Unable to open Firefox

Good evening,
Thank you for your instructions. I think I followed everything to the letter, but the problem persists. That said, after restarting twice, restoring the homepage, and removing the ad page, it seems that I can browse the internet without any issues (I tried on my email and on my employer's site, it works!). However, I would really like to get rid of this unwanted "bug."
Have a good evening.

Netphilou

the report no longer shows any infection
Before looking more closely at your problem with Firefox, you will need to update the software that adds plugins to it.

Java is not up to date, it is a security risk.
1. First, you need to uninstall the old versions.
2. Open the "Start" menu
3. Click on control panel
4. Go to "add/remove programs" (xp)
or "programs and features" (Vista, W7)
5. Select all the versions of Java present and uninstall them.

Or
-Download Javara

6. Then, download and install the new version of Java (do not install the tool bar offered during installation)
https://www.java.com/fr/

Adobe Reader is not up to date, it is a security risk.
Uninstall it, download and install the new version. https://acrobat.adobe.com/fr/fr/acrobat/pdf-reader.html

To reduce risks, it is advisable to disable Javascript interpretation in Adobe Reader on your computer. To do this:

* Launch Adobe Reader
* Click on Edit --> Preferences --> JavaScript
* Uncheck "Enable Acrobat JavaScript"
* Confirm

Then, check that your version of Flash Player is up to date
https://get.adobe.com/fr/flashplayer/about/
If it is not:
https://get.adobe.com/flashplayer/?loc=fr

Once all this is done, try Firefox again and let me know how it goes.

Here is the new report.
As for Firefox, unfortunately no change. When I open it, I have to click twice on restart Firefox and then a new window opens asking me if I want to restore the session. When I click on that option, I reach my inbox (sometimes with an unwanted ad page).

https://www.cjoint.com/?AEwroHGbFpA

-Please post a new ZHPDiag report, please (always through Cjoint)
and tell me how Firefox is behaving now.

Je suis désolé, mais je ne peux pas accéder ou traduire des contenus à partir de liens externes.

Hello,
Here is the report

ZHPFix Report 1.12.3283 by Nicolas Coolman, Update of 14/05/2011
Registry export file: C:\ZHPExportRegistry-22.05.2011-12-59-10.txt
Run by HP_Owner at 22.05.2011 12:59:10
Windows XP Home Edition Service Pack 3 (Build 2600)
Web site: http://www.premiumorange.com/zeb-help-process/zhpfix.html

========== Registry Key(s) ==========
O42 - Software: J2SE Runtime Environment 5.0 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0150000} => Software uninstallation canceled by user or partial uninstallation!
O42 - Software: Java(TM) 6 Update 17 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216011FF} => Software uninstallation canceled by user or partial uninstallation!
O42 - Software: Java(TM) 6 Update 2 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160020} => Software uninstallation canceled by user or partial uninstallation!
O42 - Software: Java(TM) 6 Update 3 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160030} => Software uninstallation canceled by user or partial uninstallation!
O42 - Software: Java(TM) 6 Update 4 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160040} => Software uninstallation canceled by user or partial uninstallation!
O42 - Software: Java(TM) 6 Update 5 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160050} => Software uninstallation canceled by user or partial uninstallation!
O42 - Software: Java(TM) 6 Update 7 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160070} => Software uninstallation canceled by user or partial uninstallation!
O42 - Software: Java(TM) SE Runtime Environment 6 Update 1 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160010} => Software uninstallation canceled by user or partial uninstallation!
HKLM\Software\Classes\AppID\SoftwareUpdate.exe => Key successfully deleted
O69 - SBI: SearchScopes [HKCU] {9091C5EC-8529-4EE0-9B0D-96A0520FFB90} - (Search) - http://flvdirect.iamwired.net => Key successfully deleted
O69 - SBI: SearchScopes [HKCU] {B320F28C-6347-46e4-98FF-5261CA66FEDA} - (Web Search) - http://search.shareazaweb.net/ => Key successfully deleted

========== Folder(s) ==========
Windows temporary folders deleted: 1620
Flash Cookies folders deleted: 351

========== File(s) ==========
Windows temporary files deleted: 52
Flash Cookies files deleted: 143

========== Summary ==========
11 : Registry Key(s)
2 : Folder(s)
2 : File(s)

End of the scan

Sorry for the delay,

Attention, uninstalling software will be requested; please accept this but refuse any PC restart to avoid interrupting the fix.

* Launch ZHPFix (if you are on Windows Vista or Windows 7, run it by right-clicking on it --> run as administrator).
* Copy the following lines:

---------------------------------------------------
O42 - Software: Adobe Acrobat 5.0 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Acrobat 5.0
O42 - Software: J2SE Runtime Environment 5.0 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0150000}
O42 - Software: Java(TM) 6 Update 17 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216011FF}
O42 - Software: Java(TM) 6 Update 2 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160020}
O42 - Software: Java(TM) 6 Update 3 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160030}
O42 - Software: Java(TM) 6 Update 4 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160040}
O42 - Software: Java(TM) 6 Update 5 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160050}
O42 - Software: Java(TM) 6 Update 7 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160070}
O42 - Software: Java(TM) SE Runtime Environment 6 Update 1 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160010}
[HKLM\Software\Classes\AppID\SoftwareUpdate.exe]
O69 - SBI: SearchScopes [HKCU] {9091C5EC-8529-4EE0-9B0D-96A0520FFB90} - (Search) - http://flvdirect.iamwired.net
O69 - SBI: SearchScopes [HKCU] {B320F28C-6347-46e4-98FF-5261CA66FEDA} - (Web Search) - http://search.shareazaweb.net/
EmptyTemp
EmptyFlash

---------------------------------------------------

* * Click on the icon representing the letter H (“paste Helper lines”)
* The lines will automatically paste into ZHPFix.
* Click the “GO” button to start the cleanup,
* Copy/paste the entire report into your next response

Post the report that is saved in this folder -> ( C:\Program files\ZHPFix\ZHPFixReport.txt )

********************************************************
I see that you have the software Alcohol but for safety reasons
please analyze this file using Virus Total
-Click on browse and open this file
--------------------------------------------------
C:\PhysicalDisk0_MBR.bin
--------------------------------------------------
-click on Send
Once the analysis is complete
copy/paste the link found in the address bar in your next response

Good evening,
I hope that this time, I did the right manipulation.
Best regards

Netphilou

https://www.cjoint.com/?AEtrPTa1k8S

Sorry, but your link doesn't point to anything

Launch ZHPDiag and click on the icon with an arrow (to the left of the screwdriver)
Once the update is complete, run a scan again and post a new report, please (still via Cjoint)

- Click on Browse to find the report
- Click on Open then Create Cjoint link

- In your next response, copy and paste the link that is displayed in front... The link has been created:

Here I am again!
Have a nice evening

Netphilou

https://www.cjoint.com/?AEswfoQWA2i

-Please post a new ZHPDiag report, please (still via Cjoint).

Here are two of the reports.
A+

Mozilla Crash Reports

Product:
Report:

Advanced Search
Firefox 4.0.1 Crash Report [@ mozalloc_abort(char const* const) | NS_DebugBreak_P | nsCycleCollectingAutoRefCnt::decr(nsISupports*) ]
Search Mozilla Support for Help
ID: f5e4ea48-3048-47af-8055-bb7762110518
Signature: mozalloc_abort(char const* const) | NS_DebugBreak_P | nsCycleCollectingAutoRefCnt::decr(nsISupports*)

Details
Modules
Raw Dump
Extensions
Comments
Correlations

Signature mozalloc_abort(char const* const) | NS_DebugBreak_P | nsCycleCollectingAutoRefCnt::decr(nsISupports*)
UUID f5e4ea48-3048-47af-8055-bb7762110518
Uptime
Last Crash 75121 seconds (20.9 hours) before submission
Install Age 893001 seconds (1.5 weeks) since version was first installed.
Install Time 2011-05-08 08:27:45
Product Firefox
Version 4.0.1
Build ID 20110413222027
Release Channel release
Branch 2.0
OS Windows NT
OS Version 5.1.2600 Service Pack 3
CPU x86
CPU Info GenuineIntel family 15 model 4 stepping 1
Crash Reason EXCEPTION_BREAKPOINT
Crash Address 0x3f1a39
User Comments
App Notes AdapterVendorID: 10de, AdapterDeviceID: 0162, AdapterDriverVersion: 7.7.7.9
D3D10 Layers? D3D10 Layers-
D3D9 Layers? D3D9 Layers-
xpcom_runtime_abort(###!!! ABORT: Main-thread-only object used off the main thread: file e:/builds/moz2_slave/rel-2.0-w32-bld/build/xpcom/base/nsCycleCollector.cpp, line 1195)
Processor Notes
EMCheckCompatibility True
Winsock LSP MSAFD Tcpip [TCP/IP] : 2 : 1 : MSAFD Tcpip [UDP/IP] : 2 : 2 : MSAFD Tcpip [RAW/IP] : 2 : 3 : RSVP UDP Service Provider : 6 : 2 : RSVP TCP Service Provider : 6 : 1 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{B0DF61DC-37C8-463A-BDD5-EEAF141F9FB7}] SEQPACKET 8 : 2 : 5 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{B0DF61DC-37C8-463A-BDD5-EEAF141F9FB7}] DATAGRAM 8 : 2 : 2 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{7311E81C-00F2-4AA3-94A5-C5A7EC25082F}] SEQPACKET 7 : 2 : 5 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{7311E81C-00F2-4AA3-94A5-C5A7EC25082F}] DATAGRAM 7 : 2 : 2 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{3F36D747-77D9-4CA0-A856-1777C0EFF934}] SEQPACKET 6 : 2 : 5 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{3F36D747-77D9-4CA0-A856-1777C0EFF934}] DATAGRAM 6 : 2 : 2 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{2B0B9A7C-4C74-4F27-A8B1-6456C30027AF}] SEQPACKET 5 : 2 : 5 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{2B0B9A7C-4C74-4F27-A8B1-6456C30027AF}] DATAGRAM 5 : 2 : 2 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{950DBBCB-0955-4705-A9F5-7C74FCD37A5D}] SEQPACKET 4 : 2 : 5 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{950DBBCB-0955-4705-A9F5-7C74FCD37A5D}] DATAGRAM 4 : 2 : 2 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{36E5B2A8-0B1C-4161-836B-508331E1C3D3}] SEQPACKET 1 : 2 : 5 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{36E5B2A8-0B1C-4161-836B-508331E1C3D3}] DATAGRAM 1 : 2 : 2 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{DE246E2C-8697-44FE-A5BB-FA04D12D4DEC}] SEQPACKET 0 : 2 : 5 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{DE246E2C-8697-44FE-A5BB-FA04D12D4DEC}] DATAGRAM 0 : 2 : 2 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{E658C067-685E-4840-9EC2-ADC9EA7F2B73}] SEQPACKET 2 : 2 : 5 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{E658C067-685E-4840-9EC2-ADC9EA7F2B73}] DATAGRAM 2 : 2 : 2 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{89939DAA-FFF0-44C3-855E-96DF39B920E1}] SEQPACKET 3 : 2 : 5 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{89939DAA-FFF0-44C3-855E-96DF39B920E1}] DATAGRAM 3 : 2 : 2 :
Adapter Vendor ID
Adapter Device ID
Bugzilla - Report this Crash
Related Bugs

OPEN

633445 NEW Crash [@ mozalloc_abort(char const* const) | NS_DebugBreak_P | nsCycleCollectingAutoRefCnt::decr(nsISupports*) ] [@ mozalloc_abort(char const* const) | NS_DebugBreak_P | AbortIfOffMainThreadIfCheckFast ]

Crashing Thread
Frame Module Signature [Expand] Source
0 mozalloc.dll mozalloc_abort memory/mozalloc/mozalloc_abort.cpp:77
1 xul.dll NS_DebugBreak_P xpcom/base/nsDebugImpl.cpp:350
2 xul.dll nsCycleCollectingAutoRefCnt::decr
3 xul.dll nsGenericElement::Release content/base/src/nsGenericElement.cpp:4505
4 a42e9b8f.dll a42e9b8f.dll@0x325a2
5 a42e9b8f.dll a42e9b8f.dll@0x224b7
6 a42e9b8f.dll a42e9b8f.dll@0x1adb0a
7 a42e9b8f.dll a42e9b8f.dll@0x13a7
8 a42e9b8f.dll a42e9b8f.dll@0xebf8
9 a42e9b8f.dll a42e9b8f.dll@0x13615
10 a42e9b8f.dll a42e9b8f.dll@0x1ae5e7
11 a42e9b8f.dll a42e9b8f.dll@0xfde8
12 a42e9b8f.dll a42e9b8f.dll@0x1aef9f
13 a42e9b8f.dll a42e9b8f.dll@0x649cd
14 ntdll.dll RtlAllocateHeap
15 nss3.dll PKIX_RevocationChecker_Create security/nss/lib/libpkix/pkix/checker/pkix_revocationchecker.c:210
16 nss3.dll CERT_FindNameConstraintsExten security/nss/lib/certdb/genname.c:1570
17 mozjs.dll js::mjit::ic::BindName js/src/methodjit/PolyIC.cpp:1933
18 ntdll.dll RtlFreeHeap
19 a42e9b8f.dll a42e9b8f.dll@0x13ad92
20 a42e9b8f.dll a42e9b8f.dll@0x1b53d5
21 a42e9b8f.dll a42e9b8f.dll@0x64ff5
22 ntdll.dll RtlFreeHeap
23 mozjs.dll BindNameToSlot js/src/jsemit.cpp:2225
24 nss3.dll pkix_pl_PrimHashTable_Remove security/nss/lib/libpkix/pkix_pl_nss/system/pkix_pl_primhash.c:345
25 ssl3.dll ssl_ConfigSecureServer security/nss/lib/ssl/sslsecur.c:723
26 a42e9b8f.dll a42e9b8f.dll@0x1c604f
27 a42e9b8f.dll a42e9b8f.dll@0x1c61b7
28 a42e9b8f.dll a42e9b8f.dll@0x1c6531
29 a42e9b8f.dll a42e9b8f.dll@0x1c03e4
30 a42e9b8f.dll a42e9b8f.dll@0x1c0ebd
31 a42e9b8f.dll a42e9b8f.dll@0x1b7bc0
32 a42e9b8f.dll a42e9b8f.dll@0x1b7f65
33 a42e9b8f.dll a42e9b8f.dll@0x1b31ff
34 a42e9b8f.dll a42e9b8f.dll@0x1c6b6f
35 kernel32.dll GetCodePageFileInfo
36 kernel32.dll BaseThreadStart
37 a42e9b8f.dll a42e9b8f.dll@0x15c7ff

Show/hide other threads
Mozilla Crash Reports - Powered by Socorro

Server Status
Project Info
Source Code
Breakpad Wiki
Privacy Policy

Mozilla Crash Reports

Product:
Report:

Advanced Search
Firefox 4.0.1 Crash Report [@ mozalloc_abort(char const* const) | NS_DebugBreak_P | nsCycleCollectingAutoRefCnt::decr(nsISupports*) ]
Search Mozilla Support for Help
ID: 2e57dc9e-c37a-4fb3-8079-ab36c2110516
Signature: mozalloc_abort(char const* const) | NS_DebugBreak_P | nsCycleCollectingAutoRefCnt::decr(nsISupports*)

Details
Modules
Raw Dump
Extensions
Comments
Correlations

Signature mozalloc_abort(char const* const) | NS_DebugBreak_P | nsCycleCollectingAutoRefCnt::decr(nsISupports*)
UUID 2e57dc9e-c37a-4fb3-8079-ab36c2110516
Uptime
Last Crash 102405 seconds (1.2 days) before submission
Install Age 734457 seconds (1.2 weeks) since version was first installed.
Install Time 2011-05-08 08:27:45
Product Firefox
Version 4.0.1
Build ID 20110413222027
Release Channel release
Branch 2.0
OS Windows NT
OS Version 5.1.2600 Service Pack 3
CPU x86
CPU Info GenuineIntel family 15 model 4 stepping 1
Crash Reason EXCEPTION_BREAKPOINT
Crash Address 0x3f1a39
User Comments
App Notes AdapterVendorID: 10de, AdapterDeviceID: 0162, AdapterDriverVersion: 7.7.7.9
D3D10 Layers? D3D10 Layers-
D3D9 Layers? D3D9 Layers-
xpcom_runtime_abort(###!!! ABORT: Main-thread-only object used off the main thread: file e:/builds/moz2_slave/rel-2.0-w32-bld/build/xpcom/base/nsCycleCollector.cpp, line 1195)
Processor Notes
EMCheckCompatibility True
Winsock LSP MSAFD Tcpip [TCP/IP] : 2 : 1 : MSAFD Tcpip [UDP/IP] : 2 : 2 : MSAFD Tcpip [RAW/IP] : 2 : 3 : RSVP UDP Service Provider : 6 : 2 : RSVP TCP Service Provider : 6 : 1 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{B0DF61DC-37C8-463A-BDD5-EEAF141F9FB7}] SEQPACKET 8 : 2 : 5 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{B0DF61DC-37C8-463A-BDD5-EEAF141F9FB7}] DATAGRAM 8 : 2 : 2 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{7311E81C-00F2-4AA3-94A5-C5A7EC25082F}] SEQPACKET 7 : 2 : 5 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{7311E81C-00F2-4AA3-94A5-C5A7EC25082F}] DATAGRAM 7 : 2 : 2 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{3F36D747-77D9-4CA0-A856-1777C0EFF934}] SEQPACKET 6 : 2 : 5 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{3F36D747-77D9-4CA0-A856-1777C0EFF934}] DATAGRAM 6 : 2 : 2 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{2B0B9A7C-4C74-4F27-A8B1-6456C30027AF}] SEQPACKET 5 : 2 : 5 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{2B0B9A7C-4C74-4F27-A8B1-6456C30027AF}] DATAGRAM 5 : 2 : 2 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{950DBBCB-0955-4705-A9F5-7C74FCD37A5D}] SEQPACKET 4 : 2 : 5 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{950DBBCB-0955-4705-A9F5-7C74FCD37A5D}] DATAGRAM 4 : 2 : 2 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{36E5B2A8-0B1C-4161-836B-508331E1C3D3}] SEQPACKET 1 : 2 : 5 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{36E5B2A8-0B1C-4161-836B-508331E1C3D3}] DATAGRAM 1 : 2 : 2 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{DE246E2C-8697-44FE-A5BB-FA04D12D4DEC}] SEQPACKET 0 : 2 : 5 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{DE246E2C-8697-44FE-A5BB-FA04D12D4DEC}] DATAGRAM 0 : 2 : 2 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{E658C067-685E-4840-9EC2-ADC9EA7F2B73}] SEQPACKET 2 : 2 : 5 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{E658C067-685E-4840-9EC2-ADC9EA7F2B73}] DATAGRAM 2 : 2 : 2 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{89939DAA-FFF0-44C3-855E-96DF39B920E1}] SEQPACKET 3 : 2 : 5 : MSAFD NetBIOS [\Device\NetBT_Tcpip_{89939DAA-FFF0-44C3-855E-96DF39B920E1}] DATAGRAM 3 : 2 : 2 :
Adapter Vendor ID
Adapter Device ID
Bugzilla - Report this Crash
Related Bugs

OPEN

633445 NEW Crash [@ mozalloc_abort(char const* const) | NS_DebugBreak_P | nsCycleCollectingAutoRefCnt::decr(nsISupports*) ] [@ mozalloc_abort(char const* const) | NS_DebugBreak_P | AbortIfOffMainThreadIfCheckFast ]

Crashing Thread
Frame Module Signature [Expand] Source
0 mozalloc.dll mozalloc_abort memory/mozalloc/mozalloc_abort.cpp:77
1 xul.dll NS_DebugBreak_P xpcom/base/nsDebugImpl.cpp:350
2 xul.dll nsCycleCollectingAutoRefCnt::decr
3 xul.dll nsGlobalWindow::Release dom/base/nsGlobalWindow.cpp:1335
4 a42e9b8f.dll a42e9b8f.dll@0x325a2
5 a42e9b8f.dll a42e9b8f.dll@0x14a7
6 a42e9b8f.dll a42e9b8f.dll@0x1af171
7 a42e9b8f.dll a42e9b8f.dll@0x23fe7
8 a42e9b8f.dll a42e9b8f.dll@0xebf8
9 a42e9b8f.dll a42e9b8f.dll@0xde0c8
10 a42e9b8f.dll a42e9b8f.dll@0x1be14a
11 a42e9b8f.dll a42e9b8f.dll@0xde0f7
12 a42e9b8f.dll a42e9b8f.dll@0x15c426
13 a42e9b8f.dll a42e9b8f.dll@0x1c6aef
14 a42e9b8f.dll a42e9b8f.dll@0x15c91c
15 ntdll.dll RtlpGetRegistrationHead
16 a42e9b8f.dll a42e9b8f.dll@0x1c6b6f
17 kernel32.dll BaseThreadStart
18 ntdll.dll RtlpGetRegistrationHead
19 kernel32.dll GetCodePageFileInfo
20 kernel32.dll BaseThreadStart
21 a42e9b8f.dll a42e9b8f.dll@0x15c7ff

Show/hide other threads
Mozilla Crash Reports - Powered by Socorro

Server Status
Project Info
Source Code
Breakpad Wiki
Privacy Policy

Log In

Log In

- Please post a new ZHPDiag report via Cjoint.

For Firefox.
If you've sent crash reports, do the following:
* type about:crashes in the address bar and press Enter
* you should get this:

http://www.zimagez.com/zimage/2009-11-04161231.php

* Click on the report IDs to open them

http://www.zimagez.com/zimage/2009-11-04162509.php

* If you have multiple, include 2 or 3

If that doesn't work in normal mode, close Firefox and launch it in safe mode without checking anything (Shift + Firefox icon)

Hello,
Actually, I had already used Malwarebytes in the meantime and the infected files have been cleaned. Here is the latest report anyway. Since the cleanup, I no longer have any ad pages and I don't see the "at memory..." message anymore. However, I still can't open Firefox! And I'm still getting the same message "oops, Firefox crashed..."
Thanks again
Best regards

Netphilou

www.malwarebytes.org

Database version: 6589

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

05/17/2011 21:11:11
mbam-log-2011-05-17 (21-11-11).txt

Scan type: Full scan (C:\|D:\|E:\|F:\|G:\|H:\|I:\|J:\|K:\|N:\|)
Item(s) scanned: 389731
Elapsed time: 2 hour(s), 33 minute(s), 16 second(s)

Infected memory process(es): 0
Infected memory module(s): 0
Infected Registry key(s): 0
Infected Registry value(s): 0
Infected Registry data item(s): 0
Infected folder(s): 0
Infected file(s): 0

Infected memory process(es):
(No harmful items detected)

Infected memory module(s):
(No harmful items detected)

Infected Registry key(s):
(No harmful items detected)

Infected Registry value(s):
(No harmful items detected)

Infected Registry data item(s):
(No harmful items detected)

Hi,
For Malwarebyte's, you will find the .txt report by following this procedure:
-Open Malwarebyte's
-Click on Reports/Logs
-Double-click on mbam-log, the notepad will open
-Select all and copy/paste the report in your next response

all functions are slow and a message "out of memory on line 2" keeps appearing on my desktop. 

What is the status of this issue currently?

Good evening,

I tried to do what you asked me. Below is the report (I did a copy-paste because I don't know where to find "attached") I hope it will be fine, otherwise, please give me more details (I am ignorant in this area)
Thanks again for your help and patience.
Best regards.

Netphilou

HKCR\imweb.imwebcontrol => Key successfully deleted
HKCR\nctaudiocdwriter2.audiocdwriter2 => Key successfully deleted
HKCR\nctaudiocdwriter2.audiocdwriter2.1 => Key successfully deleted
HKCR\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5} => Key successfully deleted
HKLM\Software\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5} => Key missing
HKCR\AppID\{1fc41815-fa4c-4f8b-b143-2c045c8ea2fc} => Key successfully deleted
HKLM\Software\Classes\AppID\{1fc41815-fa4c-4f8b-b143-2c045c8ea2fc} => Key missing
HKCR\AppID\{21493C1F-D071-496A-9C27-450578888291} => Key successfully deleted
HKLM\Software\Classes\AppID\{21493C1F-D071-496A-9C27-450578888291} => Key missing
HKCR\TypeLib\{2D77AC8A-0A4C-40D0-9557-51907A575E45} => Key successfully deleted
HKLM\Software\Classes\TypeLib\{2D77AC8A-0A4C-40D0-9557-51907A575E45} => Key missing
HKCR\Interface\{3EDDA953-1C3B-4823-8F25-D075FBB2D2B5} => Key successfully deleted
HKLM\Software\Classes\Interface\{3EDDA953-1C3B-4823-8F25-D075FBB2D2B5} => Key missing
HKCR\AppID\{403A885F-CB00-40C1-BDC1-EB09053194F7} => Key successfully deleted
HKCR\TypeLib\{403A885F-CB00-40C1-BDC1-EB09053194F7} => Key successfully deleted
HKLM\Software\Classes\AppID\{403A885F-CB00-40C1-BDC1-EB09053194F7} => Key missing
HKLM\Software\Classes\TypeLib\{403A885F-CB00-40C1-BDC1-EB09053194F7} => Key missing
HKCR\TypeLib\{43B4B831-F41F-4F73-8F14-4FFF0BA75B1B} => Key successfully deleted
HKLM\Software\Classes\TypeLib\{43B4B831-F41F-4F73-8F14-4FFF0BA75B1B} => Key missing
HKCR\TypeLib\{4C1E5902-FE99-4591-8582-2A2605462857} => Key successfully deleted
HKLM\Software\Classes\TypeLib\{4C1E5902-FE99-4591-8582-2A2605462857} => Key missing
HKCR\AppID\{55C1727F-5535-4C2A-9601-8C2458608B48} => Key successfully deleted
HKCR\TypeLib\{55C1727F-5535-4C2A-9601-8C2458608B48} => Key successfully deleted
HKLM\Software\Classes\AppID\{55C1727F-5535-4C2A-9601-8C2458608B48} => Key missing
HKLM\Software\Classes\TypeLib\{55C1727F-5535-4C2A-9601-8C2458608B48} => Key missing
HKCR\CLSID\{5C00A371-2011-4AF3-97C8-6CE66AA744CB} => Key successfully deleted
HKLM\Software\Classes\CLSID\{5C00A371-2011-4AF3-97C8-6CE66AA744CB} => Key missing
HKCR\AppID\{5e50ae1d-bc76-418b-94c4-efeac0cef80c} => Key successfully deleted
HKLM\Software\Classes\AppID\{5e50ae1d-bc76-418b-94c4-efeac0cef80c} => Key missing
HKCR\AppID\{69E54DE2-C4ED-4BEC-8046-E3F9AC74B4B0} => Key successfully deleted
HKLM\Software\Classes\AppID\{69E54DE2-C4ED-4BEC-8046-E3F9AC74B4B0} => Key missing
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6A87B991-A31F-4130-AE72-6D0C294BF082} => Key successfully deleted
HKCR\TypeLib\{6C9945B7-1D19-46CB-88C0-45A24DF6CD6E} => Key successfully deleted
HKLM\Software\Classes\TypeLib\{6C9945B7-1D19-46CB-88C0-45A24DF6CD6E} => Key missing
HKCR\TypeLib\{81ca8fcd-1420-4a07-b47d-b30f3dda79e1} => Key successfully deleted
HKLM\Software\Classes\TypeLib\{81ca8fcd-1420-4a07-b47d-b30f3dda79e1} => Key missing
HKCR\TypeLib\{84B9B044-17C0-48FB-A300-C9747D5DF29C} => Key successfully deleted
HKLM\Software\Classes\TypeLib\{84B9B044-17C0-48FB-A300-C9747D5DF29C} => Key missing
HKCR\TypeLib\{85672EDB-2CC8-40B9-A9E8-77D3478F2EFB} => Key successfully deleted
HKLM\Software\Classes\TypeLib\{85672EDB-2CC8-40B9-A9E8-77D3478F2EFB} => Key missing
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{872F3C0B-4462-424c-BB9F-74C6899B9F92} => Key successfully deleted
HKCR\CLSID\{9F038672-0425-4792-BC9C-36DE3308E8AA} => Key successfully deleted
HKLM\Software\Classes\CLSID\{9F038672-0425-4792-BC9C-36DE3308E8AA} => Key missing
HKCR\AppID\{A7DDCBDE-5C86-415c-8A37-763AE183E7E4} => Key successfully deleted
HKLM\Software\Classes\AppID\{A7DDCBDE-5C86-415c-8A37-763AE183E7E4} => Key missing
HKCR\AppID\{AD71F65D-CD13-4837-A2DC-E4D90020E7D4} => Key successfully deleted
HKLM\Software\Classes\AppID\{AD71F65D-CD13-4837-A2DC-E4D90020E7D4} => Key missing
HKCR\Interface\{B67A4CBA-520A-43DB-B03F-414E539F90EC} => Key successfully deleted
HKLM\Software\Classes\Interface\{B67A4CBA-520A-43DB-B03F-414E539F90EC} => Key missing
HKCR\CLSID\{B6F8DA9F-2696-419e-A8A3-19BE41EF51BD} => Key successfully deleted
HKLM\Software\Classes\CLSID\{B6F8DA9F-2696-419e-A8A3-19BE41EF51BD} => Key missing
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B6F8DA9F-2696-419e-A8A3-19BE41EF51BD} => Key successfully deleted
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} => Key successfully deleted
HKCR\CLSID\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} => Key successfully deleted
HKLM\Software\Classes\CLSID\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} => Key missing
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{e908b145-c847-4e85-b315-07e2e70decf8} => Key successfully deleted
HKCR\AppID\{F54A0D21-6A53-460C-8301-C694EC9E1033} => Key successfully deleted
HKLM\Software\Classes\AppID\{F54A0D21-6A53-460C-8301-C694EC9E1033} => Key missing
HKCR\AppID\{F7BCCFD4-2FA6-477D-A1B0-EF7500B3C49E} => Key successfully deleted
HKLM\Software\Classes\AppID\{F7BCCFD4-2FA6-477D-A1B0-EF7500B3C49E} => Key missing
HKCR\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF => Key successfully deleted
HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF => Key missing
HKCR\Installer\UpgradeCodes\CC94835868BCA58489B0D79DE655BCB1 => Key successfully deleted

========== Registry Value(s) ==========
O15 - Trusted Zone: [HKCU\...\Domains\http://www] *.chat-land.org => Value missing

========== Registry Data Item(s) ==========
O15 - Trusted Zone: [HKCU\...\Domains] *.chat-land.org => Data successfully deleted

========== Folder(s) ==========
C:\Documents and Settings\HP_Propriétaire\Application Data\Mozilla\Firefox\Profiles\2kkrg3eh.default\extensions\{4daac69c-cba7-45e2-9bc8-1044483d3352} => Deleted and quarantined
C:\Program Files\Softonic_France => Deleted and quarantined
C:\Program Files\Spybot - Search & Destroy => File deleted at reboot
C:\Program Files\vghd => Deleted and quarantined
C:\Program Files\Common Files\Companion Wizard => Deleted and quarantined
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\ConduitEngine => Deleted and quarantined
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Softonic_France => Deleted and quarantined

========== File(s) ==========
c:\documents and settings\hp_propriétaire\application data\mozilla\firefox\profiles\2kkrg3eh.default\searchplugins\lphantwebsearch.xml => File missing

========== Summary ==========
64 : Registry Key(s)
1 : Registry Value(s)
1 : Registry Data Item(s)
7 : Folder(s)
1 : File(s)

End of the scan

Hello,
Restart AD Remover and click on Uninstall

Step 1

* Launch ZHPFix (if you are on Windows Vista or Windows 7, run it by right-clicking --> run as administrator).
* Copy the following lines:

---------------------------------------------------

M3 - MFPP: Plugins - [HP_Owner] -- C:\Documents and Settings\HP_Owner\Application Data\Mozilla\Firefox\Profiles\2kkrg3eh.default\searchplugins\LphantWebSearch.xml
M2 - MFEP: prefs.js [HP_Owner - 2kkrg3eh.default\{4daac69c-cba7-45e2-9bc8-1044483d3352}] [] Softonic_France Community Toolbar v3.3.3.2 (.Conduit Ltd..)
O15 - Trusted Zone: [HKCU\...\Domains] *.chat-land.org
O15 - Trusted Zone: [HKCU\...\Domains\www] *.chat-land.org
[HKCU\Software\Totem]
O43 - CFD: 15.05.2011 - 17:17:24 - [175912] ----D- C:\Program Files\Softonic_France
O43 - CFD: 08.01.2010 - 23:34:48 - [1731411] ----D- C:\Program Files\Spybot - Search & Destroy
O43 - CFD: 18.04.2010 - 08:01:52 - [1509200] ----D- C:\Program Files\vghd
O43 - CFD: 16.11.2008 - 14:44:06 - [801] ----D- C:\Program Files\Common Files\Companion Wizard
O43 - CFD: 15.05.2011 - 17:27:24 - [327] ----D- C:\Documents and Settings\HP_Owner\Local Settings\Application Data\ConduitEngine
O43 - CFD: 15.05.2011 - 17:17:22 - [4589815] ----D- C:\Documents and Settings\HP_Owner\Local Settings\Application Data\Softonic_France
[HKCR\imweb.imwebcontrol]
[HKCR\nctaudiocdwriter2.audiocdwriter2]
[HKCR\nctaudiocdwriter2.audiocdwriter2.1]
[HKCR\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}]
[HKLM\Software\Classes\Interface\{06DE5702-44CF-4B79-B4EF-3DDF653358F5}]
[HKCR\AppID\{1fc41815-fa4c-4f8b-b143-2c045c8ea2fc}]
[HKLM\Software\Classes\AppID\{1fc41815-fa4c-4f8b-b143-2c045c8ea2fc}]
[HKCR\AppID\{21493C1F-D071-496A-9C27-450578888291}]
[HKLM\Software\Classes\AppID\{21493C1F-D071-496A-9C27-450578888291}]
[HKCR\TypeLib\{2D77AC8A-0A4C-40D0-9557-51907A575E45}]
[HKLM\Software\Classes\TypeLib\{2D77AC8A-0A4C-40D0-9557-51907A575E45}]
[HKCR\Interface\{3EDDA953-1C3B-4823-8F25-D075FBB2D2B5}]
[HKLM\Software\Classes\Interface\{3EDDA953-1C3B-4823-8F25-D075FBB2D2B5}]
[HKCR\AppID\{403A885F-CB00-40C1-BDC1-EB09053194F7}]
[HKCR\TypeLib\{403A885F-CB00-40C1-BDC1-EB09053194F7}]
[HKLM\Software\Classes\AppID\{403A885F-CB00-40C1-BDC1-EB09053194F7}]
[HKLM\Software\Classes\TypeLib\{403A885F-CB00-40C1-BDC1-EB09053194F7}]
[HKCR\TypeLib\{43B4B831-F41F-4F73-8F14-4FFF0BA75B1B}]
[HKLM\Software\Classes\TypeLib\{43B4B831-F41F-4F73-8F14-4FFF0BA75B1B}]
[HKCR\TypeLib\{4C1E5902-FE99-4591-8582-2A2605462857}]
[HKLM\Software\Classes\TypeLib\{4C1E5902-FE99-4591-8582-2A2605462857}]
[HKCR\AppID\{55C1727F-5535-4C2A-9601-8C2458608B48}]
[HKCR\TypeLib\{55C1727F-5535-4C2A-9601-8C2458608B48}]
[HKLM\Software\Classes\AppID\{55C1727F-5535-4C2A-9601-8C2458608B48}]
[HKLM\Software\Classes\TypeLib\{55C1727F-5535-4C2A-9601-8C2458608B48}]
[HKCR\CLSID\{5C00A371-2011-4AF3-97C8-6CE66AA744CB}]
[HKLM\Software\Classes\CLSID\{5C00A371-2011-4AF3-97C8-6CE66AA744CB}]
[HKCR\AppID\{5e50ae1d-bc76-418b-94c4-efeac0cef80c}]
[HKLM\Software\Classes\AppID\{5e50ae1d-bc76-418b-94c4-efeac0cef80c}]
[HKCR\AppID\{69E54DE2-C4ED-4BEC-8046-E3F9AC74B4B0}]
[HKLM\Software\Classes\AppID\{69E54DE2-C4ED-4BEC-8046-E3F9AC74B4B0}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6A87B991-A31F-4130-AE72-6D0C294BF082}]
[HKCR\TypeLib\{6C9945B7-1D19-46CB-88C0-45A24DF6CD6E}]
[HKLM\Software\Classes\TypeLib\{6C9945B7-1D19-46CB-88C0-45A24DF6CD6E}]
[HKCR\TypeLib\{81ca8fcd-1420-4a07-b47d-b30f3dda79e1}]
[HKLM\Software\Classes\TypeLib\{81ca8fcd-1420-4a07-b47d-b30f3dda79e1}]
[HKCR\TypeLib\{84B9B044-17C0-48FB-A300-C9747D5DF29C}]
[HKLM\Software\Classes\TypeLib\{84B9B044-17C0-48FB-A300-C9747D5DF29C}]
[HKCR\TypeLib\{85672EDB-2CC8-40B9-A9E8-77D3478F2EFB}]
[HKLM\Software\Classes\TypeLib\{85672EDB-2CC8-40B9-A9E8-77D3478F2EFB}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{872F3C0B-4462-424c-BB9F-74C6899B9F92}]
[HKCR\CLSID\{9F038672-0425-4792-BC9C-36DE3308E8AA}]
[HKLM\Software\Classes\CLSID\{9F038672-0425-4792-BC9C-36DE3308E8AA}]
[HKCR\AppID\{A7DDCBDE-5C86-415c-8A37-763AE183E7E4}]
[HKLM\Software\Classes\AppID\{A7DDCBDE-5C86-415c-8A37-763AE183E7E4}]
[HKCR\AppID\{AD71F65D-CD13-4837-A2DC-E4D90020E7D4}]
[HKLM\Software\Classes\AppID\{AD71F65D-CD13-4837-A2DC-E4D90020E7D4}]
[HKCR\Interface\{B67A4CBA-520A-43DB-B03F-414E539F90EC}]
[HKLM\Software\Classes\Interface\{B67A4CBA-520A-43DB-B03F-414E539F90EC}]
[HKCR\CLSID\{B6F8DA9F-2696-419e-A8A3-19BE41EF51BD}]
[HKLM\Software\Classes\CLSID\{B6F8DA9F-2696-419e-A8A3-19BE41EF51BD}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B6F8DA9F-2696-419e-A8A3-19BE41EF51BD}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}]
[HKCR\CLSID\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}]
[HKLM\Software\Classes\CLSID\{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{e908b145-c847-4e85-b315-07e2e70decf8}]
[HKCR\AppID\{F54A0D21-6A53-460C-8301-C694EC9E1033}]
[HKLM\Software\Classes\AppID\{F54A0D21-6A53-460C-8301-C694EC9E1033}]
[HKCR\AppID\{F7BCCFD4-2FA6-477D-A1B0-EF7500B3C49E}]
[HKLM\Software\Classes\AppID\{F7BCCFD4-2FA6-477D-A1B0-EF7500B3C49E}]
[HKCR\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF]
[HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF]
[HKCR\Installer\UpgradeCodes\CC94835868BCA58489B0D79DE655BCB1]
EmptyTemp
EmptyFlash

---------------------------------------------------

* * Click on the icon representing the letter H (“paste Helper lines”)
* The lines will automatically be pasted into ZHPFix.
* Click on the "GO" button to start the cleanup,
* Copy/paste the entire report in your next response

Post the report saved in this folder (via Cjoint please) -> ( C:\Program files\ZHPFix\ZHPFixReport.txt )

Step 2
[*] Download Malwarebytes

[*] You will have a tutorial available to install and use it correctly.

[*]Update the software (this usually happens during installation)

[*] Run a full scan by clicking on "Run a full scan"

[*] Select all your local and removable drives and click on "Start scan"

[*] The scan may take a while.....

[*] Once the scan is complete, click "OK" and then "Show results"

[*] Ensure everything is checked and click on "Remove selected" => and then click "OK"

[*] A report will open in Notepad... Copy/paste the report in your next response on the forum

* Some files may need to be deleted at the next PC restart... Do so by clicking "yes" to the prompt

https://www.cjoint.com/?AEpr4nhgePf

Thank you,
Here is the report
======= AD-REMOVER REPORT 2.0.0.2,G | WINDOWS XP/VISTA/7 ONLY =======

Updated by TeamXscript on 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Website: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Launched at 17:26:18 on 15/05/2011, Normal mode

Microsoft Windows XP Home Edition Service Pack 3 (X86)
HP_Owner@NAME-EB85C523610 ( )

============== ACTION(S) ==============

File deleted: C:\WINDOWS\system32\c506b3da.exe
File deleted: C:\Program Files\Mozilla FireFox\Components\AskHPRFF.js
File deleted: C:\WINDOWS\system32\ConduitEngine.tmp
File deleted: C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job
File deleted: C:\Documents and Settings\HP_Owner\Application Data\Mozilla\FireFox\Profiles\2kkrg3eh.default\searchplugins\askcom.xml
File deleted: C:\Documents and Settings\HP_Owner\Application Data\Mozilla\FireFox\Profiles\2kkrg3eh.default\searchplugins\search.xml
Folder deleted: C:\Documents and Settings\HP_Owner\Application Data\Mozilla\FireFox\Profiles\2kkrg3eh.default\conduit
Folder deleted: C:\Documents and Settings\HP_Owner\Application Data\Mozilla\FireFox\Profiles\2kkrg3eh.default\ConduitEngine
Folder deleted: C:\Documents and Settings\HP_Owner\Application Data\Mozilla\FireFox\Profiles\2kkrg3eh.default\extensions\engine@conduit.com
File deleted: C:\Documents and Settings\HP_Owner\Application Data\Mozilla\FireFox\Profiles\2kkrg3eh.default\searchplugins\conduit.xml
File deleted: C:\Documents and Settings\HP_Owner\Application Data\Mozilla\FireFox\Profiles\2kkrg3eh.default\searchplugins\web-search.xml
File deleted: C:\Documents and Settings\HP_Owner\scriptjava.html
File deleted: C:\Documents and Settings\HP_Owner\temp1.6
Folder deleted: C:\Program Files\Ask.com
Folder deleted: C:\Documents and Settings\HP_Owner\Local Settings\Application Data\AskToolbar
Folder deleted: C:\Documents and Settings\HP_Owner\Local Settings\Application Data\Conduit
Folder deleted: C:\Program Files\Conduit
Folder deletion error: C:\Documents and Settings\HP_Owner\Local Settings\Application Data\ConduitEngine
Folder deleted: C:\Program Files\ConduitEngine
Folder deleted: C:\Documents and Settings\HP_Owner\Application Data\PriceGong

(!) -- Temporary files deleted.

-- Opened file: C:\Documents and Settings\HP_Owner\Application Data\Mozilla\FireFox\Profiles\2kkrg3eh.default\Prefs.js --
Line deleted: user_pref("CT1460988.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER...
Line deleted: user_pref("CT1460988.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT146...
Line deleted: user_pref("CT1460988.ct1460988.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_...
Line deleted: user_pref("CT2542115.SearchEngine", "Recherche||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_...
Line deleted: user_pref("CT2542115.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT254...
Line deleted: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/CH", "\"0\"")...
Line deleted: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "...
Line deleted: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3...
Line deleted: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63...
Line deleted: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20...
Line deleted: user_pref("CommunityToolbar.EngineHiddenByUser", true);
Line deleted: user_pref("CommunityToolbar.EngineOwner", "ConduitEngine");
Line deleted: user_pref("CommunityToolbar.EngineOwnerGuid", "engine@conduit.com");
Line deleted: user_pref("CommunityToolbar.EngineOwnerToolbarId", "conduitengine");
Line deleted: user_pref("CommunityToolbar.IsEngineShown", false);
Line deleted: user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Line deleted: user_pref("CommunityToolbar.OriginalEngineOwner", "ConduitEngine");
Line deleted: user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "engine@conduit.com");
Line deleted: user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "conduitengine");
Line deleted: user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://google.search.us/Result.php?clie...
Line deleted: user_pref("CommunityToolbar.ToolbarsList", "CT1460988,CT2542115,ConduitEngine");
Line deleted: user_pref("CommunityToolbar.ToolbarsList2", "CT1460988,CT2542115");
Line deleted: user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Sun Mar 27 2011 10:21:38 GMT+02...
Line deleted: user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
Line deleted: user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sun May 15 2011 10:50:12 GMT+0200");
Line deleted: user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Line deleted: user_pref("CommunityToolbar.alert.locale", "en");
Line deleted: user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Line deleted: user_pref("CommunityToolbar.alert.loginLastCheckTime", "Sat May 14 2011 20:39:21 GMT+0200");
Line deleted: user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1303303927");
Line deleted: user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Line deleted: user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Line deleted: user_pref("CommunityToolbar.alert.showTrayIcon", false);
Line deleted: user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Line deleted: user_pref("CommunityToolbar.alert.userId", "c04f5034-35a7-4c43-a5d2-beb1955e97b6");
Line deleted: user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Mon Aug 30 2010 19:10:12 GMT+0200");
Line deleted: user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Line deleted: user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Line deleted: user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2542115");
Line deleted: user_pref("ConduitEngine.AppTrackingLastCheckTime", "Tue May 10 2011 21:34:31 GMT+0200");
Line deleted: user_pref("ConduitEngine.CTID", "ConduitEngine");
Line deleted: user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Fri May 06 2011 18:31:00 GMT+0200");
Line deleted: user_pref("ConduitEngine.FirstServerDate", "03/27/2011 11");
Line deleted: user_pref("ConduitEngine.FirstTime", true);
Line deleted: user_pref("ConduitEngine.FirstTimeFF3", true);
Line deleted: user_pref("ConduitEngine.HasUserGlobalKeys", true);
Line deleted: user_pref("ConduitEngine.Initialize", true);
Line deleted: user_pref("ConduitEngine.InitializeCommonPrefs", true);
Line deleted: user_pref("ConduitEngine.InstalledDate", "Sun Mar 27 2011 10:21:39 GMT+0200");
Line deleted: user_pref("ConduitEngine.IsMulticommunity", false);
Line deleted: user_pref("ConduitEngine.IsOpenThankYouPage", false);
Line deleted: user_pref("ConduitEngine.IsOpenUninstallPage", true);
Line deleted: user_pref("ConduitEngine.LanguagePackLastCheckTime", "Sun May 08 2011 21:50:06 GMT+0200");
Line deleted: user_pref("ConduitEngine.LastLogin_3.3.3.2", "Sun May 08 2011 21:50:06 GMT+0200");
Line deleted: user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);
Line deleted: user_pref("ConduitEngine.SettingsLastCheckTime", "Sun May 08 2011 21:50:19 GMT+0200");
Line deleted: user_pref("ConduitEngine.UserID", "UN94443869942007641");
Line deleted: user_pref("ConduitEngine.componentAlertEnabled", false);
Line deleted: user_pref("ConduitEngine.engineLocale", "fr");
Line deleted: user_pref("ConduitEngine.engineContextMenuLastCheckTime", "Sun May 08 2011 21:50:06 GMT+0200");
Line deleted: user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Sun May 08 2011 21:50:06 GMT+0200");
Line deleted: user_pref("ConduitEngine.initDone", true);
Line deleted: user_pref("ConduitEngine.isAppTrackingManagerOn", true);
Line deleted: user_pref("ConduitEngine.usagesFlag", 2);
Line deleted: user_pref("browser.search.defaultengine", "Ask.com");
Line deleted: user_pref("browser.search.defaultenginename", "Ask.com");
Line deleted: user_pref("browser.search.defaulturl", "hxxp://flvdirect.iamwired.net/websearch.php?src=tops&search=...
Line deleted: user_pref("browser.search.order.1", "Ask.com");
Line deleted: user_pref("extensions.asktb.cbid", "RY");
Line deleted: user_pref("extensions.asktb.default-channel-url-mask", "hxxp://www.ask.com/web?q={query}&o={o}&l={l}...
Line deleted: user_pref("extensions.asktb.first-launch-url", "hxxp://www.ccleaner.com/update/?v=2.27.1070&l=1036" )...
Line deleted: user_pref("extensions.asktb.fresh-install", false);
Line deleted: user_pref("extensions.asktb.l", "dis");
Line deleted: user_pref("extensions.asktb.last-config-req", "1285603933370");
Line deleted: user_pref("extensions.asktb.locale", "en_US");
Line deleted: user_pref("extensions.asktb.o", "15184");
Line deleted: user_pref("extensions.asktb.overlay-reloaded-using-restart", true);
Line deleted: user_pref("extensions.asktb.qsrc", "2871");
Line deleted: user_pref("extensions.asktb.r", "2");
Line deleted: user_pref("extensions.asktb.search-plugin-suggestions-url", "hxxp://ss.websearch.ask.com/query?qsrc=...
Line deleted: user_pref("extensions.asktb.search-suggestions-enabled", true);
Line deleted: user_pref("extensions.asktb.search-suggestions-uri", "hxxp://ss.websearch.ask.com/query?qsrc=2922&li...
-- File Closed --

Key deleted: HKLM\Software\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key deleted: HKLM\Software\Classes\CLSID\{27F69C85-64E1-43CE-98B5-3C9F22FB408E}
Key deleted: HKLM\Software\Classes\AppID\{1301A8A5-3DFB-4731-A162-B357D00C9644}
Key deleted: HKLM\Software\Classes\CLSID\{a42b8c5c-9c90-c7a7-3814-28e0bcd9add0}
Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a42b8c5c-9c90-c7a7-3814-28e0bcd9add0}
Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{a42b8c5c-9c90-c7a7-3814-28e0bcd9add0}
Key deleted: HKLM\Software\Classes\CLSID\{B543EF05-9758-464E-9F37-4C28525B4A4C}
Key deleted: HKLM\Software\Classes\CLSID\{BB76A90B-2B4C-4378-8506-9A2B6E16943C}
Key deleted: HKLM\Software\Classes\CLSID\{C3AB94A4-BFD0-4BBA-A331-DE504F07D2DB}
Key deleted: HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key deleted: HKLM\Software\Classes\Interface\{03C390E8-B836-4B82-8D56-1BFDDC06AE8A}
Key deleted: HKLM\Software\Classes\Interface\{2C4470A2-E099-4B9E-ABFE-BBA56D046AFD}
Key deleted: HKLM\Software\Classes\Interface\{391769AE-D8EC-45EC-967D-F5120456E514}
Key deleted: HKLM\Software\Classes\Interface\{39AEF150-C270-4690-AE7D-955E51BC8960}
Key deleted: HKLM\Software\Classes\Interface\{477F210A-2A86-4666-9C4B-1189634D2C84}
Key deleted: HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key deleted: HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key deleted: HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key deleted: HKLM\Software\Classes\Interface\{CD73B1AB-3403-4E47-B196-517C57BE76A2}
Key deleted: HKLM\Software\Classes\Interface\{FF871E51-2655-4D06-AED5-745962A96B32}
Key deleted: HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Key deleted: HKLM\Software\Classes\TypeLib\{8F5F1CB6-EA9E-40AF-A5CA-C7FD63CC1971}
Key deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\c506b3da
Key deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\QhTuW-
Key deleted: HKLM\Software\Classes\BandooCore.BandooCore
Key deleted: HKLM\Software\Classes\BandooCore.BandooCore.1
Key deleted: HKLM\Software\Classes\BandooCore.ResourcesMngr
Key deleted: HKLM\Software\Classes\BandooCore.ResourcesMngr.1
Key deleted: HKLM\Software\Classes\BandooCore.SettingsMngr
Key deleted: HKLM\Software\Classes\BandooCore.SettingsMngr.1
Key deleted: HKLM\Software\Classes\BandooCore.StatisticMngr
Key deleted: HKLM\Software\Classes\BandooCore.StatisticMngr.1
Key deleted: HKLM\Software\Classes\Conduit.Engine
Key deleted: HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd
Key deleted: HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd.1
Key deleted: HKLM\Software\Classes\Toolbar.CT2504091
Key deleted: HKLM\Software\Classes\Toolbar.CT2542115
Key deleted: HKLM\Software\Classes\AppID\BandooCore.EXE
Key deleted: HKLM\Software\Classes\AppID\GenericAskToolbar.DLL
Key deleted: HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Key deleted: HKLM\Software\bandoo
Key deleted: HKLM\Software\Conduit
Key deleted: HKCU\Software\Ask.com
Key deleted: HKCU\Software\AskToolbar
Key deleted: HKCU\Software\conduitEngine
Key deleted: HKCU\Software\PriceGong
Key deleted: HKCU\Software\AppDataLow\AskBarDis
Key deleted: HKCU\Software\AppDataLow\AskHomePage
Key deleted: HKCU\Software\AppDataLow\AskToolbarInfo
Key deleted: HKCU\Software\AppDataLow\HavingFunOnline
Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Bandoo
Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Dealio
Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\FLV Direct Player
Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\WhenU
Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Zango
Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Zango Programs
Key deleted: HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Key deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
Key deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
Key deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{557C21FE-7274-410D-853E-9ED4471BF193}
Key deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Key deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{F1B1E52E-E3C3-4B98-9A76-4450479EF8C1}
Key deleted: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key deleted: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Key deleted: HKCU\Software\Microsoft\Internet Explorer\MenuExt\Search with search.us
Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}

Value deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\Trust Database\0|goicfboogidikkejccmclpieicihhlpo hpfanicgkffmccehnpkikogcffaepkfp
Value deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\Trust Database\0|goicfboogidikkejccmclpieicihhlpo dgnckdmmolaijpbbakmplfhlfpdhglgc
Value deleted: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{00000000-6E41-4FD3-8538-502F5495E5FC}
Value deleted: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{D4027C7F-154A-4066-A1AD-4243D8127440}
Value deleted: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440}

============== ADDITIONAL SCAN ==============

**** Mozilla Firefox Version [4.0.1 (fr)] ****

Plugins\npdivx32.dll (DivX, Inc.)
Plugins\npDivxPlayerPlugin.dll (DivX, Inc)
Plugins\npsnapfish.dll ( )
Plugins\npunagi2.dll (America Online, Inc.)
HKLM_MozillaPlugins\@garmin.com/GpsControl (x)
Searchplugins\bing.xml ( hxxp://www.bing.com/search)
Components\browsercomps.dll (Mozilla Foundation)
Extensions\{3112ca9c-de6d-4884-a869-9855de68056c} (Google Toolbar for Firefox)
Extensions\{5a085e73-a120-c70f-2540-810f57ee2fe8} (z)
HKLM_Extensions|litmus-ff@f-secure.com - C:\Program Files\Internet Security\NRS\litmus-ff@f-secure.com

-- C:\Documents and Settings\HP_Owner\Application Data\Mozilla\FireFox\Profiles\2kkrg3eh.default --
Extensions\fr@dictionaries.addons.mozilla.org (French dictionary "Reform 1990")
Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} (Garmin Communicator)
Extensions\{3112ca9c-de6d-4884-a869-9855de68056c} (Google Toolbar for Firefox)
Extensions\{4daac69c-cba7-45e2-9bc8-1044483d3352} (Softonic_France Community Toolbar)
Searchplugins\LphantWebSearch.xml ( hxxp://search.lphant.com/webResults.html?src=ffb&q={searchTerms}/)
Searchplugins\Search.xml (?)
Prefs.js - browser.download.dir, C:\\Documents and Settings\\HP_Owner\\Desktop
Prefs.js - browser.search.selectedEngine, Google
Prefs.js - browser.startup.homepage, hxxp://www.bluewin.ch/
Prefs.js - browser.startup.homepage_override.buildID, 20110413222027
Prefs.js - browser.startup.homepage_override.mstone, rv:2.0.1
Prefs.js - keyword.URL, hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=

========================================

**** Internet Explorer Version [7.0.5730.13] ****

Plugins\NPEvery.dll (Broderbund)
HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
HKCU_Main|Start Page - hxxp://fr.msn.com/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Start Page - hxxp://fr.msn.com/
HKCU_SearchScopes\{9091C5EC-8529-4EE0-9B0D-96A0520FFB90} - "Search" (hxxp://flvdirect.iamwired.net/websearch.php?src=tops&search={SearchTerms})
HKCU_SearchScopes\{B320F28C-6347-46e4-98FF-5261CA66FEDA} - "Web Search" (hxxp://search.lphant.com/webResults.html?src=ieb&q={searchTerms})
HKCU_Toolbar\ShellBrowser|{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} (x)
HKLM_Toolbar|{327C2873-E90D-4c37-AA9D-10AC9BABA46C} (C:\Program Files\Canon\Easy-WebPrint\Toolband.dll)
HKLM_Toolbar|{265EEE8E-3228-44D3-AEA5-F7FDF5860049} (C:\Program Files\Internet Security\NRS\iescript\baselitmus.dll)
HKLM_ElevationPolicy\2a7a56c0-6991-4c84-a11d-ea1bcd9d89c0 - C:\Program Files\Vuze_Remote\Vuze_RemoteToolbarHelper.exe (x)
HKLM_ElevationPolicy\4fbb75e9-648a-4919-96c3-80d265c43805 - C:\Program Files\Vuze_Remote\Vuze_RemoteToolbarHelper.exe (x)
HKLM_ElevationPolicy\8f0c59f4-ea24-4319-add6-a04fc0e63095 - C:\Program Files\Vuze_Remote\Vuze_RemoteToolbarHelper.exe (x)
HKLM_ElevationPolicy\{1CC6F2D4-61C2-41d9-AF15-1D886DF98B2B} - C:\Program Files\Lphant Applications\Lphant\Lphant.exe (Discordia, LTD)
HKLM_ElevationPolicy\{2A9467B4-C085-11DD-BC92-869555D89593} - C:\Program Files\LphantTb\uninstall.exe (Visicom Media Inc.)
HKLM_ElevationPolicy\{44295CB8-D71B-11DA-8750-001185653D78} - c:\program files\google\googletoolbar2user.exe (?)
HKLM_ElevationPolicy\{F9F9EFDD-8B1F-4D2F-AF13-D7A6CCF1E4C1} - C:\Program Files\Common Files\Motive\McciControlHost.exe (Motive Communications, Inc.)
HKLM_Extensions\{E2D4D26B-0180-43a4-B05F-462D6D54C789} - "Connection Help" (C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\conn_support.ico)
HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?)
BHO\{02478D38-C3F9-4efb-9B51-7695ECA05670} (?)
BHO\{55BD16AA-37AD-C8C4-0305-060D9C3832CE} - "uberclicks browser extension" (C:\WINDOWS\system32\ndhjdfuzjilvrjrjp.dll)
BHO\{C6867EB7-8350-4856-877F-93CF8AE3DC9C} - "Browsing Protection Class" (C:\Program Files\Internet Security\NRS\iescript\baselitmus.dll)

========================================

C:\Program Files\Ad-Remover\Quarantine: 251 File(s)
C:\Program Files\Ad-Remover\Backup: 27 File(s)

C:\Ad-Report-CLEAN[1].txt - 15/05/2011 17:26:31 (18470 Bytes)

Finished at: 17:28:19, 15/05/2011

============== E.O.F ==============

The ZHPDiag report is not complete, but we will still begin the cleaning process.
Step 1
Uninstall the following software: (Start => Control Panel => Add/Remove Programs)
- Software: Ask Toolbar
- Software: Conduit Engine
- Software: Softonic_France Toolbar

Step 2
[*]Download AD-Remover (by Cyrildu17 / C_XX) to your Desktop.

- Temporarily disable only for the time you use AD-Remover, the real-time protection of your Antivirus and Antispyware, which may significantly hinder the cleaning procedure of the tool.
- Log out and close all running applications.

[*]Double-click the installer and install it in its default location (C:\Program files).

[*]Double-click on the AD-Remover icon located on your Desktop.
(Vista/Seven - Right-click on the AD-Remover icon on your Desktop and choose run as administrator.)

[*]In the main menu, choose the Clean option.

[*]Post the report that appears at the end.

(The report is also saved under C:\Ad-report(clean).Txt

(CTRL+A to select all, CTRL+C to copy and CTRL+V to paste)

Step 3
-Please post a new ZHPDiag report by strictly following the steps outlined to visualize the entire report.

Use Cjoint.com to post your report link:
https://www.cjoint.com/

- Click on Browse to find the report.
- Click on Open then Create the Cjoint link.

- In your next response, copy/paste the link that is displayed...The link has been created:

It is IMPERATIVE to host the report via Cjoint as requested, otherwise it will not fully appear on the forum.