wisersearch.com

[dglockster]

Something called "wisersearch.com" has replaced my homepage in Firefox. How can I get rid of it and go back to my preferred homepage? Going to Tools, Options, Use Current Pages does not restore my original home page.

Any recommendations will be appreciated?

[DonnaB]

Hi dglockster,

Please do the following:

Please download AdwCleaner by Xplode and save to your Desktop.

• Double-click AdwCleaner.exe to run the tool.
  Note: Windows Vista, Windows 7/8 users right-click and select Run As Administrator.
• Click the Scan button.
• AdwCleaner will begin. Be patient as the scan may take some time to complete.
• The contents of the scan results may be confusing. If you see a program name that you know should not be removed, uncheck the results and please let me know about it.
• Click the Clean button.
• Press OK when asked to close all programs and follow the onscreen prompts.
• Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
• After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
• Copy and paste the contents of that logfile in your next reply.
• A copy of that logfile will also be saved in the C:\AdwCleaner folder.

Let me know if that solved the problem with wisesearch.

Thank you,
Donna

[dglockster]

Hi dglockster,

Please do the following:

Please download AdwCleaner by Xplode and save to your Desktop.

• Double-click AdwCleaner.exe to run the tool.
  Note: Windows Vista, Windows 7/8 users right-click and select Run As Administrator.
• Click the Scan button.
• AdwCleaner will begin. Be patient as the scan may take some time to complete.
• The contents of the scan results may be confusing. If you see a program name that you know should not be removed, uncheck the results and please let me know about it.
• Click the Clean button.
• Press OK when asked to close all programs and follow the onscreen prompts.
• Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
• After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
• Copy and paste the contents of that logfile in your next reply.
• A copy of that logfile will also be saved in the C:\AdwCleaner folder.

Let me know if that solved the problem with wisersearch.

Thank you,
Donna

Donna,
Apologies for the late reply but am just now being able to followup on your recommendation and thanks for the advice.

I did download and run AdwCleaner.exe as the administrator. However, I am not computer literate enough to understand the directions. Where you write, "If you see a program name that you know should not be removed, uncheck the results and please let me know about it." In the search results, it appeared to me all of the program names needed to be unchecked so they would not be deleted. Also, the name "wisersearch" did not appear in any of the listings.

Therefore, I just closed AdwCleaner because I definitely did not want to delete any of the program names that appeared to be legitimate.

Any other suggestions?

[zep516]

Hi dglockster

Can you"

Click the Scan button.AdwCleaner will begin. Be patient as the scan may take some time to complete. After the scan has finished, click the Report button. A logfile (AdwCleaner[R0].txt) will open in Notepad for review.

Post that log report for Donna and she can review the list of programs for you....


Joe

[DonnaB]

Thank you Joe.

@ dglockster,

Please follow Joe's instructions above and provide the Report log that AdwCleaner generated.

However, I am not computer literate enough to understand the directions.

I just closed AdwCleaner because I definitely did not want to delete any of the program names that appeared to be legitimate.

Please allow us the courtesy of viewing that Report log and educating you on the legitimacy of those programs that AdwCleaner had found. Trust me, we will not remove anything from your computer that you deem necessary.

Thank you,
Donna

[dglockster]

Thanks, Joe.

Donna,

The log is shown below:

# AdwCleaner v3.015 - Report created 15/12/2013 at 08:16:17
# Updated 10/12/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Don - HP30849201172
# Running from : C:\Documents and Settings\Don\Local Settings\temp\dlm2A.tmp\adwcleaner.exe
# Option : Scan

***** [ Services ] *****

Service Found : Updater Service for StartNow Toolbar

***** [ Files / Folders ] *****

File Found : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\Extensions\om@offermosquito.com.xpi
File Found : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\searchplugins\Conduit.xml
File Found : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\searchplugins\search.xml
File Found : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\searchplugins\Surf-canyon.xml
File Found : C:\Documents and Settings\Don\Local Settings\Application Data\omesuperv.exe
File Found : C:\END
File Found : C:\Program Files\Mozilla Firefox\browser\searchplugins\safeguard-secure-search.xml
Folder Found : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\Extensions\{64d64833-9296-421b-a362-83cfbd6291b6}
Folder Found : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\Extensions\{75623D5D-4683-402A-B610-AC4BAB767C86}
Folder Found : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\Extensions\{d1b5aad5-d1ae-4b20-88b1-feeaeb4c1ebc}
Folder Found : C:\Documents and Settings\Don\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk
Folder Found : C:\Documents and Settings\Don\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\iekjmlcgpmcjigljdiagaibfjfaideal
Folder Found C:\DOCUME~1\Don\LOCALS~1\Temp\CT3306061
Folder Found C:\DOCUME~1\Don\LOCALS~1\Temp\CT3307181
Folder Found C:\DOCUME~1\Don\LOCALS~1\Temp\NativeMessaging
Folder Found C:\Documents and Settings\All Users\Application Data\AVG SafeGuard toolbar
Folder Found C:\Documents and Settings\All Users\Application Data\Conduit
Folder Found C:\Documents and Settings\Don\Application Data\AVG SafeGuard toolbar
Folder Found C:\Documents and Settings\Don\Application Data\Common\LuaRT
Folder Found C:\Documents and Settings\Don\Application Data\DataMgr
Folder Found C:\Documents and Settings\Don\Application Data\dvdvideosoftiehelpers
Folder Found C:\Documents and Settings\Don\Application Data\Intermediate
Folder Found C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\CT3306061
Folder Found C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\CT3307181
Folder Found C:\Documents and Settings\Don\Application Data\SCheck
Folder Found C:\Documents and Settings\Don\Application Data\Searchprotect
Folder Found C:\Documents and Settings\Don\Application Data\Snz
Folder Found C:\Documents and Settings\Don\Application Data\SSync
Folder Found C:\Documents and Settings\Don\Local Settings\Application Data\appmarket-
Folder Found C:\Documents and Settings\Don\Local Settings\Application Data\AVG SafeGuard toolbar
Folder Found C:\Documents and Settings\Don\Local Settings\Application Data\Conduit
Folder Found C:\Documents and Settings\Don\Local Settings\Application Data\ext_offermosquito
Folder Found C:\Documents and Settings\Don\Local Settings\Application Data\NativeMessaging
Folder Found C:\Documents and Settings\Karen\Local Settings\Application Data\AVG Security Toolbar
Folder Found C:\Program Files\appmarket-
Folder Found C:\Program Files\AVG SafeGuard toolbar
Folder Found C:\Program Files\Common Files\AVG Secure Search
Folder Found C:\Program Files\Common Files\DVDVideoSoft\TB
Folder Found C:\Program Files\Conduit

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\appmarket-
Key Found : HKCU\Software\AVG SafeGuard toolbar
Key Found : HKCU\Software\CompeteInc
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\ConduitSearchScopes
Key Found : HKCU\Software\Google\Chrome\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk
Key Found : HKCU\Software\Google\Chrome\Extensions\iekjmlcgpmcjigljdiagaibfjfaideal
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3BC93E76-92F8-5FDA-B676-5AFEE3735BF1}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82B16A3D-F03E-4565-A532-666B219C9A53}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3BC93E76-92F8-5FDA-B676-5AFEE3735BF1}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82B16A3D-F03E-4565-A532-666B219C9A53}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
Key Found : HKCU\Software\OfferMosquito
Key Found : HKCU\Software\Protector
Key Found : HKCU\Software\SmartBar
Key Found : HKCU\Software\Softonic
Key Found : HKCU\Software\StartNow Toolbar
Key Found : HKCU\Software\YahooPartnerToolbar
Key Found : HKCU\Software\Zugo
Key Found : HKCU\Toolbar
Key Found : HKLM\Software\appmarket-
Key Found : HKLM\Software\AVG SafeGuard toolbar
Key Found : HKLM\Software\AVG Security Toolbar
Key Found : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Found : HKLM\SOFTWARE\Classes\AppID\{7E8A36EA-2501-4ED3-A3C8-CFA9143FB169}
Key Found : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Found : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Found : HKLM\SOFTWARE\Classes\AppID\Toolbar.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Found : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{1663C10B-0D55-438D-8496-19A3DBAEC0E4}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{64D64833-9296-421B-A362-83CFBD6291B6}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{745D0A77-05CB-4FF3-BE77-48D888F06261}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{82B16A3D-F03E-4565-A532-666B219C9A53}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Found : HKLM\SOFTWARE\Classes\Interface\{1C888195-0160-4883-91B7-294C0CE2F277}
Key Found : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Found : HKLM\SOFTWARE\Classes\Interface\{99ACA0F7-D864-45CB-8C40-FD42A077E7CA}
Key Found : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Found : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Found : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Key Found : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Found : HKLM\SOFTWARE\Classes\Toolbar.BandObject
Key Found : HKLM\SOFTWARE\Classes\Toolbar.BandObject.1
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3307181
Key Found : HKLM\SOFTWARE\Classes\Toolbar.ToolbarHelperObject
Key Found : HKLM\SOFTWARE\Classes\Toolbar.ToolbarHelperObject.1
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Key Found : HKLM\Software\Conduit
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\iekjmlcgpmcjigljdiagaibfjfaideal
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3E39B99C-1E29-49CC-B122-0806CFF6DF8C}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C24BE93A-0CAA-4E9C-8C9B-4F34161BB6F9}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AVG SafeGuard toolbar
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64D64833-9296-421B-A362-83CFBD6291B6}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{82B16A3D-F03E-4565-A532-666B219C9A53}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{745D0A77-05CB-4FF3-BE77-48D888F06261}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar
Key Found : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Found : HKLM\Software\StartNow Toolbar
Key Found : HKLM\Software\Uniblue
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{CCC7A320-B3CA-4199-B1A6-9F516DD69829}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{64D64833-9296-421B-A362-83CFBD6291B6}]
Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ConduitFloatingPlugin_lipgolpfajiadodbcbljdpmbmbdmfcil]
Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [DataMgr]
Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Intermediate]
Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [OMESupervisor]
Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [scheck]
Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Snoozer]
Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ssync]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{64D64833-9296-421B-A362-83CFBD6291B6}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{CCC7A320-B3CA-4199-B1A6-9F516DD69829}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702


-\\ Mozilla Firefox v27.0 (en-US)

[ File : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\prefs.js ]

Line Found : user_pref("CT3306061.FF19Solved", "true");
Line Found : user_pref("CT3306061.UserID", "UN22595155606712213");
Line Found : user_pref("CT3306061.browser.search.defaultthis.engineName", "true");
Line Found : user_pref("CT3306061.fullUserID", "UN22595155606712213.IN.20131215081505");
Line Found : user_pref("CT3306061.installDate", "15/12/2013 08:15:16");
Line Found : user_pref("CT3306061.installSessionId", "{72A9D6E0-84ED-4FDA-A276-4E5867ABBA71}");
Line Found : user_pref("CT3306061.installSp", "TRUE");
Line Found : user_pref("CT3306061.installerVersion", "1.8.1.4");
Line Found : user_pref("CT3306061.keyword", "true");
Line Found : user_pref("CT3306061.originalHomepage", "hxxp://wisersearch.com/?channel=en");
Line Found : user_pref("CT3306061.originalSearchAddressUrl", "hxxp://wisersearch.com/search.php?channel=en&q=");
Line Found : user_pref("CT3306061.originalSearchEngine", "Search");
Line Found : user_pref("CT3306061.originalSearchEngineName", "Search");
Line Found : user_pref("CT3306061.searchRevert", "true");
Line Found : user_pref("CT3306061.searchUninstallUserMode", "2");
Line Found : user_pref("CT3306061.searchUserMode", "2");
Line Found : user_pref("CT3306061.smartbar.homepage", "true");
Line Found : user_pref("CT3306061.toolbarInstallDate", "15-12-2013 08:15:07");
Line Found : user_pref("CT3306061.versionFromInstaller", "10.23.0.722");
Line Found : user_pref("CT3306061.xpeMode", "0");
Line Found : user_pref("CT3307181.FF19Solved", "true");
Line Found : user_pref("CT3307181.UserID", "UN88013374125684216");
Line Found : user_pref("CT3307181.browser.search.defaultthis.engineName", "true");
Line Found : user_pref("CT3307181.fullUserID", "UN88013374125684216.IN.20131213140158");
Line Found : user_pref("CT3307181.installDate", "13/12/2013 14:02:10");
Line Found : user_pref("CT3307181.installSessionId", "{BE4373E3-36F3-4F40-8A4F-D245F5041EC3}");
Line Found : user_pref("CT3307181.installSp", "TRUE");
Line Found : user_pref("CT3307181.installerVersion", "1.8.1.4");
Line Found : user_pref("CT3307181.keyword", "true");
Line Found : user_pref("CT3307181.originalHomepage", "hxxps://www.google.com/");
Line Found : user_pref("CT3307181.originalSearchAddressUrl", "");
Line Found : user_pref("CT3307181.originalSearchEngine", "AVG Secure Search");
Line Found : user_pref("CT3307181.originalSearchEngineName", "AVG Secure Search");
Line Found : user_pref("CT3307181.searchRevert", "false");
Line Found : user_pref("CT3307181.searchUninstallUserMode", "2");
Line Found : user_pref("CT3307181.searchUserMode", "2");
Line Found : user_pref("CT3307181.smartbar.homepage", "true");
Line Found : user_pref("CT3307181.toolbarInstallDate", "13-12-2013 14:02:00");
Line Found : user_pref("CT3307181.versionFromInstaller", "10.23.0.722");
Line Found : user_pref("CT3307181.xpeMode", "0");
Line Found : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://wisersearch.com/search.php?channel=en&q=");
Line Found : user_pref("browser.search.defaultenginename", "Connect DLC 5 Customized Web Search");
Line Found : user_pref("browser.search.defaultthis.engineName", "Connect DLC 5 Customized Web Search");
Line Found : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3306061&CUI=UN22595155606712213&UM=2&SearchSource=3&q={searchTerms}");
Line Found : user_pref("browser.search.selectedEngine", "Connect DLC 5 Customized Web Search");
Line Found : user_pref("browser.startup.homepage", "hxxp://search.conduit.com/?ctid=CT3306061&CUI=UN22595155606712213&UM=2&SearchSource=13");
Line Found : user_pref("extensions.booly.shopping_supporteddoms", "amazon.co.uk,amazon.com,ebay.co.uk,ebay.com,groupon.co.uk,groupon.com,blackfriday,cybermonday,1-acp.com,1000bulbs.com,101inks.com,101phones.com,11[...]
Line Found : user_pref("extensions.ntk.HISTORY", "[{\"title\":\"Inbox (13) - dglockster@gmail.com - Gmail\",\"icon\":{\"spec\":\"moz-anno:favicon:hxxps://mail.google.com/favicon.ico\"},\"uri\":\"hxxps://mail.googl[...]
Line Found : user_pref("extensions.ntk.feedStore", "{\"URLtoFeedCount\":15,\"FeedStoriesCount\":-1,\"data\":[{\"uri\":\"hxxps://mail.google.com/mail/u/0/%3Fshva=1#inbox\",\"feed\":null,\"stories\":null},{\"uri\":\[...]
Line Found : user_pref("extensions.ntk.ntk_dragged_pos", "<table class=\"speed\" cellpadding=\"0\" cellspacing=\"0\"><tbody><tr><td href=\"hxxps://mail.google.com/mail/u/0/?shva=1#inbox\" style=\"padding-bottom:10[...]
Line Found : user_pref("extensions.ntk.recentClosedPers", "hxxps://www.google.com/search?q=verbiage+definition::<html><head></head><body>verbiage definition - Google Search</body></html>;hxxp://www.dailywritingtip[...]
Line Found : user_pref("extensions.ntk.thumbsUrls", "hxxps://mail.google.com/mail/u/0/?shva=1#inbox;hxxp://www.google.com/ig?hl=en;hxxps://accounts.google.com/Logout?service=mail&continue=hxxps://accounts.google.c[...]
Line Found : user_pref("extensions.xnotifier.accounts.[gmail#bluetracewatch@gmail.com].inboxOnly", true);
Line Found : user_pref("extensions.xnotifier.accounts.[gmail#dglockster@gmail.com].inboxOnly", true);
Line Found : user_pref("extensions.xnotifier.accounts.[gmail#dr.dsmith@gmail.com].inboxOnly", true);
Line Found : user_pref("extensions.xnotifier.accounts.[gmail#fbcopliaison@gmail.com].inboxOnly", true);
Line Found : user_pref("extensions.xnotifier.accounts.[gmail#fbcopteam1@gmail.com].inboxOnly", true);
Line Found : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3306061&SearchSource=2&CUI=UN22595155606712213&UM=2&q=");
Line Found : user_pref("om.config", "{\"active\":true,\"name\":\"october2013\",\"id\":35,\"dispId\":\"CH-35\",\"aboutLink\":\"\",\"trackingGeneral\":true,\"xhrDomains\":[\"become\",\"shopzilla\",\"twenga\",\"bizra[...]
Line Found : user_pref("simplenewtab.url", "hxxp://wisersearch.com/?channel=en_nt");
Line Found : user_pref("smartbar.addressBarOwnerCTID", "CT3306061");
Line Found : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3307181&CUI=UN88013374125684216&UM=2&SearchSource=13,hxxp://search.conduit.com/?ctid=CT3306061&CUI=UN22595155606712213&UM=2[...]
Line Found : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3307181&SearchSource=2&CUI=UN88013374125684216&UM=2&q=,hxxp://search.conduit.com/ResultsExt.aspx?cti[...]
Line Found : user_pref("smartbar.defaultSearchOwnerCTID", "CT3306061");
Line Found : user_pref("smartbar.homePageOwnerCTID", "CT3306061");
Line Found : user_pref("smartbar.machineId", "GRGBCKG+0CGYPIYEJJABQ3V3O6XTYSKFO3FTGTWACYAHKWDPWLE7PRU/SXMPRBDLI8WS/QIGFO/3GVLBAXJ+PA");
Line Found : user_pref("surfcanyon.added_to_searchbar", true);
Line Found : user_pref("surfcanyon.chummo_enabled", false);
Line Found : user_pref("surfcanyon.daily_code", "scIsOnSearchEngineDomain = function() {\nreturn contains(scCurrentPageDomain, '.surfcanyon.') || contains(scCurrentPageDomain, '.google.') || contains(scCurrentPage[...]
Line Found : user_pref("surfcanyon.daily_code_timestamp", "1322917030730");
Line Found : user_pref("surfcanyon.dynamic_preferences_timestamp", "1387115518530");
Line Found : user_pref("surfcanyon.google_search_button_click_query", "google+phonebook:+9037831699");
Line Found : user_pref("surfcanyon.google_search_button_click_ts", "1309877826175");
Line Found : user_pref("surfcanyon.hourly_code", "scHourlyCodeRevision = '337r';\nscGetDocument = function() {\nreturn scIsFF ? content.document : document;\n};\n\nscExtractUrlFromSpanTag = function(spanTag) {\nva[...]
Line Found : user_pref("surfcanyon.hourly_code2", "scEnableGoogle_hourly = function() {\nvar args = window.location.search;\nvar path = window.location.pathname;\nvar isGoogleSearchDomain = (contains(scCurrentPage[...]
Line Found : user_pref("surfcanyon.hourly_code_timestamp", "1342533670675");
Line Found : user_pref("surfcanyon.hover_overlay_enabled", false);
Line Found : user_pref("surfcanyon.initialized_chummo", false);
Line Found : user_pref("surfcanyon.initialized_search_bar", false);
Line Found : user_pref("surfcanyon.inst_id", "1501284431329441638486899665189267");
Line Found : user_pref("surfcanyon.inst_timestamp", "1281652820431");
Line Found : user_pref("surfcanyon.last_notification_displayed", 2);
Line Found : user_pref("surfcanyon.last_seen_splash", "343");
Line Found : user_pref("surfcanyon.no_searchbar_global", false);
Line Found : user_pref("surfcanyon.num_recs_clicked", "339");
Line Found : user_pref("surfcanyon.num_results_clicked", "2787");
Line Found : user_pref("surfcanyon.num_results_clicked_when_recs_available", "1128");
Line Found : user_pref("surfcanyon.num_searches", "2345");
Line Found : user_pref("surfcanyon.page_notifications_cancelled", true);
Line Found : user_pref("surfcanyon.partner_code", "MZ");
Line Found : user_pref("surfcanyon.recs_notifications_cancelled", true);
Line Found : user_pref("surfcanyon.refinements_cache", "frankford arsenal reloading scale review/^glucosamine sulphate (sulfate) vs glucosamine hydrochloride/^picatinny savage accutrigger sa/^return of the native/[...]
Line Found : user_pref("surfcanyon.retailer_domain", "");
Line Found : user_pref("surfcanyon.retailer_id", "");
Line Found : user_pref("surfcanyon.retailer_url", "");
Line Found : user_pref("surfcanyon.search_bar_enabled", false);
Line Found : user_pref("surfcanyon.searchbar_right_offsets", false);
Line Found : user_pref("surfcanyon.searchbar_zindexes", false);
Line Found : user_pref("surfcanyon.server_error_time", "1385603639099");
Line Found : user_pref("surfcanyon.server_error_url", "hxxps://www.surfcanyon.com/search/refresh?ssMapKey=wwwgooglecombudsguns&instId=1501284431329441638486899665189267&extensionVersion=3.4.3");
Line Found : user_pref("surfcanyon.ss_page_links_enabled", false);
Line Found : user_pref("{5911488E-9D1E-40ec-8CBB-06B231CC153F}.name", "StartNow Toolbar");
Line Found : user_pref("{5911488E-9D1E-40ec-8CBB-06B231CC153F}.startpage", "pos.startnow.com");

[ File : C:\Documents and Settings\Karen\Application Data\Mozilla\Firefox\Profiles\ppo36kak.default\prefs.js ]

Line Found : user_pref("browser.search.defaultenginename", "AVG Secure Search");
Line Found : user_pref("browser.search.selectedEngine", "AVG Secure Search");
Line Found : user_pref("extensions.wrc.SearchRules.ask.com.style", ".WRCN {display:none} #yui-main .tsrc_vnru .title + .WRCN, #yui-main #teoma-results .title + .WRCN {display:inline !important; background: url(\"I[...]
Line Found : user_pref("extensions.wrc.SearchRules.ask.com.url", "^hxxp(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*");

-\\ Google Chrome v

[ File : C:\Documents and Settings\Don\Local Settings\Application Data\Google\Chrome\User Data\Default\preferences ]

Found : homepage
Found : icon_url
Found : search_url
Found : keyword
Found : urls_to_restore_on_startup
Found : homepage
Found : icon_url
Found : search_url
Found : keyword
Found : urls_to_restore_on_startup
Found : homepage
Found : icon_url
Found : search_url
Found : keyword
Found : urls_to_restore_on_startup
Found : homepage
Found : icon_url
Found : search_url
Found : keyword
Found : urls_to_restore_on_startup
Found : homepage
Found : icon_url
Found : search_url
Found : keyword
Found : urls_to_restore_on_startup
Found : homepage
Found : icon_url
Found : search_url
Found : keyword
Found : urls_to_restore_on_startup
Found : homepage
Found : icon_url
Found : search_url
Found : keyword
Found : urls_to_restore_on_startup

*************************

AdwCleaner[R0].txt - [7224 octets] - [10/12/2013 13:33:07]
AdwCleaner[R1].txt - [24608 octets] - [15/12/2013 08:16:17]

########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [24669 octets] ##########

If as you review the log, you see anything else that needs to be removed please let me know.

Thanks,
Don

[dglockster]

Apologies for the double post. Did not know it had happened until I reviewed the thread.

[DonnaB]

Not to worry about the double post. I deleted it for you. Not sure why that happens, though from my own experiences, I always thought it was due to my slow connection, then I realized that I get a tad impatient and while the post is submitting I click a second time which creates the duplicate post. I has be to the forum software, not us, since I found that if you wait a moment for the first post to submit it is fine. Weird!

Let's scan with AdwCleaner again and this time, once the initial scan has completed, please click on the Clean button. Everything that was found is undesirable to have installed on your system and considered spyware, adware, foistware, etc. and can and will bog down your browser.

Double-click AdwCleaner.exe to run the tool again.

• Click the Scan button.
  Note: Windows Vista, Windows 7/8 users right-click and select Run As Administrator.
• AdwCleaner will begin to scan your computer like it did before.
• After the scan has finished click on the Clean button.
• Press OK when asked to close all programs and follow the onscreen prompts.
• Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
• After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
• Copy and paste the contents of that logfile in your next reply.
• A copy of that logfile will also be saved in the C:\AdwCleaner folder.

Next:

After you complete the task above, I'd like for you to run the following scan and provide the logs so we can make sure nothing was left behind.

Please download OTL to your Desktop

• Double click on the to run the program. On Vista/Win7 or 8 right click select Run As Administrator to start the program. If prompted by UAC, please allow it.
• Make sure all other windows are closed and to let it run uninterrupted.
• Click the Scan All Users checkbox
  and
• Check the option for All under the Extra Registry section
• Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan won't take long.
  
  • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
  • Please copy (Edit->Select All, Edit->Copy) the contents of these files and post them in your topic

• OTL.txt <-- Will be opened, maximized
• Extras.txt <-- Will be minimized on task bar.

Please post the contents of both OTL.txt and Extras.txt files in your next reply.

In your next reply, please provide the following logs:
OTL.txt
Extras.txt
AdwCleaner[S0].txt

Thank you,
Donna

[dglockster]

Hi Donna,

Below is the log of the second scan.

# AdwCleaner v3.015 - Report created 17/12/2013 at 10:43:43
# Updated 10/12/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Don - HP30849201172
# Running from : C:\Documents and Settings\Don\Local Settings\temp\dlm44.tmp\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : Updater Service for StartNow Toolbar

***** [ Files / Folders ] *****

Folder Deleted : C:\Documents and Settings\All Users\Application Data\AVG SafeGuard toolbar
Folder Deleted : C:\Documents and Settings\All Users\Application Data\Conduit
Folder Deleted : C:\Program Files\AVG SafeGuard toolbar
Folder Deleted : C:\Program Files\Conduit
Folder Deleted : C:\Program Files\MyPC Backup
Folder Deleted : C:\Program Files\appmarket-
Folder Deleted : C:\Program Files\Connect_DLC_5
Folder Deleted : C:\Program Files\Common Files\AVG Secure Search
Folder Deleted : C:\Program Files\Common Files\DVDVideoSoft\TB
[!] Folder Deleted : C:\Documents and Settings\Don\Local Settings\Application Data\AVG SafeGuard toolbar
Folder Deleted : C:\Documents and Settings\Don\Local Settings\Application Data\Conduit
Folder Deleted : C:\Documents and Settings\Don\Local Settings\Application Data\ext_offermosquito
Folder Deleted : C:\Documents and Settings\Don\Local Settings\Application Data\NativeMessaging
Folder Deleted : C:\Documents and Settings\Don\Local Settings\Application Data\Connect_DLC_5
Folder Deleted : C:\DOCUME~1\Don\LOCALS~1\Temp\NativeMessaging
Folder Deleted : C:\DOCUME~1\Don\LOCALS~1\Temp\CT3306061
Folder Deleted : C:\Documents and Settings\Don\Application Data\AVG SafeGuard toolbar
Folder Deleted : C:\Documents and Settings\Don\Application Data\Common\LuaRT
Folder Deleted : C:\Documents and Settings\Don\Application Data\DataMgr
Folder Deleted : C:\Documents and Settings\Don\Application Data\dvdvideosoftiehelpers
Folder Deleted : C:\Documents and Settings\Don\Application Data\Intermediate
Folder Deleted : C:\Documents and Settings\Don\Application Data\SCheck
Folder Deleted : C:\Documents and Settings\Don\Application Data\Searchprotect
Folder Deleted : C:\Documents and Settings\Don\Application Data\Snz
Folder Deleted : C:\Documents and Settings\Don\Application Data\SSync
Folder Deleted : C:\Documents and Settings\Karen\Local Settings\Application Data\AVG Security Toolbar
Folder Deleted : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\CT3307181
Folder Deleted : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\CT3306061
Folder Deleted : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\Extensions\{75623D5D-4683-402A-B610-AC4BAB767C86}
Folder Deleted : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\Extensions\{64d64833-9296-421b-a362-83cfbd6291b6}
Folder Deleted : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\Extensions\{d1b5aad5-d1ae-4b20-88b1-feeaeb4c1ebc}
[!] Folder Deleted : C:\Documents and Settings\Don\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk
[!] Folder Deleted : C:\Documents and Settings\Don\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\iekjmlcgpmcjigljdiagaibfjfaideal
File Deleted : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\Extensions\om@offermosquito.com.xpi
File Deleted : C:\END
File Deleted : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\searchplugins\Conduit.xml
File Deleted : C:\Program Files\Mozilla Firefox\browser\searchplugins\safeguard-secure-search.xml
File Deleted : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\searchplugins\search.xml
File Deleted : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\searchplugins\Surf-canyon.xml

***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Key Deleted : HKCU\Software\Google\Chrome\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk
Key Deleted : HKCU\Software\Google\Chrome\Extensions\iekjmlcgpmcjigljdiagaibfjfaideal
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\iekjmlcgpmcjigljdiagaibfjfaideal
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [DataMgr]
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Intermediate]
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [OMESupervisor]
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [scheck]
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Snoozer]
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ssync]
Key Deleted : HKCU\Toolbar
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\Toolbar.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.BandObject
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.BandObject.1
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.ToolbarHelperObject
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.ToolbarHelperObject.1
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3306061
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3307181
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ConduitFloatingPlugin_lipgolpfajiadodbcbljdpmbmbdmfcil]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{7E8A36EA-2501-4ED3-A3C8-CFA9143FB169}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1663C10B-0D55-438D-8496-19A3DBAEC0E4}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{82B16A3D-F03E-4565-A532-666B219C9A53}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{745D0A77-05CB-4FF3-BE77-48D888F06261}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D1B5AAD5-D1AE-4B20-88B1-FEEAEB4C1EBC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{24C1F23B-0796-4C3A-8E00-BAB4D876D4A9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1C888195-0160-4883-91B7-294C0CE2F277}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{99ACA0F7-D864-45CB-8C40-FD42A077E7CA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{82B16A3D-F03E-4565-A532-666B219C9A53}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D1B5AAD5-D1AE-4B20-88B1-FEEAEB4C1EBC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3BC93E76-92F8-5FDA-B676-5AFEE3735BF1}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82B16A3D-F03E-4565-A532-666B219C9A53}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82B16A3D-F03E-4565-A532-666B219C9A53}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3BC93E76-92F8-5FDA-B676-5AFEE3735BF1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{745D0A77-05CB-4FF3-BE77-48D888F06261}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{24C1F23B-0796-4C3A-8E00-BAB4D876D4A9}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3E39B99C-1E29-49CC-B122-0806CFF6DF8C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C24BE93A-0CAA-4E9C-8C9B-4F34161BB6F9}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{85F7F409-B0FC-4A81-8A3E-964A2437B0D4}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A4C88887-1F2A-4C1E-8FEF-913BAA1C766E}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{CCC7A320-B3CA-4199-B1A6-9F516DD69829}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D1B5AAD5-D1AE-4B20-88B1-FEEAEB4C1EBC}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{CCC7A320-B3CA-4199-B1A6-9F516DD69829}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{64D64833-9296-421B-A362-83CFBD6291B6}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{D1B5AAD5-D1AE-4B20-88B1-FEEAEB4C1EBC}]
Key Deleted : HKCU\Software\AVG SafeGuard toolbar
Key Deleted : HKCU\Software\CompeteInc
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\OfferMosquito
Key Deleted : HKCU\Software\Protector
Key Deleted : HKCU\Software\SmartBar
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\StartNow Toolbar
Key Deleted : HKCU\Software\YahooPartnerToolbar
Key Deleted : HKCU\Software\Zugo
Key Deleted : HKCU\Software\appmarket-
Key Deleted : HKCU\Software\Connect_DLC_5
Key Deleted : HKLM\Software\AVG SafeGuard toolbar
Key Deleted : HKLM\Software\AVG Security Toolbar
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\StartNow Toolbar
Key Deleted : HKLM\Software\Uniblue
Key Deleted : HKLM\Software\appmarket-
Key Deleted : HKLM\Software\Connect_DLC_5
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG SafeGuard toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AVG SafeGuard toolbar
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v27.0 (en-US)

[ File : C:\Documents and Settings\Don\Application Data\Mozilla\Firefox\Profiles\qw1r0fwn.default\prefs.js ]

Line Deleted : user_pref("CT3306061.FF19Solved", "true");
Line Deleted : user_pref("CT3306061.UserID", "UN22595155606712213");
Line Deleted : user_pref("CT3306061.browser.search.defaultthis.engineName", "true");
Line Deleted : user_pref("CT3306061.fullUserID", "UN22595155606712213.IN.20131215081505");
Line Deleted : user_pref("CT3306061.installDate", "15/12/2013 08:15:16");
Line Deleted : user_pref("CT3306061.installSessionId", "{6F382B8E-3A6E-440B-993B-4D220B21C8DE}");
Line Deleted : user_pref("CT3306061.installSp", "TRUE");
Line Deleted : user_pref("CT3306061.installUsage", "17/12/2013 10:41:32");
Line Deleted : user_pref("CT3306061.installUsageEarly", "17/12/2013 10:41:32");
Line Deleted : user_pref("CT3306061.installerVersion", "1.8.1.4");
Line Deleted : user_pref("CT3306061.keyword", "true");
Line Deleted : user_pref("CT3306061.originalHomepage", "hxxp://wisersearch.com/?channel=en");
Line Deleted : user_pref("CT3306061.originalSearchAddressUrl", "hxxp://wisersearch.com/search.php?channel=en&q=");
Line Deleted : user_pref("CT3306061.originalSearchEngine", "Search");
Line Deleted : user_pref("CT3306061.originalSearchEngineName", "Search");
Line Deleted : user_pref("CT3306061.searchRevert", "true");
Line Deleted : user_pref("CT3306061.searchUninstallUserMode", "2");
Line Deleted : user_pref("CT3306061.searchUserMode", "2");
Line Deleted : user_pref("CT3306061.smartbar.homepage", "true");
Line Deleted : user_pref("CT3306061.toolbarInstallDate", "15-12-2013 08:15:07");
Line Deleted : user_pref("CT3306061.versionFromInstaller", "10.23.0.722");
Line Deleted : user_pref("CT3306061.xpeMode", "0");
Line Deleted : user_pref("CT3307181.FF19Solved", "true");
Line Deleted : user_pref("CT3307181.UserID", "UN88013374125684216");
Line Deleted : user_pref("CT3307181.browser.search.defaultthis.engineName", "true");
Line Deleted : user_pref("CT3307181.fullUserID", "UN88013374125684216.IN.20131213140158");
Line Deleted : user_pref("CT3307181.installDate", "13/12/2013 14:02:10");
Line Deleted : user_pref("CT3307181.installSessionId", "{BE4373E3-36F3-4F40-8A4F-D245F5041EC3}");
Line Deleted : user_pref("CT3307181.installSp", "TRUE");
Line Deleted : user_pref("CT3307181.installerVersion", "1.8.1.4");
Line Deleted : user_pref("CT3307181.keyword", "true");
Line Deleted : user_pref("CT3307181.originalHomepage", "hxxps://www.google.com/");
Line Deleted : user_pref("CT3307181.originalSearchAddressUrl", "");
Line Deleted : user_pref("CT3307181.originalSearchEngine", "AVG Secure Search");
Line Deleted : user_pref("CT3307181.originalSearchEngineName", "AVG Secure Search");
Line Deleted : user_pref("CT3307181.searchRevert", "false");
Line Deleted : user_pref("CT3307181.searchUninstallUserMode", "2");
Line Deleted : user_pref("CT3307181.searchUserMode", "2");
Line Deleted : user_pref("CT3307181.smartbar.homepage", "true");
Line Deleted : user_pref("CT3307181.toolbarInstallDate", "13-12-2013 14:02:00");
Line Deleted : user_pref("CT3307181.versionFromInstaller", "10.23.0.722");
Line Deleted : user_pref("CT3307181.xpeMode", "0");
Line Deleted : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://wisersearch.com/search.php?channel=en&q=");
Line Deleted : user_pref("browser.search.defaultenginename", "Connect DLC 5 Customized Web Search");
Line Deleted : user_pref("browser.search.defaultthis.engineName", "Connect DLC 5 Customized Web Search");
Line Deleted : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3306061&CUI=UN22595155606712213&UM=2&SearchSource=3&q={searchTerms}");
Line Deleted : user_pref("browser.search.selectedEngine", "Connect DLC 5 Customized Web Search");
Line Deleted : user_pref("browser.startup.homepage", "hxxp://search.conduit.com/?ctid=CT3306061&CUI=UN22595155606712213&UM=2&SearchSource=13");
Line Deleted : user_pref("extensions.booly.shopping_supporteddoms", "amazon.co.uk,amazon.com,ebay.co.uk,ebay.com,groupon.co.uk,groupon.com,blackfriday,cybermonday,1-acp.com,1000bulbs.com,101inks.com,101phones.com,11[...]
Line Deleted : user_pref("extensions.ntk.HISTORY", "[{\"title\":\"Inbox (13) - dglockster@gmail.com - Gmail\",\"icon\":{\"spec\":\"moz-anno:favicon:hxxps://mail.google.com/favicon.ico\"},\"uri\":\"hxxps://mail.googl[...]
Line Deleted : user_pref("extensions.ntk.feedStore", "{\"URLtoFeedCount\":15,\"FeedStoriesCount\":-1,\"data\":[{\"uri\":\"hxxps://mail.google.com/mail/u/0/%3Fshva=1#inbox\",\"feed\":null,\"stories\":null},{\"uri\":\[...]
Line Deleted : user_pref("extensions.ntk.ntk_dragged_pos", "<table class=\"speed\" cellpadding=\"0\" cellspacing=\"0\"><tbody><tr><td href=\"hxxps://mail.google.com/mail/u/0/?shva=1#inbox\" style=\"padding-bottom:10[...]
Line Deleted : user_pref("extensions.ntk.recentClosedPers", "hxxps://www.google.com/search?q=verbiage+definition::<html><head></head><body>verbiage definition - Google Search</body></html>;hxxp://www.dailywritingtip[...]
Line Deleted : user_pref("extensions.ntk.thumbsUrls", "hxxps://mail.google.com/mail/u/0/?shva=1#inbox;hxxp://www.google.com/ig?hl=en;hxxps://accounts.google.com/Logout?service=mail&continue=hxxps://accounts.google.c[...]
Line Deleted : user_pref("extensions.xnotifier.accounts.[gmail#bluetracewatch@gmail.com].inboxOnly", true);
Line Deleted : user_pref("extensions.xnotifier.accounts.[gmail#dglockster@gmail.com].inboxOnly", true);
Line Deleted : user_pref("extensions.xnotifier.accounts.[gmail#dr.dsmith@gmail.com].inboxOnly", true);
Line Deleted : user_pref("extensions.xnotifier.accounts.[gmail#fbcopliaison@gmail.com].inboxOnly", true);
Line Deleted : user_pref("extensions.xnotifier.accounts.[gmail#fbcopteam1@gmail.com].inboxOnly", true);
Line Deleted : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3306061&SearchSource=2&CUI=UN22595155606712213&UM=2&q=");
Line Deleted : user_pref("om.config", "{\"active\":true,\"name\":\"october2013\",\"id\":35,\"dispId\":\"CH-35\",\"aboutLink\":\"\",\"trackingGeneral\":true,\"xhrDomains\":[\"become\",\"shopzilla\",\"twenga\",\"bizra[...]
Line Deleted : user_pref("simplenewtab.url", "hxxp://wisersearch.com/?channel=en_nt");
Line Deleted : user_pref("smartbar.addressBarOwnerCTID", "CT3306061");
Line Deleted : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3307181&CUI=UN88013374125684216&UM=2&SearchSource=13,hxxp://search.conduit.com/?ctid=CT3306061&CUI=UN22595155606712213&UM=2[...]
Line Deleted : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3307181&SearchSource=2&CUI=UN88013374125684216&UM=2&q=,hxxp://search.conduit.com/ResultsExt.aspx?cti[...]
Line Deleted : user_pref("smartbar.defaultSearchOwnerCTID", "CT3306061");
Line Deleted : user_pref("smartbar.homePageOwnerCTID", "CT3306061");
Line Deleted : user_pref("smartbar.machineId", "GRGBCKG+0CGYPIYEJJABQ3V3O6XTYSKFO3FTGTWACYAHKWDPWLE7PRU/SXMPRBDLI8WS/QIGFO/3GVLBAXJ+PA");
Line Deleted : user_pref("surfcanyon.added_to_searchbar", true);
Line Deleted : user_pref("surfcanyon.chummo_enabled", false);
Line Deleted : user_pref("surfcanyon.daily_code", "scIsOnSearchEngineDomain = function() {\nreturn contains(scCurrentPageDomain, '.surfcanyon.') || contains(scCurrentPageDomain, '.google.') || contains(scCurrentPage[...]
Line Deleted : user_pref("surfcanyon.daily_code_timestamp", "1322917030730");
Line Deleted : user_pref("surfcanyon.dynamic_preferences_timestamp", "1387288492447");
Line Deleted : user_pref("surfcanyon.google_search_button_click_query", "google+phonebook:+9037831699");
Line Deleted : user_pref("surfcanyon.google_search_button_click_ts", "1309877826175");
Line Deleted : user_pref("surfcanyon.hourly_code", "scHourlyCodeRevision = '337r';\nscGetDocument = function() {\nreturn scIsFF ? content.document : document;\n};\n\nscExtractUrlFromSpanTag = function(spanTag) {\nva[...]
Line Deleted : user_pref("surfcanyon.hourly_code2", "scEnableGoogle_hourly = function() {\nvar args = window.location.search;\nvar path = window.location.pathname;\nvar isGoogleSearchDomain = (contains(scCurrentPage[...]
Line Deleted : user_pref("surfcanyon.hourly_code_timestamp", "1342533670675");
Line Deleted : user_pref("surfcanyon.hover_overlay_enabled", false);
Line Deleted : user_pref("surfcanyon.initialized_chummo", false);
Line Deleted : user_pref("surfcanyon.initialized_search_bar", false);
Line Deleted : user_pref("surfcanyon.inst_id", "1501284431329441638486899665189267");
Line Deleted : user_pref("surfcanyon.inst_timestamp", "1281652820431");
Line Deleted : user_pref("surfcanyon.last_notification_displayed", 2);
Line Deleted : user_pref("surfcanyon.last_seen_splash", "343");
Line Deleted : user_pref("surfcanyon.no_searchbar_global", false);
Line Deleted : user_pref("surfcanyon.num_recs_clicked", "339");
Line Deleted : user_pref("surfcanyon.num_results_clicked", "2787");
Line Deleted : user_pref("surfcanyon.num_results_clicked_when_recs_available", "1128");
Line Deleted : user_pref("surfcanyon.num_searches", "2345");
Line Deleted : user_pref("surfcanyon.page_notifications_cancelled", true);
Line Deleted : user_pref("surfcanyon.partner_code", "MZ");
Line Deleted : user_pref("surfcanyon.recs_notifications_cancelled", true);
Line Deleted : user_pref("surfcanyon.refinements_cache", "frankford arsenal reloading scale review/^glucosamine sulphate (sulfate) vs glucosamine hydrochloride/^picatinny savage accutrigger sa/^return of the native/[...]
Line Deleted : user_pref("surfcanyon.retailer_domain", "");
Line Deleted : user_pref("surfcanyon.retailer_id", "");
Line Deleted : user_pref("surfcanyon.retailer_url", "");
Line Deleted : user_pref("surfcanyon.search_bar_enabled", false);
Line Deleted : user_pref("surfcanyon.searchbar_right_offsets", false);
Line Deleted : user_pref("surfcanyon.searchbar_zindexes", false);
Line Deleted : user_pref("surfcanyon.server_error_time", "1385603639099");
Line Deleted : user_pref("surfcanyon.server_error_url", "hxxps://www.surfcanyon.com/search/refresh?ssMapKey=wwwgooglecombudsguns&instId=1501284431329441638486899665189267&extensionVersion=3.4.3");
Line Deleted : user_pref("surfcanyon.ss_page_links_enabled", false);
Line Deleted : user_pref("{5911488E-9D1E-40ec-8CBB-06B231CC153F}.name", "StartNow Toolbar");
Line Deleted : user_pref("{5911488E-9D1E-40ec-8CBB-06B231CC153F}.startpage", "pos.startnow.com");

[ File : C:\Documents and Settings\Karen\Application Data\Mozilla\Firefox\Profiles\ppo36kak.default\prefs.js ]

Line Deleted : user_pref("browser.search.defaultenginename", "AVG Secure Search");
Line Deleted : user_pref("browser.search.selectedEngine", "AVG Secure Search");
Line Deleted : user_pref("extensions.wrc.SearchRules.ask.com.style", ".WRCN {display:none} #yui-main .tsrc_vnru .title + .WRCN, #yui-main #teoma-results .title + .WRCN {display:inline !important; background: url(\"I[...]
Line Deleted : user_pref("extensions.wrc.SearchRules.ask.com.url", "^hxxp(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*");

*************************

AdwCleaner[R0].txt - [7224 octets] - [10/12/2013 13:33:07]
AdwCleaner[R1].txt - [24750 octets] - [15/12/2013 08:16:17]
AdwCleaner[R2].txt - [25323 octets] - [17/12/2013 10:41:10]
AdwCleaner[S0].txt - [25286 octets] - [17/12/2013 10:43:43]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [25347 octets] ##########


I will not run OTL until I read your reply.

Thanks,
Don

[DonnaB]

Hi Don,

My apologies for the delay in responding. It also appears that my connection is suffering here lately from last minute online shoppers or else we have some really bad weather headed my way. I have a satellite connection that gets really flaky when I need it the most!

Did that get rid of wisesearch for you?

Please go ahead and run the OTL scan as requested so I can see what leftovers might need to be tended to.

Thank you,
Donna