Page 1 of 5 123 ... LastLast
Results 1 to 10 of 46

Thread: wisersearch.com

  1. #1
    Member
    Join Date
    Feb 2007
    Location
    DFW, Texas
    Posts
    100
    Points
    3

    Default wisersearch.com

    Something called "wisersearch.com" has replaced my homepage in Firefox. How can I get rid of it and go back to my preferred homepage? Going to Tools, Options, Use Current Pages does not restore my original home page.

    Any recommendations will be appreciated?

  2. #2
    Member Spyware Fighter DonnaB's Avatar
    Join Date
    Apr 2009
    Location
    Illiana, Ill. USA
    Posts
    3,522
    Points
    563

    Default

    Hi dglockster,

    Please do the following:

    Please download AdwCleaner by Xplode and save to your Desktop.
    • Double-click AdwCleaner.exe to run the tool.
      Note: Windows Vista, Windows 7/8 users right-click and select Run As Administrator.
    • Click the Scan button.
    • AdwCleaner will begin. Be patient as the scan may take some time to complete.
    • The contents of the scan results may be confusing. If you see a program name that you know should not be removed, uncheck the results and please let me know about it.
    • Click the Clean button.
    • Press OK when asked to close all programs and follow the onscreen prompts.
    • Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
    • After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
    • Copy and paste the contents of that logfile in your next reply.
    • A copy of that logfile will also be saved in the C:\AdwCleaner folder.


    Let me know if that solved the problem with wisesearch.

    Thank you,
    Donna
    If you think you might be infected with malware or have recently cleansed your computer of malware without the help of an expert, please read and follow the instructions in How to Start Removing Viruses and Spyware from your Computer. This can alleviate time consumed in trouble shooting your current computer problems.

    If your problem is solved, here's how to say thanks!

    Very proud parent of a U.S. Navy "CB"



    "People may forget what you say,
    People may forget what you did,
    but People will never forget how you made them feel!"

  3. #3
    Member
    Join Date
    Feb 2007
    Location
    DFW, Texas
    Posts
    100
    Points
    3

    Default wisersearch.com

    Quote Originally Posted by DonnaB View Post
    Hi dglockster,

    Please do the following:

    Please download AdwCleaner by Xplode and save to your Desktop.
    • Double-click AdwCleaner.exe to run the tool.
      Note: Windows Vista, Windows 7/8 users right-click and select Run As Administrator.
    • Click the Scan button.
    • AdwCleaner will begin. Be patient as the scan may take some time to complete.
    • The contents of the scan results may be confusing. If you see a program name that you know should not be removed, uncheck the results and please let me know about it.
    • Click the Clean button.
    • Press OK when asked to close all programs and follow the onscreen prompts.
    • Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
    • After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
    • Copy and paste the contents of that logfile in your next reply.
    • A copy of that logfile will also be saved in the C:\AdwCleaner folder.


    Let me know if that solved the problem with wisersearch.

    Thank you,
    Donna
    Donna,
    Apologies for the late reply but am just now being able to followup on your recommendation and thanks for the advice.

    I did download and run AdwCleaner.exe as the administrator. However, I am not computer literate enough to understand the directions. Where you write, "If you see a program name that you know should not be removed, uncheck the results and please let me know about it." In the search results, it appeared to me all of the program names needed to be unchecked so they would not be deleted. Also, the name "wisersearch" did not appear in any of the listings.

    Therefore, I just closed AdwCleaner because I definitely did not want to delete any of the program names that appeared to be legitimate.

    Any other suggestions?

  4. #4
    Member Spyware Fighter zep516's Avatar
    Join Date
    Dec 2005
    Location
    Pittsburgh, Pa
    Posts
    7,181
    Points
    1308

    Default

    Hi dglockster

    Can you"

    Click the Scan button.AdwCleaner will begin. Be patient as the scan may take some time to complete. After the scan has finished, click the Report button. A logfile (AdwCleaner[R0].txt) will open in Notepad for review.

    Post that log report for Donna and she can review the list of programs for you....


    Joe

  5. The Following User Says Thank You to zep516 For This Useful Post:


  6. #5
    Member Spyware Fighter DonnaB's Avatar
    Join Date
    Apr 2009
    Location
    Illiana, Ill. USA
    Posts
    3,522
    Points
    563

    Default

    Thank you Joe.

    @ dglockster,

    Please follow Joe's instructions above and provide the Report log that AdwCleaner generated.

    However, I am not computer literate enough to understand the directions.

    I just closed AdwCleaner because I definitely did not want to delete any of the program names that appeared to be legitimate.
    Please allow us the courtesy of viewing that Report log and educating you on the legitimacy of those programs that AdwCleaner had found. Trust me, we will not remove anything from your computer that you deem necessary.

    Thank you,
    Donna
    If you think you might be infected with malware or have recently cleansed your computer of malware without the help of an expert, please read and follow the instructions in How to Start Removing Viruses and Spyware from your Computer. This can alleviate time consumed in trouble shooting your current computer problems.

    If your problem is solved, here's how to say thanks!

    Very proud parent of a U.S. Navy "CB"



    "People may forget what you say,
    People may forget what you did,
    but People will never forget how you made them feel!"

  7. #6
    Member
    Join Date
    Feb 2007
    Location
    DFW, Texas
    Posts
    100
    Points
    3

    Default

    Thanks, Joe.

    Donna,

    The log is shown below:

    # AdwCleaner v3.015 - Report created 15/12/2013 at 08:16:17
    # Updated 10/12/2013 by Xplode
    # Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
    # Username : Don - HP30849201172
    # Running from : C:\Documents and Settings\Don\Local Settings\temp\dlm2A.tmp\adwcleaner.exe
    # Option : Scan

    ***** [ Services ] *****

    Service Found : Updater Service for StartNow Toolbar

    ***** [ Files / Folders ] *****

    File Found : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\Extensions\om@offermosquito.com.xpi
    File Found : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\searchplugins\Conduit.xml
    File Found : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\searchplugins\search.xml
    File Found : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\searchplugins\Surf-canyon.xml
    File Found : C:\Documents and Settings\Don\Local Settings\Application Data\omesuperv.exe
    File Found : C:\END
    File Found : C:\Program Files\Mozilla Firefox\browser\searchplugins\safeguard-secure-search.xml
    Folder Found : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\Extensions\{64d64833-9296-421b-a362-83cfbd6291b6}
    Folder Found : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\Extensions\{75623D5D-4683-402A-B610-AC4BAB767C86}
    Folder Found : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\Extensions\{d1b5aad5-d1ae-4b20-88b1-feeaeb4c1ebc}
    Folder Found : C:\Documents and Settings\Don\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk
    Folder Found : C:\Documents and Settings\Don\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\iekjmlcgpmcjigljdiagaibfjfaideal
    Folder Found C:\DOCUME~1\Don\LOCALS~1\Temp\CT3306061
    Folder Found C:\DOCUME~1\Don\LOCALS~1\Temp\CT3307181
    Folder Found C:\DOCUME~1\Don\LOCALS~1\Temp\NativeMessaging
    Folder Found C:\Documents and Settings\All Users\Application Data\AVG SafeGuard toolbar
    Folder Found C:\Documents and Settings\All Users\Application Data\Conduit
    Folder Found C:\Documents and Settings\Don\Application Data\AVG SafeGuard toolbar
    Folder Found C:\Documents and Settings\Don\Application Data\Common\LuaRT
    Folder Found C:\Documents and Settings\Don\Application Data\DataMgr
    Folder Found C:\Documents and Settings\Don\Application Data\dvdvideosoftiehelpers
    Folder Found C:\Documents and Settings\Don\Application Data\Intermediate
    Folder Found C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\CT3306061
    Folder Found C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\CT3307181
    Folder Found C:\Documents and Settings\Don\Application Data\SCheck
    Folder Found C:\Documents and Settings\Don\Application Data\Searchprotect
    Folder Found C:\Documents and Settings\Don\Application Data\Snz
    Folder Found C:\Documents and Settings\Don\Application Data\SSync
    Folder Found C:\Documents and Settings\Don\Local Settings\Application Data\appmarket-
    Folder Found C:\Documents and Settings\Don\Local Settings\Application Data\AVG SafeGuard toolbar
    Folder Found C:\Documents and Settings\Don\Local Settings\Application Data\Conduit
    Folder Found C:\Documents and Settings\Don\Local Settings\Application Data\ext_offermosquito
    Folder Found C:\Documents and Settings\Don\Local Settings\Application Data\NativeMessaging
    Folder Found C:\Documents and Settings\Karen\Local Settings\Application Data\AVG Security Toolbar
    Folder Found C:\Program Files\appmarket-
    Folder Found C:\Program Files\AVG SafeGuard toolbar
    Folder Found C:\Program Files\Common Files\AVG Secure Search
    Folder Found C:\Program Files\Common Files\DVDVideoSoft\TB
    Folder Found C:\Program Files\Conduit

    ***** [ Shortcuts ] *****


    ***** [ Registry ] *****

    Key Found : HKCU\Software\appmarket-
    Key Found : HKCU\Software\AVG SafeGuard toolbar
    Key Found : HKCU\Software\CompeteInc
    Key Found : HKCU\Software\Conduit
    Key Found : HKCU\Software\ConduitSearchScopes
    Key Found : HKCU\Software\Google\Chrome\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk
    Key Found : HKCU\Software\Google\Chrome\Extensions\iekjmlcgpmcjigljdiagaibfjfaideal
    Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3BC93E76-92F8-5FDA-B676-5AFEE3735BF1}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82B16A3D-F03E-4565-A532-666B219C9A53}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3BC93E76-92F8-5FDA-B676-5AFEE3735BF1}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82B16A3D-F03E-4565-A532-666B219C9A53}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
    Key Found : HKCU\Software\OfferMosquito
    Key Found : HKCU\Software\Protector
    Key Found : HKCU\Software\SmartBar
    Key Found : HKCU\Software\Softonic
    Key Found : HKCU\Software\StartNow Toolbar
    Key Found : HKCU\Software\YahooPartnerToolbar
    Key Found : HKCU\Software\Zugo
    Key Found : HKCU\Toolbar
    Key Found : HKLM\Software\appmarket-
    Key Found : HKLM\Software\AVG SafeGuard toolbar
    Key Found : HKLM\Software\AVG Security Toolbar
    Key Found : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{7E8A36EA-2501-4ED3-A3C8-CFA9143FB169}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
    Key Found : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
    Key Found : HKLM\SOFTWARE\Classes\AppID\Toolbar.DLL
    Key Found : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{1663C10B-0D55-438D-8496-19A3DBAEC0E4}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{64D64833-9296-421B-A362-83CFBD6291B6}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{745D0A77-05CB-4FF3-BE77-48D888F06261}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{82B16A3D-F03E-4565-A532-666B219C9A53}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{1C888195-0160-4883-91B7-294C0CE2F277}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{99ACA0F7-D864-45CB-8C40-FD42A077E7CA}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
    Key Found : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
    Key Found : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
    Key Found : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
    Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
    Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
    Key Found : HKLM\SOFTWARE\Classes\Toolbar.BandObject
    Key Found : HKLM\SOFTWARE\Classes\Toolbar.BandObject.1
    Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3307181
    Key Found : HKLM\SOFTWARE\Classes\Toolbar.ToolbarHelperObject
    Key Found : HKLM\SOFTWARE\Classes\Toolbar.ToolbarHelperObject.1
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
    Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
    Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
    Key Found : HKLM\Software\Conduit
    Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\iekjmlcgpmcjigljdiagaibfjfaideal
    Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3E39B99C-1E29-49CC-B122-0806CFF6DF8C}
    Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C24BE93A-0CAA-4E9C-8C9B-4F34161BB6F9}
    Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AVG SafeGuard toolbar
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64D64833-9296-421B-A362-83CFBD6291B6}
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{82B16A3D-F03E-4565-A532-666B219C9A53}
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{745D0A77-05CB-4FF3-BE77-48D888F06261}
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
    Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar
    Key Found : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
    Key Found : HKLM\Software\StartNow Toolbar
    Key Found : HKLM\Software\Uniblue
    Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{CCC7A320-B3CA-4199-B1A6-9F516DD69829}]
    Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
    Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{64D64833-9296-421B-A362-83CFBD6291B6}]
    Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ConduitFloatingPlugin_lipgolpfajiadodbcbljdpmbmbdmfcil]
    Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [DataMgr]
    Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Intermediate]
    Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [OMESupervisor]
    Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [scheck]
    Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Snoozer]
    Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ssync]
    Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{64D64833-9296-421B-A362-83CFBD6291B6}]
    Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
    Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{CCC7A320-B3CA-4199-B1A6-9F516DD69829}]
    Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
    Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]

    ***** [ Browsers ] *****

    -\\ Internet Explorer v8.0.6001.18702


    -\\ Mozilla Firefox v27.0 (en-US)

    [ File : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\prefs.js ]

    Line Found : user_pref("CT3306061.FF19Solved", "true");
    Line Found : user_pref("CT3306061.UserID", "UN22595155606712213");
    Line Found : user_pref("CT3306061.browser.search.defaultthis.engineName", "true");
    Line Found : user_pref("CT3306061.fullUserID", "UN22595155606712213.IN.20131215081505");
    Line Found : user_pref("CT3306061.installDate", "15/12/2013 08:15:16");
    Line Found : user_pref("CT3306061.installSessionId", "{72A9D6E0-84ED-4FDA-A276-4E5867ABBA71}");
    Line Found : user_pref("CT3306061.installSp", "TRUE");
    Line Found : user_pref("CT3306061.installerVersion", "1.8.1.4");
    Line Found : user_pref("CT3306061.keyword", "true");
    Line Found : user_pref("CT3306061.originalHomepage", "hxxp://wisersearch.com/?channel=en");
    Line Found : user_pref("CT3306061.originalSearchAddressUrl", "hxxp://wisersearch.com/search.php?channel=en&q=");
    Line Found : user_pref("CT3306061.originalSearchEngine", "Search");
    Line Found : user_pref("CT3306061.originalSearchEngineName", "Search");
    Line Found : user_pref("CT3306061.searchRevert", "true");
    Line Found : user_pref("CT3306061.searchUninstallUserMode", "2");
    Line Found : user_pref("CT3306061.searchUserMode", "2");
    Line Found : user_pref("CT3306061.smartbar.homepage", "true");
    Line Found : user_pref("CT3306061.toolbarInstallDate", "15-12-2013 08:15:07");
    Line Found : user_pref("CT3306061.versionFromInstaller", "10.23.0.722");
    Line Found : user_pref("CT3306061.xpeMode", "0");
    Line Found : user_pref("CT3307181.FF19Solved", "true");
    Line Found : user_pref("CT3307181.UserID", "UN88013374125684216");
    Line Found : user_pref("CT3307181.browser.search.defaultthis.engineName", "true");
    Line Found : user_pref("CT3307181.fullUserID", "UN88013374125684216.IN.20131213140158");
    Line Found : user_pref("CT3307181.installDate", "13/12/2013 14:02:10");
    Line Found : user_pref("CT3307181.installSessionId", "{BE4373E3-36F3-4F40-8A4F-D245F5041EC3}");
    Line Found : user_pref("CT3307181.installSp", "TRUE");
    Line Found : user_pref("CT3307181.installerVersion", "1.8.1.4");
    Line Found : user_pref("CT3307181.keyword", "true");
    Line Found : user_pref("CT3307181.originalHomepage", "hxxps://www.google.com/");
    Line Found : user_pref("CT3307181.originalSearchAddressUrl", "");
    Line Found : user_pref("CT3307181.originalSearchEngine", "AVG Secure Search");
    Line Found : user_pref("CT3307181.originalSearchEngineName", "AVG Secure Search");
    Line Found : user_pref("CT3307181.searchRevert", "false");
    Line Found : user_pref("CT3307181.searchUninstallUserMode", "2");
    Line Found : user_pref("CT3307181.searchUserMode", "2");
    Line Found : user_pref("CT3307181.smartbar.homepage", "true");
    Line Found : user_pref("CT3307181.toolbarInstallDate", "13-12-2013 14:02:00");
    Line Found : user_pref("CT3307181.versionFromInstaller", "10.23.0.722");
    Line Found : user_pref("CT3307181.xpeMode", "0");
    Line Found : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://wisersearch.com/search.php?channel=en&q=");
    Line Found : user_pref("browser.search.defaultenginename", "Connect DLC 5 Customized Web Search");
    Line Found : user_pref("browser.search.defaultthis.engineName", "Connect DLC 5 Customized Web Search");
    Line Found : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3306061&CUI=UN22595155606712213&UM=2&SearchSource=3&q={searchTerms}");
    Line Found : user_pref("browser.search.selectedEngine", "Connect DLC 5 Customized Web Search");
    Line Found : user_pref("browser.startup.homepage", "hxxp://search.conduit.com/?ctid=CT3306061&CUI=UN22595155606712213&UM=2&SearchSource=13");
    Line Found : user_pref("extensions.booly.shopping_supporteddoms", "amazon.co.uk,amazon.com,ebay.co.uk,ebay.com,groupon.co.uk,groupon.com,blackfriday,cybermonday,1-acp.com,1000bulbs.com,101inks.com,101phones.com,11[...]
    Line Found : user_pref("extensions.ntk.HISTORY", "[{\"title\":\"Inbox (13) - dglockster@gmail.com - Gmail\",\"icon\":{\"spec\":\"moz-anno:favicon:hxxps://mail.google.com/favicon.ico\"},\"uri\":\"hxxps://mail.googl[...]
    Line Found : user_pref("extensions.ntk.feedStore", "{\"URLtoFeedCount\":15,\"FeedStoriesCount\":-1,\"data\":[{\"uri\":\"hxxps://mail.google.com/mail/u/0/%3Fshva=1#inbox\",\"feed\":null,\"stories\":null},{\"uri\":\[...]
    Line Found : user_pref("extensions.ntk.ntk_dragged_pos", "<table class=\"speed\" cellpadding=\"0\" cellspacing=\"0\"><tbody><tr><td href=\"hxxps://mail.google.com/mail/u/0/?shva=1#inbox\" style=\"padding-bottom:10[...]
    Line Found : user_pref("extensions.ntk.recentClosedPers", "hxxps://www.google.com/search?q=verbiage+definition::<html><head></head><body>verbiage definition - Google Search</body></html>;hxxp://www.dailywritingtip[...]
    Line Found : user_pref("extensions.ntk.thumbsUrls", "hxxps://mail.google.com/mail/u/0/?shva=1#inbox;hxxp://www.google.com/ig?hl=en;hxxps://accounts.google.com/Logout?service=mail&continue=hxxps://accounts.google.c[...]
    Line Found : user_pref("extensions.xnotifier.accounts.[gmail#bluetracewatch@gmail.com].inboxOnly", true);
    Line Found : user_pref("extensions.xnotifier.accounts.[gmail#dglockster@gmail.com].inboxOnly", true);
    Line Found : user_pref("extensions.xnotifier.accounts.[gmail#dr.dsmith@gmail.com].inboxOnly", true);
    Line Found : user_pref("extensions.xnotifier.accounts.[gmail#fbcopliaison@gmail.com].inboxOnly", true);
    Line Found : user_pref("extensions.xnotifier.accounts.[gmail#fbcopteam1@gmail.com].inboxOnly", true);
    Line Found : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3306061&SearchSource=2&CUI=UN22595155606712213&UM=2&q=");
    Line Found : user_pref("om.config", "{\"active\":true,\"name\":\"october2013\",\"id\":35,\"dispId\":\"CH-35\",\"aboutLink\":\"\",\"trackingGeneral\":true,\"xhrDomains\":[\"become\",\"shopzilla\",\"twenga\",\"bizra[...]
    Line Found : user_pref("simplenewtab.url", "hxxp://wisersearch.com/?channel=en_nt");
    Line Found : user_pref("smartbar.addressBarOwnerCTID", "CT3306061");
    Line Found : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3307181&CUI=UN88013374125684216&UM=2&SearchSource=13,hxxp://search.conduit.com/?ctid=CT3306061&CUI=UN22595155606712213&UM=2[...]
    Line Found : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3307181&SearchSource=2&CUI=UN88013374125684216&UM=2&q=,hxxp://search.conduit.com/ResultsExt.aspx?cti[...]
    Line Found : user_pref("smartbar.defaultSearchOwnerCTID", "CT3306061");
    Line Found : user_pref("smartbar.homePageOwnerCTID", "CT3306061");
    Line Found : user_pref("smartbar.machineId", "GRGBCKG+0CGYPIYEJJABQ3V3O6XTYSKFO3FTGTWACYAHKWDPWLE7PRU/SXMPRBDLI8WS/QIGFO/3GVLBAXJ+PA");
    Line Found : user_pref("surfcanyon.added_to_searchbar", true);
    Line Found : user_pref("surfcanyon.chummo_enabled", false);
    Line Found : user_pref("surfcanyon.daily_code", "scIsOnSearchEngineDomain = function() {\nreturn contains(scCurrentPageDomain, '.surfcanyon.') || contains(scCurrentPageDomain, '.google.') || contains(scCurrentPage[...]
    Line Found : user_pref("surfcanyon.daily_code_timestamp", "1322917030730");
    Line Found : user_pref("surfcanyon.dynamic_preferences_timestamp", "1387115518530");
    Line Found : user_pref("surfcanyon.google_search_button_click_query", "google+phonebook:+9037831699");
    Line Found : user_pref("surfcanyon.google_search_button_click_ts", "1309877826175");
    Line Found : user_pref("surfcanyon.hourly_code", "scHourlyCodeRevision = '337r';\nscGetDocument = function() {\nreturn scIsFF ? content.document : document;\n};\n\nscExtractUrlFromSpanTag = function(spanTag) {\nva[...]
    Line Found : user_pref("surfcanyon.hourly_code2", "scEnableGoogle_hourly = function() {\nvar args = window.location.search;\nvar path = window.location.pathname;\nvar isGoogleSearchDomain = (contains(scCurrentPage[...]
    Line Found : user_pref("surfcanyon.hourly_code_timestamp", "1342533670675");
    Line Found : user_pref("surfcanyon.hover_overlay_enabled", false);
    Line Found : user_pref("surfcanyon.initialized_chummo", false);
    Line Found : user_pref("surfcanyon.initialized_search_bar", false);
    Line Found : user_pref("surfcanyon.inst_id", "1501284431329441638486899665189267");
    Line Found : user_pref("surfcanyon.inst_timestamp", "1281652820431");
    Line Found : user_pref("surfcanyon.last_notification_displayed", 2);
    Line Found : user_pref("surfcanyon.last_seen_splash", "343");
    Line Found : user_pref("surfcanyon.no_searchbar_global", false);
    Line Found : user_pref("surfcanyon.num_recs_clicked", "339");
    Line Found : user_pref("surfcanyon.num_results_clicked", "2787");
    Line Found : user_pref("surfcanyon.num_results_clicked_when_recs_available", "1128");
    Line Found : user_pref("surfcanyon.num_searches", "2345");
    Line Found : user_pref("surfcanyon.page_notifications_cancelled", true);
    Line Found : user_pref("surfcanyon.partner_code", "MZ");
    Line Found : user_pref("surfcanyon.recs_notifications_cancelled", true);
    Line Found : user_pref("surfcanyon.refinements_cache", "frankford arsenal reloading scale review/^glucosamine sulphate (sulfate) vs glucosamine hydrochloride/^picatinny savage accutrigger sa/^return of the native/[...]
    Line Found : user_pref("surfcanyon.retailer_domain", "");
    Line Found : user_pref("surfcanyon.retailer_id", "");
    Line Found : user_pref("surfcanyon.retailer_url", "");
    Line Found : user_pref("surfcanyon.search_bar_enabled", false);
    Line Found : user_pref("surfcanyon.searchbar_right_offsets", false);
    Line Found : user_pref("surfcanyon.searchbar_zindexes", false);
    Line Found : user_pref("surfcanyon.server_error_time", "1385603639099");
    Line Found : user_pref("surfcanyon.server_error_url", "hxxps://www.surfcanyon.com/search/refresh?ssMapKey=wwwgooglecombudsguns&instId=1501284431329441638486899665189267&extensionVersion=3.4.3");
    Line Found : user_pref("surfcanyon.ss_page_links_enabled", false);
    Line Found : user_pref("{5911488E-9D1E-40ec-8CBB-06B231CC153F}.name", "StartNow Toolbar");
    Line Found : user_pref("{5911488E-9D1E-40ec-8CBB-06B231CC153F}.startpage", "pos.startnow.com");

    [ File : C:\Documents and Settings\Karen\Application Data\Mozilla\Firefox\Profiles\ppo36kak.default\prefs.js ]

    Line Found : user_pref("browser.search.defaultenginename", "AVG Secure Search");
    Line Found : user_pref("browser.search.selectedEngine", "AVG Secure Search");
    Line Found : user_pref("extensions.wrc.SearchRules.ask.com.style", ".WRCN {display:none} #yui-main .tsrc_vnru .title + .WRCN, #yui-main #teoma-results .title + .WRCN {display:inline !important; background: url(\"I[...]
    Line Found : user_pref("extensions.wrc.SearchRules.ask.com.url", "^hxxp(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*");

    -\\ Google Chrome v

    [ File : C:\Documents and Settings\Don\Local Settings\Application Data\Google\Chrome\User Data\Default\preferences ]

    Found : homepage
    Found : icon_url
    Found : search_url
    Found : keyword
    Found : urls_to_restore_on_startup
    Found : homepage
    Found : icon_url
    Found : search_url
    Found : keyword
    Found : urls_to_restore_on_startup
    Found : homepage
    Found : icon_url
    Found : search_url
    Found : keyword
    Found : urls_to_restore_on_startup
    Found : homepage
    Found : icon_url
    Found : search_url
    Found : keyword
    Found : urls_to_restore_on_startup
    Found : homepage
    Found : icon_url
    Found : search_url
    Found : keyword
    Found : urls_to_restore_on_startup
    Found : homepage
    Found : icon_url
    Found : search_url
    Found : keyword
    Found : urls_to_restore_on_startup
    Found : homepage
    Found : icon_url
    Found : search_url
    Found : keyword
    Found : urls_to_restore_on_startup

    *************************

    AdwCleaner[R0].txt - [7224 octets] - [10/12/2013 13:33:07]
    AdwCleaner[R1].txt - [24608 octets] - [15/12/2013 08:16:17]

    ########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [24669 octets] ##########

    If as you review the log, you see anything else that needs to be removed please let me know.

    Thanks,
    Don

  8. #7
    Member
    Join Date
    Feb 2007
    Location
    DFW, Texas
    Posts
    100
    Points
    3

    Default

    Apologies for the double post. Did not know it had happened until I reviewed the thread.

  9. #8
    Member Spyware Fighter DonnaB's Avatar
    Join Date
    Apr 2009
    Location
    Illiana, Ill. USA
    Posts
    3,522
    Points
    563

    Default

    Not to worry about the double post. I deleted it for you. Not sure why that happens, though from my own experiences, I always thought it was due to my slow connection, then I realized that I get a tad impatient and while the post is submitting I click a second time which creates the duplicate post. I has be to the forum software, not us, since I found that if you wait a moment for the first post to submit it is fine. Weird!

    Let's scan with AdwCleaner again and this time, once the initial scan has completed, please click on the Clean button. Everything that was found is undesirable to have installed on your system and considered spyware, adware, foistware, etc. and can and will bog down your browser.

    Double-click AdwCleaner.exe to run the tool again.
    • Click the Scan button.
      Note: Windows Vista, Windows 7/8 users right-click and select Run As Administrator.
    • AdwCleaner will begin to scan your computer like it did before.
    • After the scan has finished click on the Clean button.
    • Press OK when asked to close all programs and follow the onscreen prompts.
    • Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
    • After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
    • Copy and paste the contents of that logfile in your next reply.
    • A copy of that logfile will also be saved in the C:\AdwCleaner folder.


    Next:

    After you complete the task above, I'd like for you to run the following scan and provide the logs so we can make sure nothing was left behind.

    Please download OTL to your Desktop
    • Double click on the to run the program. On Vista/Win7 or 8 right click select Run As Administrator to start the program. If prompted by UAC, please allow it.
    • Make sure all other windows are closed and to let it run uninterrupted.
    • Click the Scan All Users checkbox
      and
    • Check the option for All under the Extra Registry section
    • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan won't take long.
      • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
      • Please copy (Edit->Select All, Edit->Copy) the contents of these files and post them in your topic

    • OTL.txt <-- Will be opened, maximized
    • Extras.txt <-- Will be minimized on task bar.

    Please post the contents of both OTL.txt and Extras.txt files in your next reply.

    In your next reply, please provide the following logs:
    OTL.txt
    Extras.txt
    AdwCleaner[S0].txt

    Thank you,
    Donna
    If you think you might be infected with malware or have recently cleansed your computer of malware without the help of an expert, please read and follow the instructions in How to Start Removing Viruses and Spyware from your Computer. This can alleviate time consumed in trouble shooting your current computer problems.

    If your problem is solved, here's how to say thanks!

    Very proud parent of a U.S. Navy "CB"



    "People may forget what you say,
    People may forget what you did,
    but People will never forget how you made them feel!"

  10. #9
    Member
    Join Date
    Feb 2007
    Location
    DFW, Texas
    Posts
    100
    Points
    3

    Default

    Hi Donna,

    Below is the log of the second scan.

    # AdwCleaner v3.015 - Report created 17/12/2013 at 10:43:43
    # Updated 10/12/2013 by Xplode
    # Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
    # Username : Don - HP30849201172
    # Running from : C:\Documents and Settings\Don\Local Settings\temp\dlm44.tmp\adwcleaner.exe
    # Option : Clean

    ***** [ Services ] *****

    [#] Service Deleted : Updater Service for StartNow Toolbar

    ***** [ Files / Folders ] *****

    Folder Deleted : C:\Documents and Settings\All Users\Application Data\AVG SafeGuard toolbar
    Folder Deleted : C:\Documents and Settings\All Users\Application Data\Conduit
    Folder Deleted : C:\Program Files\AVG SafeGuard toolbar
    Folder Deleted : C:\Program Files\Conduit
    Folder Deleted : C:\Program Files\MyPC Backup
    Folder Deleted : C:\Program Files\appmarket-
    Folder Deleted : C:\Program Files\Connect_DLC_5
    Folder Deleted : C:\Program Files\Common Files\AVG Secure Search
    Folder Deleted : C:\Program Files\Common Files\DVDVideoSoft\TB
    [!] Folder Deleted : C:\Documents and Settings\Don\Local Settings\Application Data\AVG SafeGuard toolbar
    Folder Deleted : C:\Documents and Settings\Don\Local Settings\Application Data\Conduit
    Folder Deleted : C:\Documents and Settings\Don\Local Settings\Application Data\ext_offermosquito
    Folder Deleted : C:\Documents and Settings\Don\Local Settings\Application Data\NativeMessaging
    Folder Deleted : C:\Documents and Settings\Don\Local Settings\Application Data\Connect_DLC_5
    Folder Deleted : C:\DOCUME~1\Don\LOCALS~1\Temp\NativeMessaging
    Folder Deleted : C:\DOCUME~1\Don\LOCALS~1\Temp\CT3306061
    Folder Deleted : C:\Documents and Settings\Don\Application Data\AVG SafeGuard toolbar
    Folder Deleted : C:\Documents and Settings\Don\Application Data\Common\LuaRT
    Folder Deleted : C:\Documents and Settings\Don\Application Data\DataMgr
    Folder Deleted : C:\Documents and Settings\Don\Application Data\dvdvideosoftiehelpers
    Folder Deleted : C:\Documents and Settings\Don\Application Data\Intermediate
    Folder Deleted : C:\Documents and Settings\Don\Application Data\SCheck
    Folder Deleted : C:\Documents and Settings\Don\Application Data\Searchprotect
    Folder Deleted : C:\Documents and Settings\Don\Application Data\Snz
    Folder Deleted : C:\Documents and Settings\Don\Application Data\SSync
    Folder Deleted : C:\Documents and Settings\Karen\Local Settings\Application Data\AVG Security Toolbar
    Folder Deleted : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\CT3307181
    Folder Deleted : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\CT3306061
    Folder Deleted : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\Extensions\{75623D5D-4683-402A-B610-AC4BAB767C86}
    Folder Deleted : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\Extensions\{64d64833-9296-421b-a362-83cfbd6291b6}
    Folder Deleted : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\Extensions\{d1b5aad5-d1ae-4b20-88b1-feeaeb4c1ebc}
    [!] Folder Deleted : C:\Documents and Settings\Don\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk
    [!] Folder Deleted : C:\Documents and Settings\Don\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\iekjmlcgpmcjigljdiagaibfjfaideal
    File Deleted : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\Extensions\om@offermosquito.com.xpi
    File Deleted : C:\END
    File Deleted : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\searchplugins\Conduit.xml
    File Deleted : C:\Program Files\Mozilla Firefox\browser\searchplugins\safeguard-secure-search.xml
    File Deleted : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\searchplugins\search.xml
    File Deleted : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\searchplugins\Surf-canyon.xml

    ***** [ Shortcuts ] *****


    ***** [ Registry ] *****

    Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
    Key Deleted : HKCU\Software\Google\Chrome\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk
    Key Deleted : HKCU\Software\Google\Chrome\Extensions\iekjmlcgpmcjigljdiagaibfjfaideal
    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\iekjmlcgpmcjigljdiagaibfjfaideal
    Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [DataMgr]
    Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Intermediate]
    Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [OMESupervisor]
    Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [scheck]
    Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Snoozer]
    Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ssync]
    Key Deleted : HKCU\Toolbar
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\Toolbar.DLL
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
    Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
    Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
    Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
    Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
    Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
    Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.BandObject
    Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.BandObject.1
    Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.ToolbarHelperObject
    Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.ToolbarHelperObject.1
    Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
    Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
    Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
    Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
    Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3306061
    Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3307181
    Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ConduitFloatingPlugin_lipgolpfajiadodbcbljdpmbmbdmfcil]
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{7E8A36EA-2501-4ED3-A3C8-CFA9143FB169}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1663C10B-0D55-438D-8496-19A3DBAEC0E4}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{82B16A3D-F03E-4565-A532-666B219C9A53}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{745D0A77-05CB-4FF3-BE77-48D888F06261}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D1B5AAD5-D1AE-4B20-88B1-FEEAEB4C1EBC}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{24C1F23B-0796-4C3A-8E00-BAB4D876D4A9}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1C888195-0160-4883-91B7-294C0CE2F277}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{99ACA0F7-D864-45CB-8C40-FD42A077E7CA}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{82B16A3D-F03E-4565-A532-666B219C9A53}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D1B5AAD5-D1AE-4B20-88B1-FEEAEB4C1EBC}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3BC93E76-92F8-5FDA-B676-5AFEE3735BF1}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82B16A3D-F03E-4565-A532-666B219C9A53}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82B16A3D-F03E-4565-A532-666B219C9A53}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3BC93E76-92F8-5FDA-B676-5AFEE3735BF1}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{745D0A77-05CB-4FF3-BE77-48D888F06261}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{24C1F23B-0796-4C3A-8E00-BAB4D876D4A9}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3E39B99C-1E29-49CC-B122-0806CFF6DF8C}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C24BE93A-0CAA-4E9C-8C9B-4F34161BB6F9}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{85F7F409-B0FC-4A81-8A3E-964A2437B0D4}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A4C88887-1F2A-4C1E-8FEF-913BAA1C766E}
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{CCC7A320-B3CA-4199-B1A6-9F516DD69829}]
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D1B5AAD5-D1AE-4B20-88B1-FEEAEB4C1EBC}]
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{CCC7A320-B3CA-4199-B1A6-9F516DD69829}]
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{64D64833-9296-421B-A362-83CFBD6291B6}]
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{D1B5AAD5-D1AE-4B20-88B1-FEEAEB4C1EBC}]
    Key Deleted : HKCU\Software\AVG SafeGuard toolbar
    Key Deleted : HKCU\Software\CompeteInc
    Key Deleted : HKCU\Software\Conduit
    Key Deleted : HKCU\Software\ConduitSearchScopes
    Key Deleted : HKCU\Software\OfferMosquito
    Key Deleted : HKCU\Software\Protector
    Key Deleted : HKCU\Software\SmartBar
    Key Deleted : HKCU\Software\Softonic
    Key Deleted : HKCU\Software\StartNow Toolbar
    Key Deleted : HKCU\Software\YahooPartnerToolbar
    Key Deleted : HKCU\Software\Zugo
    Key Deleted : HKCU\Software\appmarket-
    Key Deleted : HKCU\Software\Connect_DLC_5
    Key Deleted : HKLM\Software\AVG SafeGuard toolbar
    Key Deleted : HKLM\Software\AVG Security Toolbar
    Key Deleted : HKLM\Software\Conduit
    Key Deleted : HKLM\Software\StartNow Toolbar
    Key Deleted : HKLM\Software\Uniblue
    Key Deleted : HKLM\Software\appmarket-
    Key Deleted : HKLM\Software\Connect_DLC_5
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AVG SafeGuard toolbar
    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536

    ***** [ Browsers ] *****

    -\\ Internet Explorer v8.0.6001.18702

    Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

    -\\ Mozilla Firefox v27.0 (en-US)

    [ File : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\prefs.js ]

    Line Deleted : user_pref("CT3306061.FF19Solved", "true");
    Line Deleted : user_pref("CT3306061.UserID", "UN22595155606712213");
    Line Deleted : user_pref("CT3306061.browser.search.defaultthis.engineName", "true");
    Line Deleted : user_pref("CT3306061.fullUserID", "UN22595155606712213.IN.20131215081505");
    Line Deleted : user_pref("CT3306061.installDate", "15/12/2013 08:15:16");
    Line Deleted : user_pref("CT3306061.installSessionId", "{6F382B8E-3A6E-440B-993B-4D220B21C8DE}");
    Line Deleted : user_pref("CT3306061.installSp", "TRUE");
    Line Deleted : user_pref("CT3306061.installUsage", "17/12/2013 10:41:32");
    Line Deleted : user_pref("CT3306061.installUsageEarly", "17/12/2013 10:41:32");
    Line Deleted : user_pref("CT3306061.installerVersion", "1.8.1.4");
    Line Deleted : user_pref("CT3306061.keyword", "true");
    Line Deleted : user_pref("CT3306061.originalHomepage", "hxxp://wisersearch.com/?channel=en");
    Line Deleted : user_pref("CT3306061.originalSearchAddressUrl", "hxxp://wisersearch.com/search.php?channel=en&q=");
    Line Deleted : user_pref("CT3306061.originalSearchEngine", "Search");
    Line Deleted : user_pref("CT3306061.originalSearchEngineName", "Search");
    Line Deleted : user_pref("CT3306061.searchRevert", "true");
    Line Deleted : user_pref("CT3306061.searchUninstallUserMode", "2");
    Line Deleted : user_pref("CT3306061.searchUserMode", "2");
    Line Deleted : user_pref("CT3306061.smartbar.homepage", "true");
    Line Deleted : user_pref("CT3306061.toolbarInstallDate", "15-12-2013 08:15:07");
    Line Deleted : user_pref("CT3306061.versionFromInstaller", "10.23.0.722");
    Line Deleted : user_pref("CT3306061.xpeMode", "0");
    Line Deleted : user_pref("CT3307181.FF19Solved", "true");
    Line Deleted : user_pref("CT3307181.UserID", "UN88013374125684216");
    Line Deleted : user_pref("CT3307181.browser.search.defaultthis.engineName", "true");
    Line Deleted : user_pref("CT3307181.fullUserID", "UN88013374125684216.IN.20131213140158");
    Line Deleted : user_pref("CT3307181.installDate", "13/12/2013 14:02:10");
    Line Deleted : user_pref("CT3307181.installSessionId", "{BE4373E3-36F3-4F40-8A4F-D245F5041EC3}");
    Line Deleted : user_pref("CT3307181.installSp", "TRUE");
    Line Deleted : user_pref("CT3307181.installerVersion", "1.8.1.4");
    Line Deleted : user_pref("CT3307181.keyword", "true");
    Line Deleted : user_pref("CT3307181.originalHomepage", "hxxps://www.google.com/");
    Line Deleted : user_pref("CT3307181.originalSearchAddressUrl", "");
    Line Deleted : user_pref("CT3307181.originalSearchEngine", "AVG Secure Search");
    Line Deleted : user_pref("CT3307181.originalSearchEngineName", "AVG Secure Search");
    Line Deleted : user_pref("CT3307181.searchRevert", "false");
    Line Deleted : user_pref("CT3307181.searchUninstallUserMode", "2");
    Line Deleted : user_pref("CT3307181.searchUserMode", "2");
    Line Deleted : user_pref("CT3307181.smartbar.homepage", "true");
    Line Deleted : user_pref("CT3307181.toolbarInstallDate", "13-12-2013 14:02:00");
    Line Deleted : user_pref("CT3307181.versionFromInstaller", "10.23.0.722");
    Line Deleted : user_pref("CT3307181.xpeMode", "0");
    Line Deleted : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://wisersearch.com/search.php?channel=en&q=");
    Line Deleted : user_pref("browser.search.defaultenginename", "Connect DLC 5 Customized Web Search");
    Line Deleted : user_pref("browser.search.defaultthis.engineName", "Connect DLC 5 Customized Web Search");
    Line Deleted : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3306061&CUI=UN22595155606712213&UM=2&SearchSource=3&q={searchTerms}");
    Line Deleted : user_pref("browser.search.selectedEngine", "Connect DLC 5 Customized Web Search");
    Line Deleted : user_pref("browser.startup.homepage", "hxxp://search.conduit.com/?ctid=CT3306061&CUI=UN22595155606712213&UM=2&SearchSource=13");
    Line Deleted : user_pref("extensions.booly.shopping_supporteddoms", "amazon.co.uk,amazon.com,ebay.co.uk,ebay.com,groupon.co.uk,groupon.com,blackfriday,cybermonday,1-acp.com,1000bulbs.com,101inks.com,101phones.com,11[...]
    Line Deleted : user_pref("extensions.ntk.HISTORY", "[{\"title\":\"Inbox (13) - dglockster@gmail.com - Gmail\",\"icon\":{\"spec\":\"moz-anno:favicon:hxxps://mail.google.com/favicon.ico\"},\"uri\":\"hxxps://mail.googl[...]
    Line Deleted : user_pref("extensions.ntk.feedStore", "{\"URLtoFeedCount\":15,\"FeedStoriesCount\":-1,\"data\":[{\"uri\":\"hxxps://mail.google.com/mail/u/0/%3Fshva=1#inbox\",\"feed\":null,\"stories\":null},{\"uri\":\[...]
    Line Deleted : user_pref("extensions.ntk.ntk_dragged_pos", "<table class=\"speed\" cellpadding=\"0\" cellspacing=\"0\"><tbody><tr><td href=\"hxxps://mail.google.com/mail/u/0/?shva=1#inbox\" style=\"padding-bottom:10[...]
    Line Deleted : user_pref("extensions.ntk.recentClosedPers", "hxxps://www.google.com/search?q=verbiage+definition::<html><head></head><body>verbiage definition - Google Search</body></html>;hxxp://www.dailywritingtip[...]
    Line Deleted : user_pref("extensions.ntk.thumbsUrls", "hxxps://mail.google.com/mail/u/0/?shva=1#inbox;hxxp://www.google.com/ig?hl=en;hxxps://accounts.google.com/Logout?service=mail&continue=hxxps://accounts.google.c[...]
    Line Deleted : user_pref("extensions.xnotifier.accounts.[gmail#bluetracewatch@gmail.com].inboxOnly", true);
    Line Deleted : user_pref("extensions.xnotifier.accounts.[gmail#dglockster@gmail.com].inboxOnly", true);
    Line Deleted : user_pref("extensions.xnotifier.accounts.[gmail#dr.dsmith@gmail.com].inboxOnly", true);
    Line Deleted : user_pref("extensions.xnotifier.accounts.[gmail#fbcopliaison@gmail.com].inboxOnly", true);
    Line Deleted : user_pref("extensions.xnotifier.accounts.[gmail#fbcopteam1@gmail.com].inboxOnly", true);
    Line Deleted : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3306061&SearchSource=2&CUI=UN22595155606712213&UM=2&q=");
    Line Deleted : user_pref("om.config", "{\"active\":true,\"name\":\"october2013\",\"id\":35,\"dispId\":\"CH-35\",\"aboutLink\":\"\",\"trackingGeneral\":true,\"xhrDomains\":[\"become\",\"shopzilla\",\"twenga\",\"bizra[...]
    Line Deleted : user_pref("simplenewtab.url", "hxxp://wisersearch.com/?channel=en_nt");
    Line Deleted : user_pref("smartbar.addressBarOwnerCTID", "CT3306061");
    Line Deleted : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3307181&CUI=UN88013374125684216&UM=2&SearchSource=13,hxxp://search.conduit.com/?ctid=CT3306061&CUI=UN22595155606712213&UM=2[...]
    Line Deleted : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3307181&SearchSource=2&CUI=UN88013374125684216&UM=2&q=,hxxp://search.conduit.com/ResultsExt.aspx?cti[...]
    Line Deleted : user_pref("smartbar.defaultSearchOwnerCTID", "CT3306061");
    Line Deleted : user_pref("smartbar.homePageOwnerCTID", "CT3306061");
    Line Deleted : user_pref("smartbar.machineId", "GRGBCKG+0CGYPIYEJJABQ3V3O6XTYSKFO3FTGTWACYAHKWDPWLE7PRU/SXMPRBDLI8WS/QIGFO/3GVLBAXJ+PA");
    Line Deleted : user_pref("surfcanyon.added_to_searchbar", true);
    Line Deleted : user_pref("surfcanyon.chummo_enabled", false);
    Line Deleted : user_pref("surfcanyon.daily_code", "scIsOnSearchEngineDomain = function() {\nreturn contains(scCurrentPageDomain, '.surfcanyon.') || contains(scCurrentPageDomain, '.google.') || contains(scCurrentPage[...]
    Line Deleted : user_pref("surfcanyon.daily_code_timestamp", "1322917030730");
    Line Deleted : user_pref("surfcanyon.dynamic_preferences_timestamp", "1387288492447");
    Line Deleted : user_pref("surfcanyon.google_search_button_click_query", "google+phonebook:+9037831699");
    Line Deleted : user_pref("surfcanyon.google_search_button_click_ts", "1309877826175");
    Line Deleted : user_pref("surfcanyon.hourly_code", "scHourlyCodeRevision = '337r';\nscGetDocument = function() {\nreturn scIsFF ? content.document : document;\n};\n\nscExtractUrlFromSpanTag = function(spanTag) {\nva[...]
    Line Deleted : user_pref("surfcanyon.hourly_code2", "scEnableGoogle_hourly = function() {\nvar args = window.location.search;\nvar path = window.location.pathname;\nvar isGoogleSearchDomain = (contains(scCurrentPage[...]
    Line Deleted : user_pref("surfcanyon.hourly_code_timestamp", "1342533670675");
    Line Deleted : user_pref("surfcanyon.hover_overlay_enabled", false);
    Line Deleted : user_pref("surfcanyon.initialized_chummo", false);
    Line Deleted : user_pref("surfcanyon.initialized_search_bar", false);
    Line Deleted : user_pref("surfcanyon.inst_id", "1501284431329441638486899665189267");
    Line Deleted : user_pref("surfcanyon.inst_timestamp", "1281652820431");
    Line Deleted : user_pref("surfcanyon.last_notification_displayed", 2);
    Line Deleted : user_pref("surfcanyon.last_seen_splash", "343");
    Line Deleted : user_pref("surfcanyon.no_searchbar_global", false);
    Line Deleted : user_pref("surfcanyon.num_recs_clicked", "339");
    Line Deleted : user_pref("surfcanyon.num_results_clicked", "2787");
    Line Deleted : user_pref("surfcanyon.num_results_clicked_when_recs_available", "1128");
    Line Deleted : user_pref("surfcanyon.num_searches", "2345");
    Line Deleted : user_pref("surfcanyon.page_notifications_cancelled", true);
    Line Deleted : user_pref("surfcanyon.partner_code", "MZ");
    Line Deleted : user_pref("surfcanyon.recs_notifications_cancelled", true);
    Line Deleted : user_pref("surfcanyon.refinements_cache", "frankford arsenal reloading scale review/^glucosamine sulphate (sulfate) vs glucosamine hydrochloride/^picatinny savage accutrigger sa/^return of the native/[...]
    Line Deleted : user_pref("surfcanyon.retailer_domain", "");
    Line Deleted : user_pref("surfcanyon.retailer_id", "");
    Line Deleted : user_pref("surfcanyon.retailer_url", "");
    Line Deleted : user_pref("surfcanyon.search_bar_enabled", false);
    Line Deleted : user_pref("surfcanyon.searchbar_right_offsets", false);
    Line Deleted : user_pref("surfcanyon.searchbar_zindexes", false);
    Line Deleted : user_pref("surfcanyon.server_error_time", "1385603639099");
    Line Deleted : user_pref("surfcanyon.server_error_url", "hxxps://www.surfcanyon.com/search/refresh?ssMapKey=wwwgooglecombudsguns&instId=1501284431329441638486899665189267&extensionVersion=3.4.3");
    Line Deleted : user_pref("surfcanyon.ss_page_links_enabled", false);
    Line Deleted : user_pref("{5911488E-9D1E-40ec-8CBB-06B231CC153F}.name", "StartNow Toolbar");
    Line Deleted : user_pref("{5911488E-9D1E-40ec-8CBB-06B231CC153F}.startpage", "pos.startnow.com");

    [ File : C:\Documents and Settings\Karen\Application Data\Mozilla\Firefox\Profiles\ppo36kak.default\prefs.js ]

    Line Deleted : user_pref("browser.search.defaultenginename", "AVG Secure Search");
    Line Deleted : user_pref("browser.search.selectedEngine", "AVG Secure Search");
    Line Deleted : user_pref("extensions.wrc.SearchRules.ask.com.style", ".WRCN {display:none} #yui-main .tsrc_vnru .title + .WRCN, #yui-main #teoma-results .title + .WRCN {display:inline !important; background: url(\"I[...]
    Line Deleted : user_pref("extensions.wrc.SearchRules.ask.com.url", "^hxxp(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*");

    *************************

    AdwCleaner[R0].txt - [7224 octets] - [10/12/2013 13:33:07]
    AdwCleaner[R1].txt - [24750 octets] - [15/12/2013 08:16:17]
    AdwCleaner[R2].txt - [25323 octets] - [17/12/2013 10:41:10]
    AdwCleaner[S0].txt - [25286 octets] - [17/12/2013 10:43:43]

    ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [25347 octets] ##########


    I will not run OTL until I read your reply.

    Thanks,
    Don

  11. #10
    Member Spyware Fighter DonnaB's Avatar
    Join Date
    Apr 2009
    Location
    Illiana, Ill. USA
    Posts
    3,522
    Points
    563

    Default

    Hi Don,

    My apologies for the delay in responding. It also appears that my connection is suffering here lately from last minute online shoppers or else we have some really bad weather headed my way. I have a satellite connection that gets really flaky when I need it the most!

    Did that get rid of wisesearch for you?

    Please go ahead and run the OTL scan as requested so I can see what leftovers might need to be tended to.

    Thank you,
    Donna
    Last edited by DonnaB; 12-20-2013 at 08:09 AM.
    If you think you might be infected with malware or have recently cleansed your computer of malware without the help of an expert, please read and follow the instructions in How to Start Removing Viruses and Spyware from your Computer. This can alleviate time consumed in trouble shooting your current computer problems.

    If your problem is solved, here's how to say thanks!

    Very proud parent of a U.S. Navy "CB"



    "People may forget what you say,
    People may forget what you did,
    but People will never forget how you made them feel!"

Page 1 of 5 123 ... LastLast