"Repair Windows Errors" - audio prompt - source unknown

Page 1 of 2 12 LastLast

  1. Mystery Salad
    Posts : 11
    Windows 7 Home Premium 64 bit
       New #1

    "Repair Windows Errors" - audio prompt - source unknown


    (I posted this topic earlier on whirlpool.com.au but I thought I'd try my luck copy/pasting it here to see if anyone has any insight on it)

    I've just encountered an issue that must surely be malware of some kind, but I have no idea what's going on and Googling doesn't shed any light on it.

    About half an hour ago, out of nowhere, a female computer generated voice over my speakers says "Repair Windows Errors". Nothing else, just "Repair Windows Errors".

    I have only two applications running, Firefox and VLC which was playing a video at the time.

    At first I thought there was a some weird audio glitch in the video and / or I was "hearing things", so I jumped back ten seconds and replayed it and it didn't happen again.

    So then, more obviously maybe, I thought it must be a popup in Firefox. I checked, and didn't see any tab that it might have come from. Besides, all the sites open in the tabs are reputable sites that don't have popups.

    I checked that Internet Security Essentials was up to date and ran a scan of the computer which came up with no results, so I tentatively shrugged it off and go back to what I was doing.

    15 minutes goes by and I hear this voice speak again – "Repair Windows Errors" – and this time there's no confusion, I made the words out plain as day.

    Anyone have an idea what's going on here?

    Some quick googling has not given any results that would seem to relate to this specifically.

    This is weirding me out big time.

    (OS in Windows 7 Home Ultimate if that's relevant)
    Last edited by Mystery Salad; 07 Apr 2014 at 10:37. Reason: formatting
      My Computer
    Quote Quote

  3. Jacee
    Posts : 8,608
    Windows 7 Ultimate 32bit SP1
       New #2

    You may have adware PUP (potentially unwanted programs)

    download AdwCleaner by Xplode and save to your Desktop.
    • Double click on AdwCleaner.exe to run the tool.
      Vista/Windows 7/8 users right-click and select Run As Administrator.
    • Click on the Scan button.
    • AdwCleaner will begin...be patient as the scan may take some time to complete.
    • After the scan has finished, click on the Report button...a logfile (AdwCleaner[R#].txt) will open in Notepad for review (where the largest value of # represents the most recent report).
    • The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
    • Copy and paste the contents of that logfile in your next reply.
    • A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.


    Next:

    Using AdwCleaner v3: Scan & Clean:
    Double click on AdwCleaner.exe to run the tool again.
    Click on the Scan button.
    AdwCleaner will begin to scan your computer like it did before.
    After the scan has finished...

    This time click on the Clean button.
    Press OK when asked to close all programs and follow the onscreen prompts.
    Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
    After rebooting, a logfile report (AdwCleaner[S#].txt) will open automatically (where the largest value of # represents the most recent report).
    Copy and paste the contents of that logfile in your next reply.
    A copy of that logfile will also be saved in the C:\AdwCleaner folder
      My Computer
    Quote Quote

  4. cottonball
    Posts : 2,470
    Windows 7 Home Premium
       New #3

    Are you running Microsoft Security Essentials, vs. Internet Security Essentials?

    If so, please open it, click the History tab and then tick: All detected items
    After items appear, click: Remove All

    Does it take care of the problem?
      My Computer
    Quote Quote

  6. Mystery Salad
    Posts : 11
    Windows 7 Home Premium 64 bit
    Thread Starter
       New #4

    OK I downloaded AdwCleaner and scanned, here's the report:

    # AdwCleaner v3.023 - Report created 08/04/2014 at 11:29:47
    # Updated 01/04/2014 by Xplode
    # Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
    # Username : **** - I5
    # Running from : C:\Users\****\Downloads\AdwCleaner.exe
    # Option : Scan

    ***** [ Services ] *****


    ***** [ Files / Folders ] *****

    Folder Found C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\que4v1pk.default\Smartbar

    ***** [ Shortcuts ] *****


    ***** [ Registry ] *****

    Key Found : HKCU\Software\AppDataLow\Software\SmartBar
    Key Found : HKCU\Software\Conduit
    Key Found : [x64] HKCU\Software\Conduit
    Key Found : HKLM\Software\Conduit

    ***** [ Browsers ] *****

    -\\ Internet Explorer v10.0.9200.16750


    -\\ Mozilla Firefox v28.0 (en-US)

    [ File : C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\que4v1pk.default\prefs.js ]

    Line Found : user_pref("CT3289075.1000082.isPlayDisplay", "true");
    Line Found : user_pref("CT3289075.1000082.state", "{\"state\":\"stopped\",\"text\":\"National ...\",\"description\":\"National - Radio Australia (Other)\",\"url\":\"mms://media4.abc.net.au/raflp\"}");
    Line Found : user_pref("CT3289075.1000234.TWC_TMP_city", "BRISBANE");
    Line Found : user_pref("CT3289075.1000234.TWC_TMP_country", "AU");
    Line Found : user_pref("CT3289075.1000234.TWC_country", "AUSTRALIA");
    Line Found : user_pref("CT3289075.1000234.TWC_locId", "ASXX0016");
    Line Found : user_pref("CT3289075.1000234.TWC_location", "Brisbane, Australia");
    Line Found : user_pref("CT3289075.1000234.TWC_region", "OT");
    Line Found : user_pref("CT3289075.1000234.TWC_temp_dis", "c");
    Line Found : user_pref("CT3289075.1000234.TWC_wind_dis", "kmh");
    Line Found : user_pref("CT3289075.BT_Stats.enc", "eyJsYXN0X2xvZyI6MTM3NjM4MTk1NiwidXVpZCI6OTk0MzM3MTA5MDAwMDQ5LCJzZXFfaWQiOjEsInNzYiI6MTM3NjM4MTk1Nn0 =");
    Line Found : user_pref("CT3289075.BT_Usage.enc", "eyJ1dWlkIjo5OTQzMzcxMDkwMDAwNDksInNlcV9pZCI6Mn0=");
    Line Found : user_pref("CT3289075.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
    Line Found : user_pref("CT3289075.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
    Line Found : user_pref("CT3289075.FF19Solved", "true");
    Line Found : user_pref("CT3289075.FirstTime", "true");
    Line Found : user_pref("CT3289075.FirstTimeFF3", "true");
    Line Found : user_pref("CT3289075.PG_ENABLE", "dHJ1ZQ==");
    Line Found : user_pref("CT3289075.SF_JUST_INSTALLED.enc", "RkFMU0U=");
    Line Found : user_pref("CT3289075.SF_STATUS.enc", "RU5BQkxFRA==");
    Line Found : user_pref("CT3289075.SF_USER_ID.enc", "Y2lkXzEzODIwMTMxODE5MjM4MjAwMzY=");
    Line Found : user_pref("CT3289075.UserID", "UN37137131202069013");
    Line Found : user_pref("CT3289075.addressBarTakeOverEnabledInHidden", "true");
    Line Found : user_pref("CT3289075.cbfirsttime.enc", "VHVlIEF1ZyAxMyAyMDEzIDE4OjE5OjI2IEdNVCsxMDAw");
    Line Found : user_pref("CT3289075.countryCode", "AU");
    Line Found : user_pref("CT3289075.defaultSearch", "false");
    Line Found : user_pref("CT3289075.enableSearchFromAddressBar", "false");
    Line Found : user_pref("CT3289075.firstTimeDialogOpened", "true");
    Line Found : user_pref("CT3289075.fixPageNotFoundErrorByUser", "false");
    Line Found : user_pref("CT3289075.fixPageNotFoundErrorInHidden", "true");
    Line Found : user_pref("CT3289075.fixUrls", true);
    Line Found : user_pref("CT3289075.fullUserID", "UN37137131202069013.IN.20130813180502");
    Line Found : user_pref("CT3289075.hxxp___toolbar_utorrent_com.APP_WIN_FEATURES.enc", "cmVzaXphYmxlPTAsc2F2ZXJlc2l6ZWRzaXplPTAsdGl0bGViYXI9MCxjbG9zZW9uZXh0ZXJuYWxjbGljaz0xLHNhdmVsb2NhdGl vbj0wLG9wZW5wb3NpdGlvbj1vZmZ[...]
    Line Found : user_pref("CT3289075.installDate", "13/08/2013 18:05:02");
    Line Found : user_pref("CT3289075.installSessionId", "-1");
    Line Found : user_pref("CT3289075.installSp", "FALSE");
    Line Found : user_pref("CT3289075.installType", "xpe");
    Line Found : user_pref("CT3289075.installUsage", "2013-08-13T11:19:19.8992449+03:00");
    Line Found : user_pref("CT3289075.installUsageEarly", "2013-08-13T11:19:19.8992449+03:00");
    Line Found : user_pref("CT3289075.installerVersion", "1.5.4.4");
    Line Found : user_pref("CT3289075.isCheckedStartAsHidden", true);
    Line Found : user_pref("CT3289075.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
    Line Found : user_pref("CT3289075.isFirstTimeToolbarLoading", "false");
    Line Found : user_pref("CT3289075.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
    Line Found : user_pref("CT3289075.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
    Line Found : user_pref("CT3289075.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3289075&octid=CT3289075&SearchSource=15&CUI=UN37137131202069013&SSPV=&Lay=1&UM=1\"}");
    Line Found : user_pref("CT3289075.lastVersion", "10.20.0.513");
    Line Found : user_pref("CT3289075.mam_gk_appStateReportTime.enc", "MTM3NjUyNDcyMjkzNg==");
    Line Found : user_pref("CT3289075.mam_gk_appState_CouponBuddy.enc", "b24=");
    Line Found : user_pref("CT3289075.mam_gk_appState_Easytobook.enc", "b24=");
    Line Found : user_pref("CT3289075.mam_gk_appState_Easytobook_targeted.enc", "b24=");
    Line Found : user_pref("CT3289075.mam_gk_appState_PriceGong.enc", "b24=");
    Line Found : user_pref("CT3289075.mam_gk_appState_WindowShopper.enc", "b24=");
    Line Found : user_pref("CT3289075.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9wcmljZWdvbmcuY29uZHVpdGFwcHMuY29tL01BTS92MS9 odG1sX2NvbXAuaHRtbCIsInNjcmlwdFVybCI6bnVsbCwib3B0aW9uc0Rp[...]
    Line Found : user_pref("CT3289075.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");
    Line Found : user_pref("CT3289075.mam_gk_calledSetupService.enc", "MQ==");
    Line Found : user_pref("CT3289075.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IkVhc3l0b2Jvb2tfdGFyZ2V0ZWQiLCJjcml0ZXJpYXMiOlt7ImNyaXRlcmlhSWQiOiI 0MDBiOWJmZS01OGNiLTRkZWMtYTQ1ZC02ZmQyMTU1YjM3YjAiLCJ[...]
    Line Found : user_pref("CT3289075.mam_gk_currentVersion.enc", "MS4xMC4yLjU=");
    Line Found : user_pref("CT3289075.mam_gk_eventsCache.enc", "eyI1M2I1ZTMyMS0yZDY0LTQ3NWEtOWRmYS1mYmQ1OTc5NGY0NjEiOnsidG9waWMiOiJzZW5kVXNhZ2UiLCJkYXRhIjp7ImNhdGV nb3J5IjoiV2VsY29tZSIsImFjdGlvbiI6IlZpZXciLCJsYWJlbCI6I[...]
    Line Found : user_pref("CT3289075.mam_gk_existingUsersRecoveryDone.enc", "MQ==");
    Line Found : user_pref("CT3289075.mam_gk_first_time.enc", "MQ==");
    Line Found : user_pref("CT3289075.mam_gk_gadgetOpen.enc", "MA==");
    Line Found : user_pref("CT3289075.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
    Line Found : user_pref("CT3289075.mam_gk_lastLoginTime.enc", "MTM3NjUyNDcxOTU3Nw==");
    Line Found : user_pref("CT3289075.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50IFBvbGljeSJ9LCJnYWRnZXREZXNjcmlwdGlvblByaW1hcnk iOnsiVGV4dCI6IlZhbHVlIEFwcHMgZW5yaWNoZXMgeW91ciB3ZWIg[...]
    Line Found : user_pref("CT3289075.mam_gk_new_welcome_experience.enc", "MQ==");
    Line Found : user_pref("CT3289075.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
    Line Found : user_pref("CT3289075.mam_gk_settings1.10.2.5.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVydmFsIjoyNDAsInN0YW1wIjoiODRfMCIsImlzVGVzdCI6dHJ1ZSw iVXNlckNvdW50cnlDb2RlIjoiQVUiLCJpc1dlbGNvbWVFeHBl[...]
    Line Found : user_pref("CT3289075.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");
    Line Found : user_pref("CT3289075.mam_gk_userId.enc", "Zjk5ODg0ZTAtYzEzZS00NTFiLWI0YWQtODAzYTBlOWViNzRl");
    Line Found : user_pref("CT3289075.mam_gk_user_approval_interacted.enc", "MQ==");
    Line Found : user_pref("CT3289075.mam_gk_welcomeDialogMode.enc", "MQ==");
    Line Found : user_pref("CT3289075.migrateAppsAndComponents", true);
    Line Found : user_pref("CT3289075.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fforums.whirlpool.net.au%2Fforum-replies.cfm%3Ft%3D2189405%26p%3D19\",\"EB_MAIN_FRAME_TITLE\"[...]
    Line Found : user_pref("CT3289075.openThankYouPage", "true");
    Line Found : user_pref("CT3289075.openUninstallPage", "false");
    Line Found : user_pref("CT3289075.originalHomepage", "chrome://branding/locale/browserconfig.properties");
    Line Found : user_pref("CT3289075.revertSettingsEnabled", "FALSE");
    Line Found : user_pref("CT3289075.search.searchAppId", "130064539389933152");
    Line Found : user_pref("CT3289075.search.searchCount", "0");
    Line Found : user_pref("CT3289075.searchInNewTabEnabledByUser", "false");
    Line Found : user_pref("CT3289075.searchInNewTabEnabledInHidden", "true");
    Line Found : user_pref("CT3289075.searchProtector.showDialogPolicy", "{\"dataType\":\"string\",\"data\":\"everytime\"}");
    Line Found : user_pref("CT3289075.searchRevert", "FALSE");
    Line Found : user_pref("CT3289075.searchSuggestEnabledByUser", "false");
    Line Found : user_pref("CT3289075.searchUserMode", "1");
    Line Found : user_pref("CT3289075.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
    Line Found : user_pref("CT3289075.sendUsageEnabled", "false");
    Line Found : user_pref("CT3289075.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
    Line Found : user_pref("CT3289075.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
    Line Found : user_pref("CT3289075.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3289075\"}");
    Line Found : user_pref("CT3289075.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://uTorrentControlv6.OurToolbar.com//xpi\"}");
    Line Found : user_pref("CT3289075.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"uTorrentControl_v6 \"}");
    Line Found : user_pref("CT3289075.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
    Line Found : user_pref("CT3289075.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
    Line Found : user_pref("CT3289075.serviceLayer_services_Configuration_lastUpdate", "1386103356252");
    Line Found : user_pref("CT3289075.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1376381955404");
    Line Found : user_pref("CT3289075.serviceLayer_services_appsMetadata_lastUpdate", "1376743872110");
    Line Found : user_pref("CT3289075.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1376381955709");
    Line Found : user_pref("CT3289075.serviceLayer_services_installUsage_ToolbarInstallEarly_lastUpdate", "1376381955454");
    Line Found : user_pref("CT3289075.serviceLayer_services_installUsage_ToolbarInstall_lastUpdate", "1376381955462");
    Line Found : user_pref("CT3289075.serviceLayer_services_login_10.16.70.505_lastUpdate", "1379236124909");
    Line Found : user_pref("CT3289075.serviceLayer_services_login_10.16.70.7_lastUpdate", "1376621582867");
    Line Found : user_pref("CT3289075.serviceLayer_services_login_10.20.0.513_lastUpdate", "1386103355090");
    Line Found : user_pref("CT3289075.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1376381956008");
    Line Found : user_pref("CT3289075.serviceLayer_services_searchAPI_lastUpdate", "1386103355590");
    Line Found : user_pref("CT3289075.serviceLayer_services_serviceMap_lastUpdate", "1386103353915");
    Line Found : user_pref("CT3289075.serviceLayer_services_toolbarContextMenu_lastUpdate", "1376381955742");
    Line Found : user_pref("CT3289075.serviceLayer_services_toolbarSettings_lastUpdate", "1386103353965");
    Line Found : user_pref("CT3289075.serviceLayer_services_translation_lastUpdate", "1386103354089");
    Line Found : user_pref("CT3289075.settingsINI", true);
    Line Found : user_pref("CT3289075.shouldFirstTimeDialog", "false");
    Line Found : user_pref("CT3289075.showToolbarPermission", "false");
    Line Found : user_pref("CT3289075.smartbar.CTID", "CT3289075");
    Line Found : user_pref("CT3289075.smartbar.Uninstall", "0");
    Line Found : user_pref("CT3289075.smartbar.homepage", true);
    Line Found : user_pref("CT3289075.smartbar.isHidden", true);
    Line Found : user_pref("CT3289075.smartbar.toolbarName", "uTorrentControl_v6 ");
    Line Found : user_pref("CT3289075.startPage", "false");
    Line Found : user_pref("CT3289075.toolbarBornServerTime", "13-8-2013");
    Line Found : user_pref("CT3289075.toolbarCurrentServerTime", "3-12-2013");
    Line Found : user_pref("CT3289075.toolbarDisabled", "true");
    Line Found : user_pref("CT3289075.toolbarLoginClientTime", "Tue Aug 13 2013 18:19:15 GMT+1000");
    Line Found : user_pref("CT3289075.url_history0001.enc", "aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo6OmNsaWNraGFuZGxlcjo6OjEzNzY1MjQ3ODgzODk=");
    Line Found : user_pref("CT3289075.versionFromInstaller", "10.16.70.7");
    Line Found : user_pref("CT3289075.xpeMode", "0");
    Line Found : user_pref("CT3289075_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1386103351680,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
    Line Found : user_pref("browser.startup.homepage", "hxxp://search.conduit.com/?ctid=CT3289075&CUI=UN37137131202069013&UM=1&SearchSource=13&sspv=SSPV_AB_FF_2");
    Line Found : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3289075&CUI=UN37137131202069013&UM=1&SearchSource=13&sspv=SSPV_AB_FF_2");
    Line Found : user_pref("smartbar.homePageOwnerCTID", "CT3289075");
    Line Found : user_pref("smartbar.machineId", "RP71SFY59BID75FSI4FALSVIMEJPGQECS4FFIE118U52N0+QNVR0T0/BTUNAIRFCL6L5YD8Q00RR7FLBQUU7CW");

    *************************

    AdwCleaner[R0].txt - [13433 octets] - [08/04/2014 11:29:47]

    ########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [13494 octets] ##########
      My Computer
    Quote Quote

  7. cottonball
    Posts : 2,470
    Windows 7 Home Premium
       New #5

    Please check Post #3 above!
      My Computer
    Quote Quote

  8. Mystery Salad
    Posts : 11
    Windows 7 Home Premium 64 bit
    Thread Starter
       New #6

    cottonball said:
    Are you running Microsoft Security Essentials, vs. Internet Security Essentials?

    If so, please open it, click the History tab and then tick: All detected items
    After items appear, click: Remove All

    Does it take care of the problem?
    It's Microsoft Security Essentials. Sorry, I though the name of the program was "Microsoft Internet Security Essentials".

    I just checked History > All Detected Items and there was nothing there.

    cottonball said:
    Please check Post #3 above!
    Yeah sorry, you posted a minute before I did :)
    Last edited by Mystery Salad; 07 Apr 2014 at 20:58. Reason: added reply
      My Computer
    Quote Quote

  10. cottonball
    Posts : 2,470
    Windows 7 Home Premium
       New #7

    Use the computer normally for the rest of today. Do whatever you were doing, etc.

    Post back tomorrow, and let us know if the problem is still present.

    If so, you may want to temporarily disable Microsoft Security Essentials:

    1. Find the Microsoft Security Essentials icon in your System Tray. Right-click it and select: Open
    2. Click the Settings tab.
    3. Click: Real-time protection
    4. Uncheck the box next to: Turn on real-time protection (recommended).
    5. Click the Save changes button.

    Go back to whatever you were doing, and see if it solves the problem.

    When you're done troubleshooting, repeat steps 4 and 5, but, this time check the box to Turn on real-time protection, and save the changes to turn Microsoft Security Essentials back on.

    Let us know what happens.
      My Computer
    Quote Quote

  11. Mystery Salad
    Posts : 11
    Windows 7 Home Premium 64 bit
    Thread Starter
       New #8

    cottonball said:
    Use the computer normally for the rest of today. Do whatever you were doing, etc.
    I stayed up late last night and kept using the computer to see if it would happen again. I set my camera up beside one of the speakers and recorded video for a couple of hours to see if I could catch the voice again on the microphone but it didn't happen.
      My Computer
    Quote Quote

  12. Jacee
    Posts : 8,608
    Windows 7 Ultimate 32bit SP1
       New #9

    Please follow through with my AdwCleaner instructions.......


    Using AdwCleaner v3: Scan & Clean:
     Double click on AdwCleaner.exe to run the tool again.
    Click on the Scan button.
    AdwCleaner will begin to scan your computer like it did before.
    After the scan has finished...

    This time click on the Clean button.
    Press OK when asked to close all programs and follow the onscreen prompts.
    Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
    After rebooting, a logfile report (AdwCleaner[S#].txt) will open automatically (where the largest value of # represents the most recent report).
    Copy and paste the contents of that logfile in your next reply.
    A copy of that logfile will also be saved in the C:\AdwCleaner folder
      My Computer
    Quote Quote

  13. Mystery Salad
    Posts : 11
    Windows 7 Home Premium 64 bit
    Thread Starter
       New #10

    OK I did the clean as well, here's the result:

    # AdwCleaner v3.023 - Report created 09/04/2014 at 12:53:53
    # Updated 01/04/2014 by Xplode
    # Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
    # Username : **** - I5
    # Running from : C:\Users\****\Downloads\AdwCleaner.exe
    # Option : Clean

    ***** [ Services ] *****


    ***** [ Files / Folders ] *****

    Folder Deleted : C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\que4v1pk.default\Smartbar

    ***** [ Shortcuts ] *****


    ***** [ Registry ] *****

    Key Deleted : HKCU\Software\Conduit
    Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
    Key Deleted : HKLM\Software\Conduit

    ***** [ Browsers ] *****

    -\\ Internet Explorer v10.0.9200.16750


    -\\ Mozilla Firefox v28.0 (en-US)

    [ File : C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\que4v1pk.default\prefs.js ]

    Line Deleted : user_pref("CT3289075.1000082.isPlayDisplay", "true");
    Line Deleted : user_pref("CT3289075.1000082.state", "{\"state\":\"stopped\",\"text\":\"National ...\",\"description\":\"National - Radio Australia (Other)\",\"url\":\"mms://media4.abc.net.au/raflp\"}");
    Line Deleted : user_pref("CT3289075.1000234.TWC_TMP_city", "BRISBANE");
    Line Deleted : user_pref("CT3289075.1000234.TWC_TMP_country", "AU");
    Line Deleted : user_pref("CT3289075.1000234.TWC_country", "AUSTRALIA");
    Line Deleted : user_pref("CT3289075.1000234.TWC_locId", "ASXX0016");
    Line Deleted : user_pref("CT3289075.1000234.TWC_location", "Brisbane, Australia");
    Line Deleted : user_pref("CT3289075.1000234.TWC_region", "OT");
    Line Deleted : user_pref("CT3289075.1000234.TWC_temp_dis", "c");
    Line Deleted : user_pref("CT3289075.1000234.TWC_wind_dis", "kmh");
    Line Deleted : user_pref("CT3289075.BT_Stats.enc", "eyJsYXN0X2xvZyI6MTM3NjM4MTk1NiwidXVpZCI6OTk0MzM3MTA5MDAwMDQ5LCJzZXFfaWQiOjEsInNzYiI6MTM3NjM4MTk1Nn0 =");
    Line Deleted : user_pref("CT3289075.BT_Usage.enc", "eyJ1dWlkIjo5OTQzMzcxMDkwMDAwNDksInNlcV9pZCI6Mn0=");
    Line Deleted : user_pref("CT3289075.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
    Line Deleted : user_pref("CT3289075.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
    Line Deleted : user_pref("CT3289075.FF19Solved", "true");
    Line Deleted : user_pref("CT3289075.FirstTime", "true");
    Line Deleted : user_pref("CT3289075.FirstTimeFF3", "true");
    Line Deleted : user_pref("CT3289075.PG_ENABLE", "dHJ1ZQ==");
    Line Deleted : user_pref("CT3289075.SF_JUST_INSTALLED.enc", "RkFMU0U=");
    Line Deleted : user_pref("CT3289075.SF_STATUS.enc", "RU5BQkxFRA==");
    Line Deleted : user_pref("CT3289075.SF_USER_ID.enc", "Y2lkXzEzODIwMTMxODE5MjM4MjAwMzY=");
    Line Deleted : user_pref("CT3289075.UserID", "UN37137131202069013");
    Line Deleted : user_pref("CT3289075.addressBarTakeOverEnabledInHidden", "true");
    Line Deleted : user_pref("CT3289075.cbfirsttime.enc", "VHVlIEF1ZyAxMyAyMDEzIDE4OjE5OjI2IEdNVCsxMDAw");
    Line Deleted : user_pref("CT3289075.countryCode", "AU");
    Line Deleted : user_pref("CT3289075.defaultSearch", "false");
    Line Deleted : user_pref("CT3289075.enableSearchFromAddressBar", "false");
    Line Deleted : user_pref("CT3289075.firstTimeDialogOpened", "true");
    Line Deleted : user_pref("CT3289075.fixPageNotFoundErrorByUser", "false");
    Line Deleted : user_pref("CT3289075.fixPageNotFoundErrorInHidden", "true");
    Line Deleted : user_pref("CT3289075.fixUrls", true);
    Line Deleted : user_pref("CT3289075.fullUserID", "UN37137131202069013.IN.20130813180502");
    Line Deleted : user_pref("CT3289075.hxxp___toolbar_utorrent_com.APP_WIN_FEATURES.enc", "cmVzaXphYmxlPTAsc2F2ZXJlc2l6ZWRzaXplPTAsdGl0bGViYXI9MCxjbG9zZW9uZXh0ZXJuYWxjbGljaz0xLHNhdmVsb2NhdGl vbj0wLG9wZW5wb3NpdGlvbj1vZmZ[...]
    Line Deleted : user_pref("CT3289075.installDate", "13/08/2013 18:05:02");
    Line Deleted : user_pref("CT3289075.installSessionId", "-1");
    Line Deleted : user_pref("CT3289075.installSp", "FALSE");
    Line Deleted : user_pref("CT3289075.installType", "xpe");
    Line Deleted : user_pref("CT3289075.installUsage", "2013-08-13T11:19:19.8992449+03:00");
    Line Deleted : user_pref("CT3289075.installUsageEarly", "2013-08-13T11:19:19.8992449+03:00");
    Line Deleted : user_pref("CT3289075.installerVersion", "1.5.4.4");
    Line Deleted : user_pref("CT3289075.isCheckedStartAsHidden", true);
    Line Deleted : user_pref("CT3289075.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
    Line Deleted : user_pref("CT3289075.isFirstTimeToolbarLoading", "false");
    Line Deleted : user_pref("CT3289075.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
    Line Deleted : user_pref("CT3289075.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
    Line Deleted : user_pref("CT3289075.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3289075&octid=CT3289075&SearchSource=15&CUI=UN37137131202069013&SSPV=&Lay=1&UM=1\"}");
    Line Deleted : user_pref("CT3289075.lastVersion", "10.20.0.513");
    Line Deleted : user_pref("CT3289075.mam_gk_appStateReportTime.enc", "MTM3NjUyNDcyMjkzNg==");
    Line Deleted : user_pref("CT3289075.mam_gk_appState_CouponBuddy.enc", "b24=");
    Line Deleted : user_pref("CT3289075.mam_gk_appState_Easytobook.enc", "b24=");
    Line Deleted : user_pref("CT3289075.mam_gk_appState_Easytobook_targeted.enc", "b24=");
    Line Deleted : user_pref("CT3289075.mam_gk_appState_PriceGong.enc", "b24=");
    Line Deleted : user_pref("CT3289075.mam_gk_appState_WindowShopper.enc", "b24=");
    Line Deleted : user_pref("CT3289075.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9wcmljZWdvbmcuY29uZHVpdGFwcHMuY29tL01BTS92MS9 odG1sX2NvbXAuaHRtbCIsInNjcmlwdFVybCI6bnVsbCwib3B0aW9uc0Rp[...]
    Line Deleted : user_pref("CT3289075.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");
    Line Deleted : user_pref("CT3289075.mam_gk_calledSetupService.enc", "MQ==");
    Line Deleted : user_pref("CT3289075.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IkVhc3l0b2Jvb2tfdGFyZ2V0ZWQiLCJjcml0ZXJpYXMiOlt7ImNyaXRlcmlhSWQiOiI 0MDBiOWJmZS01OGNiLTRkZWMtYTQ1ZC02ZmQyMTU1YjM3YjAiLCJ[...]
    Line Deleted : user_pref("CT3289075.mam_gk_currentVersion.enc", "MS4xMC4yLjU=");
    Line Deleted : user_pref("CT3289075.mam_gk_eventsCache.enc", "eyI1M2I1ZTMyMS0yZDY0LTQ3NWEtOWRmYS1mYmQ1OTc5NGY0NjEiOnsidG9waWMiOiJzZW5kVXNhZ2UiLCJkYXRhIjp7ImNhdGV nb3J5IjoiV2VsY29tZSIsImFjdGlvbiI6IlZpZXciLCJsYWJlbCI6I[...]
    Line Deleted : user_pref("CT3289075.mam_gk_existingUsersRecoveryDone.enc", "MQ==");
    Line Deleted : user_pref("CT3289075.mam_gk_first_time.enc", "MQ==");
    Line Deleted : user_pref("CT3289075.mam_gk_gadgetOpen.enc", "MA==");
    Line Deleted : user_pref("CT3289075.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
    Line Deleted : user_pref("CT3289075.mam_gk_lastLoginTime.enc", "MTM3NjUyNDcxOTU3Nw==");
    Line Deleted : user_pref("CT3289075.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50IFBvbGljeSJ9LCJnYWRnZXREZXNjcmlwdGlvblByaW1hcnk iOnsiVGV4dCI6IlZhbHVlIEFwcHMgZW5yaWNoZXMgeW91ciB3ZWIg[...]
    Line Deleted : user_pref("CT3289075.mam_gk_new_welcome_experience.enc", "MQ==");
    Line Deleted : user_pref("CT3289075.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
    Line Deleted : user_pref("CT3289075.mam_gk_settings1.10.2.5.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVydmFsIjoyNDAsInN0YW1wIjoiODRfMCIsImlzVGVzdCI6dHJ1ZSw iVXNlckNvdW50cnlDb2RlIjoiQVUiLCJpc1dlbGNvbWVFeHBl[...]
    Line Deleted : user_pref("CT3289075.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");
    Line Deleted : user_pref("CT3289075.mam_gk_userId.enc", "Zjk5ODg0ZTAtYzEzZS00NTFiLWI0YWQtODAzYTBlOWViNzRl");
    Line Deleted : user_pref("CT3289075.mam_gk_user_approval_interacted.enc", "MQ==");
    Line Deleted : user_pref("CT3289075.mam_gk_welcomeDialogMode.enc", "MQ==");
    Line Deleted : user_pref("CT3289075.migrateAppsAndComponents", true);
    Line Deleted : user_pref("CT3289075.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fforums.whirlpool.net.au%2Fforum-replies.cfm%3Ft%3D2189405%26p%3D19\",\"EB_MAIN_FRAME_TITLE\"[...]
    Line Deleted : user_pref("CT3289075.openThankYouPage", "true");
    Line Deleted : user_pref("CT3289075.openUninstallPage", "false");
    Line Deleted : user_pref("CT3289075.originalHomepage", "chrome://branding/locale/browserconfig.properties");
    Line Deleted : user_pref("CT3289075.revertSettingsEnabled", "FALSE");
    Line Deleted : user_pref("CT3289075.search.searchAppId", "130064539389933152");
    Line Deleted : user_pref("CT3289075.search.searchCount", "0");
    Line Deleted : user_pref("CT3289075.searchInNewTabEnabledByUser", "false");
    Line Deleted : user_pref("CT3289075.searchInNewTabEnabledInHidden", "true");
    Line Deleted : user_pref("CT3289075.searchProtector.showDialogPolicy", "{\"dataType\":\"string\",\"data\":\"everytime\"}");
    Line Deleted : user_pref("CT3289075.searchRevert", "FALSE");
    Line Deleted : user_pref("CT3289075.searchSuggestEnabledByUser", "false");
    Line Deleted : user_pref("CT3289075.searchUserMode", "1");
    Line Deleted : user_pref("CT3289075.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
    Line Deleted : user_pref("CT3289075.sendUsageEnabled", "false");
    Line Deleted : user_pref("CT3289075.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
    Line Deleted : user_pref("CT3289075.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
    Line Deleted : user_pref("CT3289075.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3289075\"}");
    Line Deleted : user_pref("CT3289075.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://uTorrentControlv6.OurToolbar.com//xpi\"}");
    Line Deleted : user_pref("CT3289075.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"uTorrentControl_v6 \"}");
    Line Deleted : user_pref("CT3289075.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
    Line Deleted : user_pref("CT3289075.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
    Line Deleted : user_pref("CT3289075.serviceLayer_services_Configuration_lastUpdate", "1386103356252");
    Line Deleted : user_pref("CT3289075.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1376381955404");
    Line Deleted : user_pref("CT3289075.serviceLayer_services_appsMetadata_lastUpdate", "1376743872110");
    Line Deleted : user_pref("CT3289075.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1376381955709");
    Line Deleted : user_pref("CT3289075.serviceLayer_services_installUsage_ToolbarInstallEarly_lastUpdate", "1376381955454");
    Line Deleted : user_pref("CT3289075.serviceLayer_services_installUsage_ToolbarInstall_lastUpdate", "1376381955462");
    Line Deleted : user_pref("CT3289075.serviceLayer_services_login_10.16.70.505_lastUpdate", "1379236124909");
    Line Deleted : user_pref("CT3289075.serviceLayer_services_login_10.16.70.7_lastUpdate", "1376621582867");
    Line Deleted : user_pref("CT3289075.serviceLayer_services_login_10.20.0.513_lastUpdate", "1386103355090");
    Line Deleted : user_pref("CT3289075.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1376381956008");
    Line Deleted : user_pref("CT3289075.serviceLayer_services_searchAPI_lastUpdate", "1386103355590");
    Line Deleted : user_pref("CT3289075.serviceLayer_services_serviceMap_lastUpdate", "1386103353915");
    Line Deleted : user_pref("CT3289075.serviceLayer_services_toolbarContextMenu_lastUpdate", "1376381955742");
    Line Deleted : user_pref("CT3289075.serviceLayer_services_toolbarSettings_lastUpdate", "1386103353965");
    Line Deleted : user_pref("CT3289075.serviceLayer_services_translation_lastUpdate", "1386103354089");
    Line Deleted : user_pref("CT3289075.settingsINI", true);
    Line Deleted : user_pref("CT3289075.shouldFirstTimeDialog", "false");
    Line Deleted : user_pref("CT3289075.showToolbarPermission", "false");
    Line Deleted : user_pref("CT3289075.smartbar.CTID", "CT3289075");
    Line Deleted : user_pref("CT3289075.smartbar.Uninstall", "0");
    Line Deleted : user_pref("CT3289075.smartbar.homepage", true);
    Line Deleted : user_pref("CT3289075.smartbar.isHidden", true);
    Line Deleted : user_pref("CT3289075.smartbar.toolbarName", "uTorrentControl_v6 ");
    Line Deleted : user_pref("CT3289075.startPage", "false");
    Line Deleted : user_pref("CT3289075.toolbarBornServerTime", "13-8-2013");
    Line Deleted : user_pref("CT3289075.toolbarCurrentServerTime", "3-12-2013");
    Line Deleted : user_pref("CT3289075.toolbarDisabled", "true");
    Line Deleted : user_pref("CT3289075.toolbarLoginClientTime", "Tue Aug 13 2013 18:19:15 GMT+1000");
    Line Deleted : user_pref("CT3289075.url_history0001.enc", "aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo6OmNsaWNraGFuZGxlcjo6OjEzNzY1MjQ3ODgzODk=");
    Line Deleted : user_pref("CT3289075.versionFromInstaller", "10.16.70.7");
    Line Deleted : user_pref("CT3289075.xpeMode", "0");
    Line Deleted : user_pref("CT3289075_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1386103351680,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
    Line Deleted : user_pref("browser.startup.homepage", "hxxp://search.conduit.com/?ctid=CT3289075&CUI=UN37137131202069013&UM=1&SearchSource=13&sspv=SSPV_AB_FF_2");
    Line Deleted : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3289075&CUI=UN37137131202069013&UM=1&SearchSource=13&sspv=SSPV_AB_FF_2");
    Line Deleted : user_pref("smartbar.homePageOwnerCTID", "CT3289075");
    Line Deleted : user_pref("smartbar.machineId", "RP71SFY59BID75FSI4FALSVIMEJPGQECS4FFIE118U52N0+QNVR0T0/BTUNAIRFCL6L5YD8Q00RR7FLBQUU7CW");

    *************************

    AdwCleaner[R0].txt - [13579 octets] - [08/04/2014 11:29:47]
    AdwCleaner[R1].txt - [13640 octets] - [09/04/2014 12:52:17]
    AdwCleaner[S0].txt - [13791 octets] - [09/04/2014 12:53:53]

    ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [13852 octets] ##########
      My Computer
    Quote Quote

 
Page 1 of 2 12 LastLast

  Related Discussions
Unknown "Password" source
in General Discussion

Hi: I am now being plagued with another request for a password and I don't know what/who the source is. When I now start my Desktop, before the BIOS takes over, a 'Black' screen comes up with a small Blue and white Icon on it which asks me for a password. And if I don't give them what they...
I am stuck on "Start Windows normally" and "Launch startup repair" When I choose "Start Windows Normally",it gives me blue screen with the following error:Unmountable_Boot_Volume.On "Launch startup repair" I am stuck on the Windows 7 wallpaper with cursor and can't even open Cmd trough...
First time posting here, so I apologize if I my post is too vague. I started up my laptop (Alienware M14x, Windows 7 64 bit - not sure if it's Ultimate, Home Premium, etc...) yesterday and it displayed a message saying that Windows had failed to boot. I restarted and attempted starting it in...
Hi, turns out that when i get to this window: https://www.sevenforums.com/attachments/tutorials/963d1234780861-system-recovery-options-system_recovery_options.jpg Instead of "Operating system: Windows 7" i get "Operating system: Unknown" and when I try to repair startup, it fails, what could...
I'm getting a lot of "Check Disk for Errors" and "this hard drive needs to be formatted before it can be used" error messages when plugging my external usb hard drives into my home pc which uses windows 7. I don't get any of these messages when I plug the same hard drives in at any of a number of...
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 09:26.
Find Us