js
Deleted: user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Deleted: user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
Deleted: user_pref("extensions.BabylonToolbar_i.babExt", "");
Deleted: user_pref("extensions.BabylonToolbar_i.babTrack", "affID=108988");
Deleted: user_pref("extensions.BabylonToolbar_i.hardId", "400e653100000000000000210030aa20");
Deleted: user_pref("extensions.BabylonToolbar_i.id", "400e653100000000000000210030aa20");
Deleted: user_pref("extensions.BabylonToolbar_i.instlDay", "15422");
Deleted: user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
Deleted: user_pref("extensions.BabylonToolbar_i.newTab", false);
Deleted: user_pref("extensions.BabylonToolbar_i.newTabUrl", "http://search.babylon.com/?AF=110810&babsrc=NT_ss&mntrId=400e653100000000000000210030aa20");
Deleted: user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
Deleted: user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
Deleted: user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Deleted: user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Deleted: user_pref("extensions.BabylonToolbar_i.tlbrId", "base");
Deleted: user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
Deleted: user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1721:14:11");
Deleted: user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
Deleted: user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"{20a82645-c095-46ed-80e3-08825760534b}\":{\"descriptor\":\"c:\\\\Windows\\\\Microsoft.NET\\\\Framework\\\\v3.5\\\\Windows Presentation Foundation\\\\DotNetAssistantExtension\",\"mtime\":1251853261680}}},{\"name\":\"app-global\",\"addons\":{\"{1FD91A9C-410C-4090-BBCC-55D3450EF433}\":{\"descriptor\":\"C:\\\\Program Files\\\\Searchqu Toolbar\\\\Datamngr\\\\FirefoxExtension\",\"mtime\":1333038626766},\"{972ce4c6-7e08-4474-a285-3208198ce6fd}\":{\"descriptor\":\"C:\\\\Program Files\\\\Mozilla Firefox\\\\extensions\\\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\",\"mtime\":1340705987164}}},{\"name\":\"app-profile\",\"addons\":{\"ffxtlbr@babylon.com\":{\"descriptor\":\"C:\\\\Users\\\\Marie\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\1u7hk1tx.default\\\\extensions\\\\ffxtlbr@babylon.com\",\"mtime\":1332533643698},\"foxyproxy@eric.h.jung\":{\"descriptor\":\"C:\\\\Users\\\\Marie\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\1u7hk1tx.default\\\\extensions\\\\foxyproxy@eric.h.jung\",\"mtime\":1349716510906},\"helperbar@helperbar.com\":{\"descriptor\":\"C:\\\\Users\\\\Marie\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\1u7hk1tx.default\\\\extensions\\\\helperbar@helperbar.com\",\"mtime\":1351080370648},\"{1FD91A9C-410C-4090-BBCC-55D3450EF433}\":{\"descriptor\":\"C:\\\\Program Files\\\\Searchqu Toolbar\\\\Datamngr\\\\FirefoxExtension\",\"mtime\":1333038626766},\"{33e0daa6-3af3-d8b5-6752-10e949c61516}\":{\"descriptor\":\"C:\\\\Users\\\\Marie\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\1u7hk1tx.default\\\\extensions\\\\{33e0daa6-3af3-d8b5-6752-10e949c61516}\",\"mtime\":1323531246655},\"{99079a25-328f-4bd4-be04-00955acaa0a7}\":{\"descriptor\":\"C:\\\\Users\\\\Marie\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\1u7hk1tx.default\\\\extensions\\\\{99079a25-328f-4bd4-be04-00955acaa0a7}\",\"mtime\":1333038614172}}}]");
-\\ Google Chrome v [Unable to retrieve version]
File: C:\Users\Marie\AppData\Local\Google\Chrome\User Data\Default\Preferences
[OK] The file contains no illegitimate entries.
*************************
AdwCleaner[S1].txt - [1484 bytes] - [08/28/2011 20:15:22]
AdwCleaner[S2].txt - [1088 bytes] - [08/28/2011 20:56:44]
AdwCleaner[R1].txt - [1209 bytes] - [10/20/2011 13:10:38]
AdwCleaner[S3].txt - [8336 bytes] - [10/29/2012 22:08:38]
########## EOF - C:\AdwCleaner[S3].txt - [8464 bytes] ##########
Hello Noima,
Posting a request on a resolved topic is the best way to go unnoticed and not to get help. When you need assistance, you should open a new topic. You were lucky that I came across this. I've opened a topic for you here
https://forums.commentcamarche.net/forum/affich-26395524-babylon-s-accroche#p26395526
You will find instructions there. Best regards, Bridget.
Posting a request on a resolved topic is the best way to go unnoticed and not to get help. When you need assistance, you should open a new topic. You were lucky that I came across this. I've opened a topic for you here
https://forums.commentcamarche.net/forum/affich-26395524-babylon-s-accroche#p26395526
You will find instructions there. Best regards, Bridget.
Hi everyone, if there's an easier way to modify this, just check the official Babylon website
Here for Firefox: http://www.babylon.com/uninstall_search/firefox
Two videos that are useless (for me) but then something interesting:
Remove Search from New Tab
1. Open Mozilla Firefox. Click in the search bar (the small bar to the right of the address bar) and press the F4 key on the keyboard. Select Manage Search Engines... from the list.
2. Select Search the web (Babylon) and click the Remove button. Click OK to save the changes. Restart Firefox.
3. In case you open a new tab in Firefox, and Babylon Search still appears, please do the following:
4. Type in the address bar about:config and press enter.
5. Confirm the message.
6. Type Babylon in the search bar.
7. Right-click the entries and click Reset.
8. Restart Firefox.
I'll leave you to translate, when I found the Babylon modules, the first line was: new page (in English), I right-clicked, edited and put google.com, and since then everything has been going well :)
Here for Firefox: http://www.babylon.com/uninstall_search/firefox
Two videos that are useless (for me) but then something interesting:
Remove Search from New Tab
1. Open Mozilla Firefox. Click in the search bar (the small bar to the right of the address bar) and press the F4 key on the keyboard. Select Manage Search Engines... from the list.
2. Select Search the web (Babylon) and click the Remove button. Click OK to save the changes. Restart Firefox.
3. In case you open a new tab in Firefox, and Babylon Search still appears, please do the following:
4. Type in the address bar about:config and press enter.
5. Confirm the message.
6. Type Babylon in the search bar.
7. Right-click the entries and click Reset.
8. Restart Firefox.
I'll leave you to translate, when I found the Babylon modules, the first line was: new page (in English), I right-clicked, edited and put google.com, and since then everything has been going well :)
Hello,
What is simpler for you is not necessarily the same for someone else.
There is no one-size-fits-all solution.
This type of software uninstalls like any other software, no need to go to their website:
Uninstall a program and Firefox extensions
But since this is usually distributed in the form of a bundle, using Adwcleaner will help remove other unwanted applications that come with it.
Have a good evening.
What is simpler for you is not necessarily the same for someone else.
There is no one-size-fits-all solution.
This type of software uninstalls like any other software, no need to go to their website:
Uninstall a program and Firefox extensions
But since this is usually distributed in the form of a bundle, using Adwcleaner will help remove other unwanted applications that come with it.
Have a good evening.
Hi, under Mozilla: Options --> Add-ons --> Extensions --> Remove Babylon --> Restart now
There you go!
There you go!
Hello,
there's a simpler and more effective way;
click on Firefox at the top left, then Help, then Troubleshooting Information,
then reset Firefox; just make sure to note your
add-ons before this last step so you can reinstall them; that's it!
(and no worries for your bookmarks, which will be preserved).
there's a simpler and more effective way;
click on Firefox at the top left, then Help, then Troubleshooting Information,
then reset Firefox; just make sure to note your
add-ons before this last step so you can reinstall them; that's it!
(and no worries for your bookmarks, which will be preserved).
It does seem very complicated, but once you know the right method, it's child's play.
You just need to go to the control panel, click on programs, then programs and features. Babylon will appear, and all you have to do is click on uninstall. Once the uninstallation is complete, open your search engine, and your default display is reactivated.
You just need to go to the control panel, click on programs, then programs and features. Babylon will appear, and all you have to do is click on uninstall. Once the uninstallation is complete, open your search engine, and your default display is reactivated.
Hello lenalou7,
Have you tried resetting Firefox:
at the top left Firefox > help > troubleshooting information > reset Firefox.
For ad blockers still on Firefox, install in add-ons truly effective and essential:
_ Adblock Plus 2.2.1
_ Adblock Plus Pop-up Addon 0.5
_ Element Hiding Helper for Adblock Plus 1.2.3
Also check that the box "block pop-up windows" is checked in Firefox > options > content.
Have you tried resetting Firefox:
at the top left Firefox > help > troubleshooting information > reset Firefox.
For ad blockers still on Firefox, install in add-ons truly effective and essential:
_ Adblock Plus 2.2.1
_ Adblock Plus Pop-up Addon 0.5
_ Element Hiding Helper for Adblock Plus 1.2.3
Also check that the box "block pop-up windows" is checked in Firefox > options > content.
So far, I've always managed to avoid Babylon! My mother, however, hasn't had that luck. The same problem as you on Firefox under W7. We set Google, and it brings up Babylon Search.
I've tried everything. Everything I've read on the forums. The problem is that even after uninstalling the software, I still had Babylon on Firefox.
If you've deleted everything and it's still there, I found a really simple trick:
Start > Search for "Babylon Search" > Press Enter > Delete everything
And there you go!! \o/ There were 4 "JScript" script files left on the PC.
I've tried everything. Everything I've read on the forums. The problem is that even after uninstalling the software, I still had Babylon on Firefox.
If you've deleted everything and it's still there, I found a really simple trick:
Start > Search for "Babylon Search" > Press Enter > Delete everything
And there you go!! \o/ There were 4 "JScript" script files left on the PC.
- "So far, I've always managed to avoid Babylon! My mother, however, hasn't been so lucky"
It's not a question of luck or misfortune, but rather having good internet practices:
Don't download just anywhere, any way, anything.
1) Where : To download more securely, always do it from the software creator's website or from CCM, which has an anti-adware policy. However, some creator sites may also include adware in the free version of their software.
2) How : Read what you are committing to when downloading free software. If you can't get the license in French, at least read what is presented during the installation.
Only check "desktop shortcut" and uncheck everything else.
If you are presented with a commercial offer, refuse and uncheck any box that has been pre-checked to catch the careless or rushed fool.
3) What : Think before you click. A free software interests you. Check if you see this software on CCM. What do other users think? Don't hesitate to ask the question. It’s better to take a few seconds to think than to click and then spend hours getting frustrated because Babylon or another sticky program refuses to go away.
It's not a question of luck or misfortune, but rather having good internet practices:
Don't download just anywhere, any way, anything.
1) Where : To download more securely, always do it from the software creator's website or from CCM, which has an anti-adware policy. However, some creator sites may also include adware in the free version of their software.
2) How : Read what you are committing to when downloading free software. If you can't get the license in French, at least read what is presented during the installation.
Only check "desktop shortcut" and uncheck everything else.
If you are presented with a commercial offer, refuse and uncheck any box that has been pre-checked to catch the careless or rushed fool.
3) What : Think before you click. A free software interests you. Check if you see this software on CCM. What do other users think? Don't hesitate to ask the question. It’s better to take a few seconds to think than to click and then spend hours getting frustrated because Babylon or another sticky program refuses to go away.
kmill08: You don't have to take it the wrong way! Besides, what he/she is saying is completely true! I had the same problem due to a network issue, my dad downloaded a few programs for me and also downloaded Babylon with them! Usually, when I download programs, with the experience of Babylon, I don't check anything and always verify before downloading, which wasn't the case with my dad!
- 1
- 2
Suivant
You just need to boot in safe mode (to choose at startup of the PC), then run a scan with Spybot and remove the malware and unwanted programs, including the "babylon toolbar"... there you go :)
As we can observe every day by the number of infected PCs on which it is installed, Spybot Search & Destroy is ineffective because it is simply no longer suited to new threats that require a completely different approach. Moreover, its resident feature conflicts with other protections and many antivirus problems would be resolved by uninstalling Spybot.
What’s the point of mobilizing resources, especially since it is resource-intensive, when its uninstallation could allow the PC to regain greater browsing lightness!
1) Tools
2) Add-ons
3) type "searchreset" in the search bar
4) install "searchreset"
And that's it!
SB