Unable to do Windows Update.

[Pantz]

Hello Again, everything running in task manager is what i expect to be there.

thanks in advance.

 

[andrew129260]

Just because you do not see anything you do not recognize in task manager, does not mean your clean. Malware can run without showing there.

I would run a full scan with maybe an online scanner tool (like eset), as well as your antivirus and malwarebytes again.

You might also want to look into running another hijack this log.

Asked Jacee to look at this thread to help make sure the system is fully clean

 

[Jacee]

Download AdWareCleaner AdwCleaner Download
or from here Téléchargements - Outils de Xplode - AdwCleaner
to your desktop
1.Right-click on adwcleaner.exe and select Run As Administrator to launch the application.
2.Click on Delete button.
3.Confirm each time with OK.
4.Your computer will be rebooted automatically. A text file will open after the restart. Please post the content of that logfile in your reply.
Note: You can find the logfile at C:\AdwCleaner[Sn].txt as well - n is the order number.

After running the cleaner (and posting the results .txt log), I'll give you further instructions.

 

[d00p98uy]

try running the registry cleaner from CCleaner (portable) from here, make sure to back up your registry when it asks.

 

[Layback Bear]

I recommend doing as Jacee has requested in post #23.

 

[d00p98uy]

I recommend doing as Jacee has requested in post #23.

i suggested that more for the lag of opening folders, it may help

 

[derekimo]

I recommend doing as Jacee has requested in post #23.

i suggested that more for the lag of opening folders, it may help

Why don't we keep the thread on track and let the experts do their stuff.

 

[d00p98uy]

He had already fixed the updating problem, then he posted this:

Hello again, i have now been able to update my Windows 7 OS, but still having issues with my Folders

Hello Again, after doing several hours of research i found out that i have Malware on my PC . after doing a System restore to a week ago , i was now able to access Microsoft web site, but i was still having some issues like, unable to move from tab to tab on my browser ( Firefox ), and when i click on a folder to open it, there was a significant delay in opening the folder.

i then ran malaware bytes which found the PUP.Optional.Tarma.A. plus some other malware.

The question is now is how do i remove all the instances ? any suggestions are welcomed.

Thanks in advance

So i decided to try and help out, cleaning out the reg after a restore, uninstalling programs, or doing a malware check can somethimes lead to improvements for small thhings like that in my experiance, I didn't mean to get in the way of anything, just a simple suggestion

 

[Pantz]

Hello Again, after removing all unwanted programs ( which i was not using ) using Revo uninstaller, and currently doing a ESET on line Scan, i have seen a bit of improvement, i am now re scanning running Malaware, ESET, Hijack , and adwcleaner,

adwcleaner found some stuff, i am not sure as what i should let Adwcleaner Remove. ( See Attachments )

Thanks in Advance.

 

[philtec]

I would recommend you getting rid of the"ask" toolbar. (AskPartnerNetwork)

 

[Pantz]

Hello Again, i removed all instances of the"ask" toolbar. (AskPartnerNetwork) that i found in the Registry,

i hope that i got every thing out

Thanks for everyones Help.

 

[Pantz]

Hello Again, Well i think i removed Every Instance of the"ask" toolbar. (AskPartnerNetwork)that i could find in the Registry, i hope i got them all

Thanks to everyone that helped.

 

[Barman58]

I recommend doing as Jacee has requested in post #23.

philtec,

I would suggest that you follow Jacee's instructions to their conclusion before looking at any other options - which can be looked at once the major issue is resolved.

 

[philtec]

I recommend doing as Jacee has requested in post #23.

philtec,

I would suggest that you follow Jacee's instructions to their conclusion before looking at any other options - which can be looked at once the major issue is resolved.

I am only trying to help just like redfang337 is also.

 

[Pantz]

Hello Again, i do not see a DELETE Button when i launch Adwcleaner as an Adminstrator.

When i run Adwcleaner and try to delete what it finds it stops responding ?

Download AdWareCleaner AdwCleaner Download
or from here Téléchargements - Outils de Xplode - AdwCleaner
to your desktop
1.Right-click on adwcleaner.exe and select Run As Administrator to launch the application.
2.Click on Delete button.
3.Confirm each time with OK.
4.Your computer will be rebooted automatically. A text file will open after the restart. Please post the content of that logfile in your reply.
Note: You can find the logfile at C:\AdwCleaner[Sn].txt as well - n is the order number.

After running the cleaner (and posting the results .txt log), I'll give you further instructions.

 

[Jacee]

Sorry about that... AdwCleaner had an update and new instructions added.

Double click on AdwCleaner.exe to run the tool.
Vista/Windows 7/8 users right-click and select Run As Administrator.Click on the Scan button.
AdwCleaner will begin...be patient as the scan may take some time to complete.
After the scan has finished, click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
Copy and paste the contents of that logfile in your next reply.
A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.

 

[Pantz]

Hello again ... here is my Adwcleaner report . its still showing the APN .....Toolbar , ECT

# AdwCleaner v3.001 - Report created 27/08/2013 at 20:35:14
# Updated 24/08/2013 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : David_764 - DAVID764
# Running from : C:\Users\David_764\Downloads\adwcleaner(1).exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

File Found : C:\Users\David_764\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
File Found : C:\Users\David_764\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.conduit.com_0.localstorage
File Found : C:\Users\David_764\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.conduit.com_0.localstorage-journal
File Found : C:\Users\David_764\AppData\Roaming\Mozilla\Firefox\Profiles\xvq2uv9d.default\\invalidprefs.js
File Found : C:\Users\David_764\AppData\Roaming\Mozilla\Firefox\Profiles\xvq2uv9d.default\user.js
File Found : C:\Windows\System32\Tasks\MySearchDial
File Found : C:\Windows\Tasks\MySearchDial.job
Folder Found C:\Program Files (x86)\Common Files\Wondershare
Folder Found C:\Program Files (x86)\Conduit
Folder Found C:\ProgramData\apn
Folder Found C:\ProgramData\AskPartnerNetwork
Folder Found C:\ProgramData\InstallMate
Folder Found C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
Folder Found C:\ProgramData\SoftSafe
Folder Found C:\ProgramData\StarApp
Folder Found C:\Users\DAVID_~1\AppData\Local\Temp\apn
Folder Found C:\Users\DAVID_~1\AppData\Local\Temp\apn
Folder Found C:\Users\DAVID_~1\AppData\Local\Temp\apn
Folder Found C:\Users\David_764\AppData\Local\Conduit
Folder Found C:\Users\David_764\AppData\Local\cre
Folder Found C:\Users\David_764\AppData\Local\Wondershare
Folder Found C:\Users\David_764\AppData\LocalLow\Conduit
Folder Found C:\Users\David_764\AppData\LocalLow\Mysearchdial
Folder Found C:\Users\David_764\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TornTV.com
Folder Found C:\Users\David_764\AppData\Roaming\Mozilla\Firefox\Profiles\xvq2uv9d.default\jetpack
Folder Found C:\Users\David_764\AppData\Roaming\NCdownloader
Folder Found C:\Users\David_764\AppData\Roaming\Wondershare

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\APN PIP
Key Found : HKCU\Software\AppDataLow\Software\Conduit
Key Found : HKCU\Software\AppDataLow\Software\SmartBar
Key Found : HKCU\Software\AppDataLow\SProtector
Key Found : HKCU\Software\AskPartnerNetwork
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff
Key Found : HKCU\Software\InstallCore
Key Found : [x64] HKCU\Software\APN PIP
Key Found : [x64] HKCU\Software\AskPartnerNetwork
Key Found : [x64] HKCU\Software\Conduit
Key Found : [x64] HKCU\Software\InstallCore
Key Found : HKLM\Software\AskPartnerNetwork
Key Found : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Key Found : HKLM\SOFTWARE\Classes\Interface\{0AFD55C8-ADF8-4A33-A6E1-DEDB7A36AEB4}
Key Found : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Key Found : HKLM\Software\Conduit
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff
Key Found : HKLM\Software\InstallCore
Key Found : HKLM\Software\InstallIQ
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Key Found : HKLM\Software\mysearchdial
Key Found : HKLM\Software\PIP
Key Found : HKLM\Software\SP Global
Key Found : HKLM\Software\SProtector
Key Found : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16660

Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs] - hxxp://start.mysearchdial.com/?f=2&a=coolmsd&cd=2XzuyEtN2Y1L1QzuyCtD0AyEyE0CyD0FtCyC0B0AtC0DtDyBtN0D0Tzu0CyDyEtBtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1R1F1F1I1H1B1Q&cr=1173099592&ir=

-\\ Mozilla Firefox v23.0.1 (en-US)

[ File : C:\Users\David_764\AppData\Roaming\Mozilla\Firefox\Profiles\xvq2uv9d.default\prefs.js ]

Line Found : user_pref("CT3281675_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1362403172933,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Line Found : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3281675&octid=CT3281675&SearchSource=61&CUI=UN27357315684299090&UM=2&UP=SP0DFBFD41-732A-44EC-B98E-B1C2D121D878");
Line Found : user_pref("Smartbar.ConduitSearchEngineList", "Pokki Customized Web Search");
Line Found : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3281675&SearchSource=2&CUI=UN27357315684299090&UM=2&q=");
Line Found : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "");
Line Found : user_pref("Smartbar.keywordURLSelectedCTID", "CT3281675");
Line Found : user_pref("aol_toolbar.default.homepage.check", false);
Line Found : user_pref("aol_toolbar.default.search.check", false);
Line Found : user_pref("browser.search.defaultthis.engineName", "Pokki Customized Web Search");
Line Found : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3281675&CUI=UN27357315684299090&UM=2&SearchSource=3&q={searchTerms}");
Line Found : user_pref("browser.search.order.1", "Mysearchdial");
Line Found : user_pref("extensions.BabylonToolbar.prtkDS", 0);
Line Found : user_pref("extensions.BabylonToolbar.prtkHmpg", 0);
Line Found : user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"[email protected]\":{\"descriptor\":\"D:\\\\PROGRAMS\\\\ADOBE ACROBAT\\\\Acrobat\\\\Browser\\\\W[...]
Line Found : user_pref("extensions.mysearchdial.aflt", "coolmsd");
Line Found : user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}");
Line Found : user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1QzuyCtD0AyEyE0CyD0FtCyC0B0AtC0DtDyBtN0D0Tzu0CyDyEtBtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1R1F1F1I1H1B1Q");
Line Found : user_pref("extensions.mysearchdial.cr", "1173099592");
Line Found : user_pref("extensions.mysearchdial.dfltLng", "");
Line Found : user_pref("extensions.mysearchdial.dfltSrch", true);
Line Found : user_pref("extensions.mysearchdial.dnsErr", true);
Line Found : user_pref("extensions.mysearchdial.excTlbr", false);
Line Found : user_pref("extensions.mysearchdial.hmpg", true);
Line Found : user_pref("extensions.mysearchdial.hmpgUrl", "hxxp://start.mysearchdial.com/?f=1&a=coolmsd&cd=2XzuyEtN2Y1L1QzuyCtD0AyEyE0CyD0FtCyC0B0AtC0DtDyBtN0D0Tzu0CyDyEtBtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1R1F1F1I[...]
Line Found : user_pref("extensions.mysearchdial.id", "60A44C5F16BA1D07");
Line Found : user_pref("extensions.mysearchdial.instlDay", "15881");
Line Found : user_pref("extensions.mysearchdial.instlRef", "");
Line Found : user_pref("extensions.mysearchdial.newTabUrl", "hxxp://start.mysearchdial.com/?f=2&a=coolmsd&cd=2XzuyEtN2Y1L1QzuyCtD0AyEyE0CyD0FtCyC0B0AtC0DtDyBtN0D0Tzu0CyDyEtBtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1R1F1F[...]
Line Found : user_pref("extensions.mysearchdial.prdct", "mysearchdial");
Line Found : user_pref("extensions.mysearchdial.prtnrId", "mysearchdial");
Line Found : user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial");
Line Found : user_pref("extensions.mysearchdial.tlbrId", "base");
Line Found : user_pref("extensions.mysearchdial.tlbrSrchUrl", "hxxp://start.mysearchdial.com/?f=3&a=coolmsd&cd=2XzuyEtN2Y1L1QzuyCtD0AyEyE0CyD0FtCyC0B0AtC0DtDyBtN0D0Tzu0CyDyEtBtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1R1F[...]
Line Found : user_pref("extensions.mysearchdial.vrsn", "");
Line Found : user_pref("extensions.mysearchdial.vrsni", "");
Line Found : user_pref("extensions.mysearchdial_i.hmpg", true);
Line Found : user_pref("extensions.mysearchdial_i.newTab", false);
Line Found : user_pref("extensions.mysearchdial_i.smplGrp", "none");
Line Found : user_pref("extensions.mysearchdial_i.vrsnTs", "23:20:10");
Line Found : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "");
Line Found : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");
Line Found : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "");
Line Found : user_pref("sweetim.toolbar.previous.keyword.URL", "");
Line Found : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");
Line Found : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", "");
Line Found : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", "");
Line Found : user_pref("sweetim.toolbar.searchguard.enable", "");

-\\ Google Chrome v

[ File : C:\Users\David_764\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [9907 octets] - [27/08/2013 15:27:21]
AdwCleaner[R1].txt - [9967 octets] - [27/08/2013 15:32:45]
AdwCleaner[R2].txt - [10086 octets] - [27/08/2013 17:05:29]
AdwCleaner[R3].txt - [9947 octets] - [27/08/2013 19:16:11]
AdwCleaner[R4].txt - [9729 octets] - [27/08/2013 20:35:14]
AdwCleaner[S0].txt - [311 octets] - [27/08/2013 15:33:26]
AdwCleaner[S1].txt - [311 octets] - [27/08/2013 18:03:55]
AdwCleaner[S2].txt - [348 octets] - [27/08/2013 19:24:56]

########## EOF - C:\AdwCleaner\AdwCleaner[R4].txt - [9966 octets] ##########

 

[Jacee]

Double click on AdwCleaner.exe to run the tool again.

• Click on the Scan button.
• AdwCleaner will begin to scan your computer like it did before.
• After the scan has finished...
• This time, click on the Clean button.
• Press OK when asked to close all programs and follow the onscreen prompts.
• Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
• After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
• Copy and paste the contents of that logfile in your next reply.
• A copy of that logfile will also be saved in the C:\AdwCleaner folder.

 

[Pantz]

Hello again, here is the Log file of Adwcleaner, after i did another scan and clean.

# AdwCleaner v3.001 - Report created 27/08/2013 at 23:46:27
# Updated 24/08/2013 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : David_764 - DAVID764
# Running from : C:\Users\David_764\Downloads\adwcleaner(1).exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\apn
Folder Deleted : C:\ProgramData\AskPartnerNetwork
Folder Deleted : C:\ProgramData\InstallMate
Folder Deleted : C:\ProgramData\SoftSafe
Folder Deleted : C:\ProgramData\StarApp
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\Program Files (x86)\Common Files\Wondershare
Folder Deleted : C:\Users\David_764\AppData\Local\Conduit
Folder Deleted : C:\Users\David_764\AppData\Local\cre
Folder Deleted : C:\Users\David_764\AppData\Local\Wondershare
Folder Deleted : C:\Users\DAVID_~1\AppData\Local\Temp\apn
Folder Deleted : C:\Users\David_764\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\David_764\AppData\LocalLow\Mysearchdial
Folder Deleted : C:\Users\David_764\AppData\Roaming\NCdownloader
Folder Deleted : C:\Users\David_764\AppData\Roaming\Wondershare
Folder Deleted : C:\Users\David_764\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TornTV.com
Folder Deleted : C:\Users\David_764\AppData\Roaming\Mozilla\Firefox\Profiles\xvq2uv9d.default\jetpack
File Deleted : C:\Users\David_764\AppData\Roaming\Mozilla\Firefox\Profiles\xvq2uv9d.default\\invalidprefs.js
File Deleted : C:\Users\David_764\AppData\Roaming\Mozilla\Firefox\Profiles\xvq2uv9d.default\user.js
File Deleted : C:\Users\David_764\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
File Deleted : C:\Users\David_764\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.conduit.com_0.localstorage
File Deleted : C:\Users\David_764\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.conduit.com_0.localstorage-journal
File Deleted : C:\Windows\Tasks\MySearchDial.job
File Deleted : C:\Windows\System32\Tasks\MySearchDial

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff
Key Deleted : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0AFD55C8-ADF8-4A33-A6E1-DEDB7A36AEB4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\AskPartnerNetwork
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\AppDataLow\SProtector
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKLM\Software\AskPartnerNetwork
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\InstallCore
Key Deleted : HKLM\Software\InstallIQ
Key Deleted : HKLM\Software\mysearchdial
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\Software\SP Global
Key Deleted : HKLM\Software\SProtector
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16660

Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]

-\\ Mozilla Firefox v23.0.1 (en-US)

[ File : C:\Users\David_764\AppData\Roaming\Mozilla\Firefox\Profiles\xvq2uv9d.default\prefs.js ]

Line Deleted : user_pref("CT3281675_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1362403172933,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Line Deleted : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3281675&octid=CT3281675&SearchSource=61&CUI=UN27357315684299090&UM=2&UP=SP0DFBFD41-732A-44EC-B98E-B1C2D121D878");
Line Deleted : user_pref("Smartbar.ConduitSearchEngineList", "Pokki Customized Web Search");
Line Deleted : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3281675&SearchSource=2&CUI=UN27357315684299090&UM=2&q=");
Line Deleted : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "");
Line Deleted : user_pref("Smartbar.keywordURLSelectedCTID", "CT3281675");
Line Deleted : user_pref("aol_toolbar.default.homepage.check", false);
Line Deleted : user_pref("aol_toolbar.default.search.check", false);
Line Deleted : user_pref("browser.search.defaultthis.engineName", "Pokki Customized Web Search");
Line Deleted : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3281675&CUI=UN27357315684299090&UM=2&SearchSource=3&q={searchTerms}");
Line Deleted : user_pref("browser.search.order.1", "Mysearchdial");
Line Deleted : user_pref("extensions.BabylonToolbar.prtkDS", 0);
Line Deleted : user_pref("extensions.BabylonToolbar.prtkHmpg", 0);
Line Deleted : user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"[email protected]\":{\"descriptor\":\"D:\\\\PROGRAMS\\\\ADOBE ACROBAT\\\\Acrobat\\\\Browser\\\\W[...]
Line Deleted : user_pref("extensions.mysearchdial.aflt", "coolmsd");
Line Deleted : user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}");
Line Deleted : user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1QzuyCtD0AyEyE0CyD0FtCyC0B0AtC0DtDyBtN0D0Tzu0CyDyEtBtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1R1F1F1I1H1B1Q");
Line Deleted : user_pref("extensions.mysearchdial.cr", "1173099592");
Line Deleted : user_pref("extensions.mysearchdial.dfltLng", "");
Line Deleted : user_pref("extensions.mysearchdial.dfltSrch", true);
Line Deleted : user_pref("extensions.mysearchdial.dnsErr", true);
Line Deleted : user_pref("extensions.mysearchdial.excTlbr", false);
Line Deleted : user_pref("extensions.mysearchdial.hmpg", true);
Line Deleted : user_pref("extensions.mysearchdial.hmpgUrl", "hxxp://start.mysearchdial.com/?f=1&a=coolmsd&cd=2XzuyEtN2Y1L1QzuyCtD0AyEyE0CyD0FtCyC0B0AtC0DtDyBtN0D0Tzu0CyDyEtBtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1R1F1F1I[...]
Line Deleted : user_pref("extensions.mysearchdial.id", "60A44C5F16BA1D07");
Line Deleted : user_pref("extensions.mysearchdial.instlDay", "15881");
Line Deleted : user_pref("extensions.mysearchdial.instlRef", "");
Line Deleted : user_pref("extensions.mysearchdial.newTabUrl", "hxxp://start.mysearchdial.com/?f=2&a=coolmsd&cd=2XzuyEtN2Y1L1QzuyCtD0AyEyE0CyD0FtCyC0B0AtC0DtDyBtN0D0Tzu0CyDyEtBtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1R1F1F[...]
Line Deleted : user_pref("extensions.mysearchdial.prdct", "mysearchdial");
Line Deleted : user_pref("extensions.mysearchdial.prtnrId", "mysearchdial");
Line Deleted : user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial");
Line Deleted : user_pref("extensions.mysearchdial.tlbrId", "base");
Line Deleted : user_pref("extensions.mysearchdial.tlbrSrchUrl", "hxxp://start.mysearchdial.com/?f=3&a=coolmsd&cd=2XzuyEtN2Y1L1QzuyCtD0AyEyE0CyD0FtCyC0B0AtC0DtDyBtN0D0Tzu0CyDyEtBtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1R1F[...]
Line Deleted : user_pref("extensions.mysearchdial.vrsn", "");
Line Deleted : user_pref("extensions.mysearchdial.vrsni", "");
Line Deleted : user_pref("extensions.mysearchdial_i.hmpg", true);
Line Deleted : user_pref("extensions.mysearchdial_i.newTab", false);
Line Deleted : user_pref("extensions.mysearchdial_i.smplGrp", "none");
Line Deleted : user_pref("extensions.mysearchdial_i.vrsnTs", "23:20:10");
Line Deleted : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "");
Line Deleted : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");
Line Deleted : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "");
Line Deleted : user_pref("sweetim.toolbar.previous.keyword.URL", "");
Line Deleted : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");
Line Deleted : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", "");
Line Deleted : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", "");
Line Deleted : user_pref("sweetim.toolbar.searchguard.enable", "");

-\\ Google Chrome v

[ File : C:\Users\David_764\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [9907 octets] - [27/08/2013 15:27:21]
AdwCleaner[R1].txt - [9967 octets] - [27/08/2013 15:32:45]
AdwCleaner[R2].txt - [10086 octets] - [27/08/2013 17:05:29]
AdwCleaner[R3].txt - [9947 octets] - [27/08/2013 19:16:11]
AdwCleaner[R4].txt - [10066 octets] - [27/08/2013 20:35:14]
AdwCleaner[R5].txt - [10128 octets] - [27/08/2013 23:45:27]
AdwCleaner[S0].txt - [311 octets] - [27/08/2013 15:33:26]
AdwCleaner[S1].txt - [311 octets] - [27/08/2013 18:03:55]
AdwCleaner[S2].txt - [348 octets] - [27/08/2013 19:24:56]
AdwCleaner[S3].txt - [9821 octets] - [27/08/2013 23:46:27]

########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [9881 octets] ##########

 

[Jacee]

Looks much better! How is your computer running now?