Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Support
Windows Malware Removal Help & Support
Police e-Crime Unit
Message
<blockquote data-quote="jamespev" data-source="post: 144751" data-attributes="member: 15000"><p>FRST Report </p><p></p><p>Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 18-11-2013</p><p>Ran by Peverley at 2013-11-20 09:35:38 Run:5</p><p>Running from C:\Users\Peverley\Downloads</p><p>Boot Mode: Normal</p><p>==============================================</p><p></p><p>Content of fixlist:</p><p>*****************</p><p>BHO-x32: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo Layers Client\YontooIEClient.dll (Yontoo LLC)</p><p>C:\Program Files (x86)\Yontoo Layers Client</p><p>cmd: netsh winsock reset</p><p>CHR HKLM-x32\...\Chrome\Extension: [ejpbbhjlbipncjklfjjaedaieimbmdda] - C:\Users\Peverley\AppData\Local\CRE\ejpbbhjlbipncjklfjjaedaieimbmdda.crx</p><p>C:\Users\Peverley\AppData\Local\CRE\ejpbbhjlbipncjklfjjaedaieimbmdda.crx</p><p>CHR Extension: (entrusted) - C:\Users\Peverley\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdfbddbdpnahdahmamlolacimfdbeckk\10.14.370.25_0</p><p>C:\Users\Peverley\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdfbddbdpnahdahmamlolacimfdbeckk</p><p>CHR HKLM-x32\...\Chrome\Extension: [mhfdcmehmjcclgopdodkjdicohagipid] - C:\Users\Peverley\AppData\Local\CRE\mhfdcmehmjcclgopdodkjdicohagipid.crx</p><p>C:\Users\Peverley\AppData\Local\CRE\mhfdcmehmjcclgopdodkjdicohagipid.crx</p><p>C:\Users\Peverley\AppData\Local\Google\Desktop\Install</p><p>cmd: ipconfig /flushdns</p><p>*****************</p><p></p><p>HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8} => Key deleted successfully.</p><p>HKCR\Wow6432Node\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8} => Key deleted successfully.</p><p>C:\Program Files (x86)\Yontoo Layers Client => Moved successfully.</p><p></p><p>========= netsh winsock reset =========</p><p></p><p></p><p>Sucessfully reset the Winsock Catalog.</p><p>You must restart the computer in order to complete the reset.</p><p></p><p></p><p>========= End of CMD: =========</p><p></p><p>HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda => Key deleted successfully.</p><p>"C:\Users\Peverley\AppData\Local\CRE\ejpbbhjlbipncjklfjjaedaieimbmdda.crx" => File/Directory not found.</p><p>"C:\Users\Peverley\AppData\Local\CRE\ejpbbhjlbipncjklfjjaedaieimbmdda.crx" => File/Directory not found.</p><p>C:\Users\Peverley\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdfbddbdpnahdahmamlolacimfdbeckk => Moved successfully.</p><p>"C:\Users\Peverley\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdfbddbdpnahdahmamlolacimfdbeckk" => File/Directory not found.</p><p>HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\mhfdcmehmjcclgopdodkjdicohagipid => Key deleted successfully.</p><p>C:\Users\Peverley\AppData\Local\CRE\mhfdcmehmjcclgopdodkjdicohagipid.crx => Moved successfully.</p><p>"C:\Users\Peverley\AppData\Local\CRE\mhfdcmehmjcclgopdodkjdicohagipid.crx" => File/Directory not found.</p><p>C:\Users\Peverley\AppData\Local\Google\Desktop\Install => Moved successfully.</p><p></p><p>========= ipconfig /flushdns =========</p><p></p><p></p><p>Windows IP Configuration</p><p></p><p>Successfully flushed the DNS Resolver Cache.</p><p></p><p>========= End of CMD: =========</p><p></p><p></p><p>==== End of Fixlog ====</p><p></p><p>Adwcleaner report</p><p></p><p># AdwCleaner v3.012 - Report created 20/11/2013 at 09:39:19</p><p># Updated 11/11/2013 by Xplode</p><p># Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)</p><p># Username : Peverley - PEVERLEY-PC</p><p># Running from : C:\Users\Peverley\Downloads\adwcleaner.exe</p><p># Option : Clean</p><p></p><p>***** [ Services ] *****</p><p></p><p>[#] Service Deleted : vToolbarUpdater11.2.0</p><p></p><p>***** [ Files / Folders ] *****</p><p></p><p>Folder Deleted : C:\ProgramData\AVG Secure Search</p><p>Folder Deleted : C:\ProgramData\Babylon</p><p>Folder Deleted : C:\ProgramData\BonanzaDealsLive</p><p>Folder Deleted : C:\ProgramData\DSearchLink</p><p>Folder Deleted : C:\ProgramData\Partner</p><p>Folder Deleted : C:\ProgramData\Systweak</p><p>Folder Deleted : C:\Program Files (x86)\AVG Secure Search</p><p>Folder Deleted : C:\Program Files (x86)\BonanzaDeals</p><p>Folder Deleted : C:\Program Files (x86)\BonanzaDealsLive</p><p>Folder Deleted : C:\Program Files (x86)\Conduit</p><p>Folder Deleted : C:\Program Files (x86)\MyPC Backup</p><p>Folder Deleted : C:\Users\Peverley\AppData\Local\AVG Secure Search</p><p>Folder Deleted : C:\Users\Peverley\AppData\Local\BonanzaDealsLive</p><p>Folder Deleted : C:\Users\Peverley\AppData\Local\Conduit</p><p>Folder Deleted : C:\Users\Peverley\AppData\Local\Discount Buddy </p><p>Folder Deleted : C:\Users\Peverley\AppData\Local\Ilivid Player</p><p>Folder Deleted : C:\Users\Peverley\AppData\Local\PackageAware</p><p>Folder Deleted : C:\Users\Peverley\AppData\LocalLow\AVG Secure Search</p><p>Folder Deleted : C:\Users\Peverley\AppData\LocalLow\AVG Security Toolbar</p><p>Folder Deleted : C:\Users\Peverley\AppData\LocalLow\Conduit</p><p>Folder Deleted : C:\Users\Peverley\AppData\LocalLow\Doko-Toolbar</p><p>Folder Deleted : C:\Users\Peverley\AppData\LocalLow\facemoods.com</p><p>Folder Deleted : C:\Users\Peverley\AppData\LocalLow\PriceGong</p><p>Folder Deleted : C:\Users\Peverley\AppData\Roaming\Babylon</p><p>Folder Deleted : C:\Users\Peverley\AppData\Roaming\OpenCandy</p><p>Folder Deleted : C:\Users\Peverley\AppData\Roaming\Systweak</p><p>Folder Deleted : C:\Users\Peverley\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhfdcmehmjcclgopdodkjdicohagipid</p><p>File Deleted : C:\Windows\System32\roboot64.exe</p><p>File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\fcmdSrch.xml</p><p>File Deleted : C:\Users\Peverley\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage</p><p>File Deleted : C:\Users\Peverley\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_app.mam.conduit.com_0.localstorage-journal</p><p></p><p>***** [ Shortcuts ] *****</p><p></p><p>Shortcut Disinfected : C:\Users\Peverley\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk</p><p></p><p>***** [ Registry ] *****</p><p></p><p>Key Deleted : HKCU\Software\Google\Chrome\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda</p><p>Key Deleted : HKCU\Software\Google\Chrome\Extensions\mhfdcmehmjcclgopdodkjdicohagipid</p><p>Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE</p><p>Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL</p><p>Key Deleted : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL</p><p>Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe</p><p>Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr</p><p>Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1</p><p>Key Deleted : HKLM\SOFTWARE\Classes\driverscanner</p><p>Key Deleted : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr</p><p>Key Deleted : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr.1</p><p>Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap</p><p>Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol</p><p>Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi</p><p>Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1</p><p>Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE</p><p>Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1</p><p>Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api</p><p>Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1</p><p>Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32</p><p>Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS</p><p>Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASAPI32</p><p>Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASMANCS</p><p>Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker-1_RASAPI32</p><p>Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker-1_RASMANCS</p><p>Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32</p><p>Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs</p><p>Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32</p><p>Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs</p><p>Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32</p><p>Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS</p><p>Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASAPI32</p><p>Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASMANCS</p><p>Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASAPI32</p><p>Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASMANCS</p><p>Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32</p><p>Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS</p><p>Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32</p><p>Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS</p><p>Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin</p><p>Key Deleted : HKLM\SOFTWARE\5d6dbdde568ea47</p><p>Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3220468</p><p>Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3281675</p><p>Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9AFB8248-617F-460D-9366-D71CDEDA3179}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}</p><p>Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}</p><p>Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}</p><p>Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}</p><p>Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}</p><p>Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}</p><p>Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F25AF245-4A81-40DC-92F9-E9021F207706}</p><p>Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}</p><p>Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}</p><p>Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}</p><p>Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}</p><p>Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}</p><p>Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}</p><p>Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}</p><p>Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}</p><p>Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}</p><p>Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}</p><p>Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}</p><p>Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}</p><p>Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}</p><p>Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}</p><p>Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}</p><p>Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}</p><p>Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}</p><p>Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}</p><p>Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}</p><p>Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}</p><p>Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}</p><p>Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{AB4DA692-F26B-403C-AF8F-FD87D121F8F1}</p><p>Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}</p><p>Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}</p><p>Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}</p><p>Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}</p><p>Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}</p><p>Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}</p><p>Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}</p><p>Key Deleted : HKCU\Software\BabSolution</p><p>Key Deleted : HKCU\Software\BonanzaDealsLive</p><p>Key Deleted : HKCU\Software\Conduit</p><p>Key Deleted : HKCU\Software\DataMngr</p><p>[#] Key Deleted : HKCU\Software\DataMngr_Toolbar</p><p>Key Deleted : HKCU\Software\Delta</p><p>Key Deleted : HKCU\Software\Doko-Toolbar</p><p>Key Deleted : HKCU\Software\InstallCore</p><p>Key Deleted : HKCU\Software\YahooPartnerToolbar</p><p>Key Deleted : HKCU\Software\AppDataLow\Software\Conduit</p><p>Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes</p><p>Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider</p><p>Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong</p><p>Key Deleted : HKCU\Software\AppDataLow\Software\smartbar</p><p>Key Deleted : HKLM\Software\Babylon</p><p>Key Deleted : HKLM\Software\BonanzaDealsLive</p><p>Key Deleted : HKLM\Software\Conduit</p><p>Key Deleted : HKLM\Software\DataMngr</p><p>Key Deleted : HKLM\Software\Delta</p><p>Key Deleted : HKLM\Software\Doko-Toolbar</p><p>Key Deleted : HKLM\Software\systweak</p><p>Key Deleted : HKLM\Software\Uniblue</p><p></p><p>***** [ Browsers ] *****</p><p></p><p>-\\ Internet Explorer v10.0.9200.16736</p><p></p><p>Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]</p><p>Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant]</p><p>Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [SearchAssistant]</p><p>Setting Restored : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]</p><p>Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]</p><p></p><p>-\\ Google Chrome v31.0.1650.57</p><p></p><p>[ File : C:\Users\Peverley\AppData\Local\Google\Chrome\User Data\Default\preferences ]</p><p></p><p>Deleted : homepage</p><p>Deleted : icon_url</p><p></p><p>*************************</p><p></p><p>AdwCleaner[R0].txt - [15001 octets] - [20/11/2013 09:37:45]</p><p>AdwCleaner[S0].txt - [13328 octets] - [20/11/2013 09:39:19]</p><p></p><p>########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [13389 octets] ##########</p></blockquote><p></p>
[QUOTE="jamespev, post: 144751, member: 15000"] FRST Report Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 18-11-2013 Ran by Peverley at 2013-11-20 09:35:38 Run:5 Running from C:\Users\Peverley\Downloads Boot Mode: Normal ============================================== Content of fixlist: ***************** BHO-x32: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo Layers Client\YontooIEClient.dll (Yontoo LLC) C:\Program Files (x86)\Yontoo Layers Client cmd: netsh winsock reset CHR HKLM-x32\...\Chrome\Extension: [ejpbbhjlbipncjklfjjaedaieimbmdda] - C:\Users\Peverley\AppData\Local\CRE\ejpbbhjlbipncjklfjjaedaieimbmdda.crx C:\Users\Peverley\AppData\Local\CRE\ejpbbhjlbipncjklfjjaedaieimbmdda.crx CHR Extension: (entrusted) - C:\Users\Peverley\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdfbddbdpnahdahmamlolacimfdbeckk\10.14.370.25_0 C:\Users\Peverley\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdfbddbdpnahdahmamlolacimfdbeckk CHR HKLM-x32\...\Chrome\Extension: [mhfdcmehmjcclgopdodkjdicohagipid] - C:\Users\Peverley\AppData\Local\CRE\mhfdcmehmjcclgopdodkjdicohagipid.crx C:\Users\Peverley\AppData\Local\CRE\mhfdcmehmjcclgopdodkjdicohagipid.crx C:\Users\Peverley\AppData\Local\Google\Desktop\Install cmd: ipconfig /flushdns ***************** HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8} => Key deleted successfully. C:\Program Files (x86)\Yontoo Layers Client => Moved successfully. ========= netsh winsock reset ========= Sucessfully reset the Winsock Catalog. You must restart the computer in order to complete the reset. ========= End of CMD: ========= HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda => Key deleted successfully. "C:\Users\Peverley\AppData\Local\CRE\ejpbbhjlbipncjklfjjaedaieimbmdda.crx" => File/Directory not found. "C:\Users\Peverley\AppData\Local\CRE\ejpbbhjlbipncjklfjjaedaieimbmdda.crx" => File/Directory not found. C:\Users\Peverley\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdfbddbdpnahdahmamlolacimfdbeckk => Moved successfully. "C:\Users\Peverley\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdfbddbdpnahdahmamlolacimfdbeckk" => File/Directory not found. HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\mhfdcmehmjcclgopdodkjdicohagipid => Key deleted successfully. C:\Users\Peverley\AppData\Local\CRE\mhfdcmehmjcclgopdodkjdicohagipid.crx => Moved successfully. "C:\Users\Peverley\AppData\Local\CRE\mhfdcmehmjcclgopdodkjdicohagipid.crx" => File/Directory not found. C:\Users\Peverley\AppData\Local\Google\Desktop\Install => Moved successfully. ========= ipconfig /flushdns ========= Windows IP Configuration Successfully flushed the DNS Resolver Cache. ========= End of CMD: ========= ==== End of Fixlog ==== Adwcleaner report # AdwCleaner v3.012 - Report created 20/11/2013 at 09:39:19 # Updated 11/11/2013 by Xplode # Operating System : Windows 7 Home Premium Service Pack 1 (64 bits) # Username : Peverley - PEVERLEY-PC # Running from : C:\Users\Peverley\Downloads\adwcleaner.exe # Option : Clean ***** [ Services ] ***** [#] Service Deleted : vToolbarUpdater11.2.0 ***** [ Files / Folders ] ***** Folder Deleted : C:\ProgramData\AVG Secure Search Folder Deleted : C:\ProgramData\Babylon Folder Deleted : C:\ProgramData\BonanzaDealsLive Folder Deleted : C:\ProgramData\DSearchLink Folder Deleted : C:\ProgramData\Partner Folder Deleted : C:\ProgramData\Systweak Folder Deleted : C:\Program Files (x86)\AVG Secure Search Folder Deleted : C:\Program Files (x86)\BonanzaDeals Folder Deleted : C:\Program Files (x86)\BonanzaDealsLive Folder Deleted : C:\Program Files (x86)\Conduit Folder Deleted : C:\Program Files (x86)\MyPC Backup Folder Deleted : C:\Users\Peverley\AppData\Local\AVG Secure Search Folder Deleted : C:\Users\Peverley\AppData\Local\BonanzaDealsLive Folder Deleted : C:\Users\Peverley\AppData\Local\Conduit Folder Deleted : C:\Users\Peverley\AppData\Local\Discount Buddy Folder Deleted : C:\Users\Peverley\AppData\Local\Ilivid Player Folder Deleted : C:\Users\Peverley\AppData\Local\PackageAware Folder Deleted : C:\Users\Peverley\AppData\LocalLow\AVG Secure Search Folder Deleted : C:\Users\Peverley\AppData\LocalLow\AVG Security Toolbar Folder Deleted : C:\Users\Peverley\AppData\LocalLow\Conduit Folder Deleted : C:\Users\Peverley\AppData\LocalLow\Doko-Toolbar Folder Deleted : C:\Users\Peverley\AppData\LocalLow\facemoods.com Folder Deleted : C:\Users\Peverley\AppData\LocalLow\PriceGong Folder Deleted : C:\Users\Peverley\AppData\Roaming\Babylon Folder Deleted : C:\Users\Peverley\AppData\Roaming\OpenCandy Folder Deleted : C:\Users\Peverley\AppData\Roaming\Systweak Folder Deleted : C:\Users\Peverley\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhfdcmehmjcclgopdodkjdicohagipid File Deleted : C:\Windows\System32\roboot64.exe File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\fcmdSrch.xml File Deleted : C:\Users\Peverley\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage File Deleted : C:\Users\Peverley\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_app.mam.conduit.com_0.localstorage-journal ***** [ Shortcuts ] ***** Shortcut Disinfected : C:\Users\Peverley\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk ***** [ Registry ] ***** Key Deleted : HKCU\Software\Google\Chrome\Extensions\ejpbbhjlbipncjklfjjaedaieimbmdda Key Deleted : HKCU\Software\Google\Chrome\Extensions\mhfdcmehmjcclgopdodkjdicohagipid Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL Key Deleted : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1 Key Deleted : HKLM\SOFTWARE\Classes\driverscanner Key Deleted : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr Key Deleted : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr.1 Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1 Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1 Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker-1_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker-1_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin Key Deleted : HKLM\SOFTWARE\5d6dbdde568ea47 Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3220468 Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3281675 Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9AFB8248-617F-460D-9366-D71CDEDA3179} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F25AF245-4A81-40DC-92F9-E9021F207706} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706} Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{AB4DA692-F26B-403C-AF8F-FD87D121F8F1} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2} Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} Key Deleted : HKCU\Software\BabSolution Key Deleted : HKCU\Software\BonanzaDealsLive Key Deleted : HKCU\Software\Conduit Key Deleted : HKCU\Software\DataMngr [#] Key Deleted : HKCU\Software\DataMngr_Toolbar Key Deleted : HKCU\Software\Delta Key Deleted : HKCU\Software\Doko-Toolbar Key Deleted : HKCU\Software\InstallCore Key Deleted : HKCU\Software\YahooPartnerToolbar Key Deleted : HKCU\Software\AppDataLow\Software\Conduit Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong Key Deleted : HKCU\Software\AppDataLow\Software\smartbar Key Deleted : HKLM\Software\Babylon Key Deleted : HKLM\Software\BonanzaDealsLive Key Deleted : HKLM\Software\Conduit Key Deleted : HKLM\Software\DataMngr Key Deleted : HKLM\Software\Delta Key Deleted : HKLM\Software\Doko-Toolbar Key Deleted : HKLM\Software\systweak Key Deleted : HKLM\Software\Uniblue ***** [ Browsers ] ***** -\\ Internet Explorer v10.0.9200.16736 Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL] Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant] Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [SearchAssistant] Setting Restored : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default] Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default] -\\ Google Chrome v31.0.1650.57 [ File : C:\Users\Peverley\AppData\Local\Google\Chrome\User Data\Default\preferences ] Deleted : homepage Deleted : icon_url ************************* AdwCleaner[R0].txt - [15001 octets] - [20/11/2013 09:37:45] AdwCleaner[S0].txt - [13328 octets] - [20/11/2013 09:39:19] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [13389 octets] ########## [/QUOTE]
Insert quotes…
Verification
Post reply
Top