Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Support
Windows Malware Removal Help & Support
Need assistance removing dllhost*32.exe com surrogate.
Message
<blockquote data-quote="Donald" data-source="post: 307556" data-attributes="member: 31277"><p># AdwCleaner v4.102 - Report created 29/11/2014 at 19:00:43</p><p># Updated 23/11/2014 by Xplode</p><p># Database : 2014-11-27.1 [Live]</p><p># Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)</p><p># Username : OWNER - OWNER-PC</p><p># Running from : C:\Users\OWNER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\31GN13RB\AdwCleaner.exe</p><p># Option : Scan</p><p>***** [ Services ] *****</p><p></p><p>***** [ Files / Folders ] *****</p><p>File Found : C:\END</p><p>File Found : C:\Users\OWNER\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_<a href="http://www.superfish.com_0.localstorage" target="_blank">www.superfish.com_0.localstorage</a></p><p>Folder Found : C:\Program Files (x86)\Brand Affinity Technologies</p><p>Folder Found : C:\Program Files (x86)\GouSave</p><p>Folder Found : C:\Program Files (x86)\YoueTTubeAdBlockea</p><p>Folder Found : C:\ProgramData\87ec99365518d1e1</p><p>Folder Found : C:\ProgramData\apn</p><p>Folder Found : C:\ProgramData\GouSave</p><p>Folder Found : C:\ProgramData\PC Optimizer Pro</p><p>Folder Found : C:\ProgramData\Tarma Installer</p><p>Folder Found : C:\ProgramData\Trusted Publisher</p><p>Folder Found : C:\ProgramData\Trymedia</p><p>Folder Found : C:\ProgramData\YoueTTubeAdBlockea</p><p>Folder Found : C:\Users\Administrator\AppData\Local\Chromatic Browser</p><p>Folder Found : C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gohmejhdcimcnfiafifkhbmginobcjjd</p><p>Folder Found : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\gohmejhdcimcnfiafifkhbmginobcjjd</p><p>Folder Found : C:\Users\Administrator\AppData\Local\torch</p><p>Folder Found : C:\Users\Clint\AppData\Local\Chromatic Browser</p><p>Folder Found : C:\Users\Clint\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gohmejhdcimcnfiafifkhbmginobcjjd</p><p>Folder Found : C:\Users\Clint\AppData\Local\Google\Chrome\User Data\Default\Extensions\gohmejhdcimcnfiafifkhbmginobcjjd</p><p>Folder Found : C:\Users\Clint\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk</p><p>Folder Found : C:\Users\Clint\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohgcjecomkebbohfjgmncelbhogbbokf</p><p>Folder Found : C:\Users\Clint\AppData\Local\torch</p><p>Folder Found : C:\Users\Clint\AppData\Local\visi_coupon</p><p>Folder Found : C:\Users\Clint\AppData\LocalLow\visi_coupon</p><p>Folder Found : C:\Users\Don\AppData\LocalLow\visi_coupon</p><p>Folder Found : C:\Users\Guest\AppData\Local\Chromatic Browser</p><p>Folder Found : C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gohmejhdcimcnfiafifkhbmginobcjjd</p><p>Folder Found : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\gohmejhdcimcnfiafifkhbmginobcjjd</p><p>Folder Found : C:\Users\Guest\AppData\Local\torch</p><p>Folder Found : C:\Users\HomeGroupUser$\AppData\Local\Chromatic Browser</p><p>Folder Found : C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gohmejhdcimcnfiafifkhbmginobcjjd</p><p>Folder Found : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\gohmejhdcimcnfiafifkhbmginobcjjd</p><p>Folder Found : C:\Users\HomeGroupUser$\AppData\Local\torch</p><p>Folder Found : C:\Users\OWNER\AppData\Local\Chromatic Browser</p><p>Folder Found : C:\Users\OWNER\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gohmejhdcimcnfiafifkhbmginobcjjd</p><p>Folder Found : C:\Users\OWNER\AppData\Local\Conduit</p><p>Folder Found : C:\Users\OWNER\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc</p><p>Folder Found : C:\Users\OWNER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gohmejhdcimcnfiafifkhbmginobcjjd</p><p>Folder Found : C:\Users\OWNER\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk</p><p>Folder Found : C:\Users\OWNER\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohgcjecomkebbohfjgmncelbhogbbokf</p><p>Folder Found : C:\Users\OWNER\AppData\Local\NativeMessaging</p><p>Folder Found : C:\Users\OWNER\AppData\Local\torch</p><p>Folder Found : C:\Users\OWNER\AppData\Local\visi_coupon</p><p>Folder Found : C:\Users\OWNER\AppData\LocalLow\Conduit</p><p>Folder Found : C:\Users\OWNER\AppData\LocalLow\visi_coupon</p><p>Folder Found : C:\Users\OWNER\AppData\Roaming\EZDownloader</p><p>Folder Found : C:\Users\OWNER\AppData\Roaming\SkypEmoticons</p><p>***** [ Scheduled Tasks ] *****</p><p></p><p>***** [ Shortcuts ] *****</p><p></p><p>***** [ Registry ] *****</p><p>Key Found : HKCU\Software\APN PIP</p><p>Key Found : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}</p><p>Key Found : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}</p><p>Key Found : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}</p><p>Key Found : HKCU\Software\AppDataLow\Software\Conduit</p><p>Key Found : HKCU\Software\AppDataLow\Software\SmartBar</p><p>Key Found : HKCU\Software\AppDataLow\Software\Smartbar</p><p>Key Found : HKCU\Software\AppDataLow\Software\Toolbar</p><p>Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{03D4D6B4-9E9D-41F1-BCE8-85668C7EC2E1}</p><p>Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2E0D06B3-0545-4455-9F73-772462008EFA}</p><p>Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{42E0D59F-0C8A-4C09-A019-FC7CA49246F2}</p><p>Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}</p><p>Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}</p><p>Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}</p><p>Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}</p><p>Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}</p><p>Key Found : HKCU\Software\pc optimizer pro</p><p>Key Found : [x64] HKCU\Software\APN PIP</p><p>Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{03D4D6B4-9E9D-41F1-BCE8-85668C7EC2E1}</p><p>Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2E0D06B3-0545-4455-9F73-772462008EFA}</p><p>Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{42E0D59F-0C8A-4C09-A019-FC7CA49246F2}</p><p>Key Found : [x64] HKCU\Software\pc optimizer pro</p><p>Key Found : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}</p><p>Key Found : HKLM\SOFTWARE\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}</p><p>Key Found : HKLM\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252}</p><p>Key Found : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}</p><p>Key Found : HKLM\SOFTWARE\Classes\AppID\secman.DLL</p><p>Key Found : HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}</p><p>Key Found : HKLM\SOFTWARE\Classes\CLSID\{058F0E48-61CA-4964-9FBA-1978A1BB060D}</p><p>Key Found : HKLM\SOFTWARE\Classes\CLSID\{058F0E48-61CA-4964-9FBA-1978A1BB060D}</p><p>Key Found : HKLM\SOFTWARE\Classes\CLSID\{18F33C35-8EF2-40D7-8BA4-932B0121B472}</p><p>Key Found : HKLM\SOFTWARE\Classes\CLSID\{18F33C35-8EF2-40D7-8BA4-932B0121B472}</p><p>Key Found : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}</p><p>Key Found : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}</p><p>Key Found : HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}</p><p>Key Found : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}</p><p>Key Found : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}</p><p>Key Found : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager</p><p>Key Found : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1</p><p>Key Found : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}</p><p>Key Found : HKLM\SOFTWARE\Conduit</p><p>Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\ohgcjecomkebbohfjgmncelbhogbbokf</p><p>Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}</p><p>Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}</p><p>Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}</p><p>Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}</p><p>Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C87834EB-A2A0-B9D4-AA9A-C263D1191051}</p><p>Key Found : HKLM\SOFTWARE\PIP</p><p>Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}</p><p>Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}</p><p>Key Found : [x64] HKLM\SOFTWARE\Tarma Installer</p><p>Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]</p><p>***** [ Browsers ] *****</p><p>-\\ Internet Explorer v11.0.9600.17420</p><p></p><p>-\\ Google Chrome v</p><p>[C:\Users\Clint\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : dhdepfaagokllfmhfbcfmocaeigmoebo</p><p>[C:\Users\Clint\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : fbmimoidopbghbcmdmpkjaffffmcbmbg</p><p>[C:\Users\Clint\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : hphibigbodkkohoglgfkddblldpfohjl</p><p>[C:\Users\Clint\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : kdcnnmifdmlmjffdgeieikcokcogpbej</p><p>[C:\Users\Clint\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : kincjchfokkeneeofpeefomkikfkiedl</p><p>[C:\Users\Clint\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : kkkeikdkpjenmoiicggnnodbkebafgpc</p><p>[C:\Users\Clint\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : ohgcjecomkebbohfjgmncelbhogbbokf</p><p>[C:\Users\Clint\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : pgmfkblbflahhponhjmkcnpjinenhlnc</p><p>[C:\Users\Clint\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : geggofhlfbcmanadhknllmlajiafopoh</p><p>[C:\Users\Clint\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : gohmejhdcimcnfiafifkhbmginobcjjd</p><p>[C:\Users\Clint\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : mkfokfffehpeedafpekjeddnmnjhmcmk</p><p>[C:\Users\OWNER\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&CUI=UN28591793243283753&ctid=CT3298580&UM=2</p><p>[C:\Users\OWNER\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&CUI=UN28591793243283753&ctid=CT3298580&UM=2</p><p>[C:\Users\OWNER\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}</p><p>[C:\Users\OWNER\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://<a href="http://www.ask.com/web?q={searchTerms}" target="_blank">www.ask.com/web?q={searchTerms}</a></p><p>[C:\Users\OWNER\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://search.conduit.com/Results.aspx?gd=&ctid=CT3319597&octid=EB_ORIGINAL_CTID&ISID=MDF2C7FAA-B6A1-4B74-9250-A09C9F5CBBA6&SearchSource=58&CUI=&UM=5&UP=SPDF421F51-DB1D-4E7F-949F-8C0F59A0436E&q={searchTerms}&SSPV=</p><p>[C:\Users\OWNER\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://search.conduit.com/Results.aspx?gd=&ctid=CT3319597&octid=EB_ORIGINAL_CTID&ISID=MDF2C7FAA-B6A1-4B74-9250-A09C9F5CBBA6&SearchSource=58&CUI=&UM=5&UP=SPDF421F51-DB1D-4E7F-949F-8C0F59A0436E&q={searchTerms}&SSPV=</p><p>[C:\Users\OWNER\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://websearch.searchandfly.info/?l=1&q={searchTerms}&pid=2729&r=2014/09/24&hid=16959563453882554018&lg=EN&cc=US&unqvl=62</p><p>-\\ Comodo Dragon v</p><p></p><p>*************************</p><p>AdwCleaner[R0].txt - [11650 octets] - [29/11/2014 19:00:43]</p><p>########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [11711 octets] ##########</p></blockquote><p></p>
[QUOTE="Donald, post: 307556, member: 31277"] # AdwCleaner v4.102 - Report created 29/11/2014 at 19:00:43 # Updated 23/11/2014 by Xplode # Database : 2014-11-27.1 [Live] # Operating System : Windows 7 Home Premium Service Pack 1 (64 bits) # Username : OWNER - OWNER-PC # Running from : C:\Users\OWNER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\31GN13RB\AdwCleaner.exe # Option : Scan ***** [ Services ] ***** ***** [ Files / Folders ] ***** File Found : C:\END File Found : C:\Users\OWNER\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_[url="http://www.superfish.com_0.localstorage"]www.superfish.com_0.localstorage[/url] Folder Found : C:\Program Files (x86)\Brand Affinity Technologies Folder Found : C:\Program Files (x86)\GouSave Folder Found : C:\Program Files (x86)\YoueTTubeAdBlockea Folder Found : C:\ProgramData\87ec99365518d1e1 Folder Found : C:\ProgramData\apn Folder Found : C:\ProgramData\GouSave Folder Found : C:\ProgramData\PC Optimizer Pro Folder Found : C:\ProgramData\Tarma Installer Folder Found : C:\ProgramData\Trusted Publisher Folder Found : C:\ProgramData\Trymedia Folder Found : C:\ProgramData\YoueTTubeAdBlockea Folder Found : C:\Users\Administrator\AppData\Local\Chromatic Browser Folder Found : C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gohmejhdcimcnfiafifkhbmginobcjjd Folder Found : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\gohmejhdcimcnfiafifkhbmginobcjjd Folder Found : C:\Users\Administrator\AppData\Local\torch Folder Found : C:\Users\Clint\AppData\Local\Chromatic Browser Folder Found : C:\Users\Clint\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gohmejhdcimcnfiafifkhbmginobcjjd Folder Found : C:\Users\Clint\AppData\Local\Google\Chrome\User Data\Default\Extensions\gohmejhdcimcnfiafifkhbmginobcjjd Folder Found : C:\Users\Clint\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk Folder Found : C:\Users\Clint\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohgcjecomkebbohfjgmncelbhogbbokf Folder Found : C:\Users\Clint\AppData\Local\torch Folder Found : C:\Users\Clint\AppData\Local\visi_coupon Folder Found : C:\Users\Clint\AppData\LocalLow\visi_coupon Folder Found : C:\Users\Don\AppData\LocalLow\visi_coupon Folder Found : C:\Users\Guest\AppData\Local\Chromatic Browser Folder Found : C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gohmejhdcimcnfiafifkhbmginobcjjd Folder Found : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\gohmejhdcimcnfiafifkhbmginobcjjd Folder Found : C:\Users\Guest\AppData\Local\torch Folder Found : C:\Users\HomeGroupUser$\AppData\Local\Chromatic Browser Folder Found : C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gohmejhdcimcnfiafifkhbmginobcjjd Folder Found : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\gohmejhdcimcnfiafifkhbmginobcjjd Folder Found : C:\Users\HomeGroupUser$\AppData\Local\torch Folder Found : C:\Users\OWNER\AppData\Local\Chromatic Browser Folder Found : C:\Users\OWNER\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gohmejhdcimcnfiafifkhbmginobcjjd Folder Found : C:\Users\OWNER\AppData\Local\Conduit Folder Found : C:\Users\OWNER\AppData\Local\Google\Chrome\User Data\Default\Extensions\faoigfclahgbjjjaopddafnnapmeppnc Folder Found : C:\Users\OWNER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gohmejhdcimcnfiafifkhbmginobcjjd Folder Found : C:\Users\OWNER\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk Folder Found : C:\Users\OWNER\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohgcjecomkebbohfjgmncelbhogbbokf Folder Found : C:\Users\OWNER\AppData\Local\NativeMessaging Folder Found : C:\Users\OWNER\AppData\Local\torch Folder Found : C:\Users\OWNER\AppData\Local\visi_coupon Folder Found : C:\Users\OWNER\AppData\LocalLow\Conduit Folder Found : C:\Users\OWNER\AppData\LocalLow\visi_coupon Folder Found : C:\Users\OWNER\AppData\Roaming\EZDownloader Folder Found : C:\Users\OWNER\AppData\Roaming\SkypEmoticons ***** [ Scheduled Tasks ] ***** ***** [ Shortcuts ] ***** ***** [ Registry ] ***** Key Found : HKCU\Software\APN PIP Key Found : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9} Key Found : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B} Key Found : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B} Key Found : HKCU\Software\AppDataLow\Software\Conduit Key Found : HKCU\Software\AppDataLow\Software\SmartBar Key Found : HKCU\Software\AppDataLow\Software\Smartbar Key Found : HKCU\Software\AppDataLow\Software\Toolbar Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{03D4D6B4-9E9D-41F1-BCE8-85668C7EC2E1} Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2E0D06B3-0545-4455-9F73-772462008EFA} Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{42E0D59F-0C8A-4C09-A019-FC7CA49246F2} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88} Key Found : HKCU\Software\pc optimizer pro Key Found : [x64] HKCU\Software\APN PIP Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{03D4D6B4-9E9D-41F1-BCE8-85668C7EC2E1} Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2E0D06B3-0545-4455-9F73-772462008EFA} Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{42E0D59F-0C8A-4C09-A019-FC7CA49246F2} Key Found : [x64] HKCU\Software\pc optimizer pro Key Found : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0} Key Found : HKLM\SOFTWARE\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9} Key Found : HKLM\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252} Key Found : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56} Key Found : HKLM\SOFTWARE\Classes\AppID\secman.DLL Key Found : HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Key Found : HKLM\SOFTWARE\Classes\CLSID\{058F0E48-61CA-4964-9FBA-1978A1BB060D} Key Found : HKLM\SOFTWARE\Classes\CLSID\{058F0E48-61CA-4964-9FBA-1978A1BB060D} Key Found : HKLM\SOFTWARE\Classes\CLSID\{18F33C35-8EF2-40D7-8BA4-932B0121B472} Key Found : HKLM\SOFTWARE\Classes\CLSID\{18F33C35-8EF2-40D7-8BA4-932B0121B472} Key Found : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Key Found : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556} Key Found : HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88} Key Found : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Key Found : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE} Key Found : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager Key Found : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1 Key Found : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994} Key Found : HKLM\SOFTWARE\Conduit Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\ohgcjecomkebbohfjgmncelbhogbbokf Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291} Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670} Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88} Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C87834EB-A2A0-B9D4-AA9A-C263D1191051} Key Found : HKLM\SOFTWARE\PIP Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE} Key Found : [x64] HKLM\SOFTWARE\Tarma Installer Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EF99BD32-C1FB-11D2-892F-0090271D4F88}] ***** [ Browsers ] ***** -\\ Internet Explorer v11.0.9600.17420 -\\ Google Chrome v [C:\Users\Clint\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : dhdepfaagokllfmhfbcfmocaeigmoebo [C:\Users\Clint\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : fbmimoidopbghbcmdmpkjaffffmcbmbg [C:\Users\Clint\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : hphibigbodkkohoglgfkddblldpfohjl [C:\Users\Clint\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : kdcnnmifdmlmjffdgeieikcokcogpbej [C:\Users\Clint\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : kincjchfokkeneeofpeefomkikfkiedl [C:\Users\Clint\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : kkkeikdkpjenmoiicggnnodbkebafgpc [C:\Users\Clint\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : ohgcjecomkebbohfjgmncelbhogbbokf [C:\Users\Clint\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : pgmfkblbflahhponhjmkcnpjinenhlnc [C:\Users\Clint\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : geggofhlfbcmanadhknllmlajiafopoh [C:\Users\Clint\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : gohmejhdcimcnfiafifkhbmginobcjjd [C:\Users\Clint\AppData\Local\Google\Chrome\User Data\Default\preferences] - Found [Extension] : mkfokfffehpeedafpekjeddnmnjhmcmk [C:\Users\OWNER\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&CUI=UN28591793243283753&ctid=CT3298580&UM=2 [C:\Users\OWNER\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&CUI=UN28591793243283753&ctid=CT3298580&UM=2 [C:\Users\OWNER\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms} [C:\Users\OWNER\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://[url="http://www.ask.com/web?q={searchTerms}"]www.ask.com/web?q={searchTerms}[/url] [C:\Users\OWNER\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://search.conduit.com/Results.aspx?gd=&ctid=CT3319597&octid=EB_ORIGINAL_CTID&ISID=MDF2C7FAA-B6A1-4B74-9250-A09C9F5CBBA6&SearchSource=58&CUI=&UM=5&UP=SPDF421F51-DB1D-4E7F-949F-8C0F59A0436E&q={searchTerms}&SSPV= [C:\Users\OWNER\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://search.conduit.com/Results.aspx?gd=&ctid=CT3319597&octid=EB_ORIGINAL_CTID&ISID=MDF2C7FAA-B6A1-4B74-9250-A09C9F5CBBA6&SearchSource=58&CUI=&UM=5&UP=SPDF421F51-DB1D-4E7F-949F-8C0F59A0436E&q={searchTerms}&SSPV= [C:\Users\OWNER\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://websearch.searchandfly.info/?l=1&q={searchTerms}&pid=2729&r=2014/09/24&hid=16959563453882554018&lg=EN&cc=US&unqvl=62 -\\ Comodo Dragon v ************************* AdwCleaner[R0].txt - [11650 octets] - [29/11/2014 19:00:43] ########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [11711 octets] ########## [/QUOTE]
Insert quotes…
Verification
Post reply
Top