Don't know how to clean this Pro PC Cleaner out! I have tried to uninstall it in Safe Mode but didn't work. Now 18-20 other malware programs on my laptop. Can't connect to Internet with Google Chrome and afraid to connect with the browser that hid my browser Crossbrowse to get scan logs. Any other way to do this? This malware and virtually made my laptop useless and I need it for work! Can't someone please help me!
Pro PC Cleaner
- Thread starter JimH
- Start date
- Mar 8, 2013
- 22,627
Hello,
They call me TwinHeadedEagle around here, and I'll be working with you.
Before we start please read and note the following:
Rules and policies
We won't support any piracy.
That being told, if any evidence of illegal OS, software, cracks/keygens or any other will be revealed, any further assistance will be suspended. If you are aware that there is this kind of stuff on your machine, remove it before proceeding!
The same applies to any use of P2P software: uTorrent, BitTorrent, Vuze, Kazaa, Ares... We don't provide any help for P2P, except for their removal. All P2P software has to be uninstalled or at least fully disabled before proceeding!
Failure to follow these guidelines will result with closing your topic and withdrawning any assistance.
Scan with Farbar Recovery Scan Tool
Please download Farbar Recovery Scan Tool and save it to your desktop.
Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.
They call me TwinHeadedEagle around here, and I'll be working with you.
Before we start please read and note the following:
- At the top of your post, please click on the "Watch thread" button and make sure to check Watch this thread...and receive email notifications. This will send an email to you as soon as I reply to your topic, allowing me to solve your problem faster.
- Please do not install any new software during the cleaning process other than the tools I provide for you. This can hinder the cleaning process. Please do not perform System Restore or any other restore.
- Instructions I give to you are very simple and made for complete beginner to follow. That's why you need to read through my instructions carefully and completely before executing them.
- Please do not run any tools other than the ones I ask you to, when I ask you to. Some of these tools can be very dangerous if used improperly. Also, if you use a tool that I have not requested you use, it can cause false positives, thereby delaying the complete cleaning of your machine.
- All tools we use here are completely clean and do not contain any malware. If your antivirus detects them as malicious, please disable your antivirus and then continue.
- If during the process you run across anything that is not in my instructions, please stop and ask. If any tool is running too much time (few hours), please stop and inform me.
- I visit forum several times at day, making sure to respond to everyone's topic as fast as possible. But bear in mind that I have private life like everyone and I cannot be here 24/7. So please be patient with me. Also, some infections require less, and some more time to be removed completely, so bear this in mind and be patient.
- Please stay with me until the end of all steps and procedures and I declare your system clean. Just because there is a lack of symptoms does not indicate a clean machine. If you solved your problem yourself, set aside two minutes to let me know.
- Please attach all report using
button below. Doing this, you make it easier for me to analyze and fix your problem.
- Do not ask for help for your business PC. Companies are making revenue via computers, so it is good thing to pay for the repair.
- If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.
We won't support any piracy.
That being told, if any evidence of illegal OS, software, cracks/keygens or any other will be revealed, any further assistance will be suspended. If you are aware that there is this kind of stuff on your machine, remove it before proceeding!
The same applies to any use of P2P software: uTorrent, BitTorrent, Vuze, Kazaa, Ares... We don't provide any help for P2P, except for their removal. All P2P software has to be uninstalled or at least fully disabled before proceeding!
Failure to follow these guidelines will result with closing your topic and withdrawning any assistance.
Please download Farbar Recovery Scan Tool and save it to your desktop.
Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.
- Double-click to run it. When the tool opens click Yes to disclaimer.
- Press Scan button.
- It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
- The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.
- Mar 8, 2013
- 22,627
- Mar 8, 2013
- 22,627
Okay, I will help you:
Scan with ZOEK
Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.
Post its content into your next reply.
Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.
- Right-click on
icon and select
Run as Administrator to start the tool.
- Wait patiently until the main console will appear, it may take a minute or two.
- In the main box please paste in the following script:
Code:createsrpoint; autoclean; emptyalltemp; ipconfig /flushdns;b - Make sure that Scan All Users option is checked.
- Push Run Script and wait patiently. The scan may take a couple of minutes.
- When the scan completes, a zoek-results logfile should open in notepad.
- If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)
Post its content into your next reply.
Zoek.exe v5.0.0.0 Updated 04-May-2015
Tool run by Abi on Wed 05/20/2015 at 9:10:27.29.
Microsoft® Windows Vista™ Home Premium 6.0.6002 Service Pack 2 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Abi\Downloads\zoek.exe [Scan all users] [Script inserted]
==== System Restore Info ======================
5/20/2015 9:12:20 AM Zoek.exe System Restore Point Created Successfully.
==== Empty Folders Check ======================
C:\PROGRA~2\Amazon deleted successfully
C:\PROGRA~2\Broadcom deleted successfully
C:\PROGRA~2\d7129893-7b92-443f-8cce-0cd76b3291ba deleted successfully
C:\PROGRA~2\DeltaFix deleted successfully
C:\PROGRA~2\Extegrity deleted successfully
C:\PROGRA~2\MSXML 4.0 deleted successfully
C:\PROGRA~2\Noel Danjou deleted successfully
C:\PROGRA~2\predm deleted successfully
C:\PROGRA~2\COMMON~1\AOL deleted successfully
C:\Program Files\Google deleted successfully
C:\PROGRA~3\04741f5cd84a49bcb1c2ee8c75c31c52 deleted successfully
C:\PROGRA~3\8fbe1fa400002f6c deleted successfully
C:\PROGRA~3\Babylon deleted successfully
C:\PROGRA~3\PCDr deleted successfully
C:\PROGRA~3\Roxio deleted successfully
C:\PROGRA~3\Trusted Publisher deleted successfully
C:\PROGRA~3\Viewpoint deleted successfully
C:\PROGRA~3\{0DD0EEEE-2A7C-411C-9243-1AE62F445FC3} deleted successfully
C:\PROGRA~3\{35733029-9859-49C7-8475-1E78E2AAE413} deleted successfully
C:\PROGRA~3\{93E26451-CD9A-43A5-A2FA-C42392EA4001} deleted successfully
C:\Users\Abi\AppData\Roaming\24U deleted successfully
C:\Users\Abi\AppData\Roaming\Amazon deleted successfully
C:\Users\Abi\AppData\Roaming\HpUpdate deleted successfully
C:\Users\Abi\AppData\Roaming\Octoshape deleted successfully
C:\Users\Abi\AppData\Roaming\Pro PC Cleaner deleted successfully
C:\Users\Abi\AppData\Roaming\tmp deleted successfully
C:\Users\Abi\AppData\Roaming\VBBE Forms Wizard v3 deleted successfully
C:\Users\Abi\AppData\Local\DataSafeOnline deleted successfully
C:\Users\Abi\AppData\Local\ntr deleted successfully
C:\Users\Abi\AppData\Local\Yahoo deleted successfully
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-2997099549-3781780513-1091738752-1000\Software\Microsoft\Internet Explorer\SearchScopes\{7AE3713D-D105-4E74-83E2-8ABA1B30FDEB} deleted successfully
HKEY_USERS\S-1-5-21-2997099549-3781780513-1091738752-1000\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully
HKEY_USERS\S-1-5-21-2997099549-3781780513-1091738752-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully
HKEY_USERS\S-1-5-21-2997099549-3781780513-1091738752-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5298F866-6C50-45E9-B4B1-D28CE9D5203A} deleted successfully
HKEY_USERS\S-1-5-21-2997099549-3781780513-1091738752-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8E66592B-8E7C-4A14-88A5-8BF21032F651} deleted successfully
HKEY_USERS\S-1-5-21-2997099549-3781780513-1091738752-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BA86FCBB-BDFA-43CA-B213-6985ED1DDF7B} deleted successfully
==== Deleting CLSID Registry Values ======================
==== Deleting Services ======================
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\54cc00c0 deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\54cc00c0 deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BrsHelper deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\BrsHelper deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\globalUpdate deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\globalUpdate deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\globalUpdatem deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\globalUpdatem deleted successfully
==== Batch Command(s) Run By Tool======================
C:\Windows\system32\appdata deleted
==== Deleting Files \ Folders ======================
C:\PROGRA~2\Amazon not found
C:\PROGRA~2\Broadcom not found
C:\PROGRA~2\d7129893-7b92-443f-8cce-0cd76b3291ba not found
C:\PROGRA~2\DeltaFix not found
C:\PROGRA~2\Extegrity not found
C:\PROGRA~2\Noel Danjou not found
C:\PROGRA~2\predm not found
C:\PROGRA~3\04741f5cd84a49bcb1c2ee8c75c31c52 not found
C:\PROGRA~3\{0DD0EEEE-2A7C-411C-9243-1AE62F445FC3} not found
C:\PROGRA~3\{35733029-9859-49C7-8475-1E78E2AAE413} not found
C:\PROGRA~3\{93E26451-CD9A-43A5-A2FA-C42392EA4001} not found
C:\Windows\syswow64\appdata deleted
C:\windows\SysNative\Tasks\NCCQRI deleted
C:\windows\SysNative\Tasks\LMVHRTEJX1 deleted
C:\windows\SysNative\Tasks\Periodic Synchronize Task deleted
C:\PROGRA~3\28341ff220e0446c9fff27c4493d622e deleted
C:\PROGRA~3\7ec05e47c5822e81 deleted
C:\Users\Abi\AppData\LocalLow\Conduit deleted
C:\PROGRA~2\Yahoo! deleted
C:\PROGRA~2\Celebrity Toolbar deleted
C:\PROGRA~2\globalUpdate deleted
C:\PROGRA~2\Conduit deleted
C:\Program Files\Common Files\System\SysMenu.dll deleted
C:\Program Files\Common Files\System\SysMenu64.dll deleted
C:\user.js deleted
C:\Users\Abi\AppData\Roaming\Optimizer Pro deleted
C:\PROGRA~3\oHlFmV3.dat deleted
C:\PROGRA~3\Yahoo! deleted
C:\PROGRA~3\Avg_Update_0215tb deleted
C:\PROGRA~3\AVG Security Toolbar deleted
C:\PROGRA~3\Browser deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\Abi\AppData\Local\globalUpdate deleted
C:\Users\Abi\AppData\Local\Windesk_Winsearch deleted
C:\Users\Abi\AppData\Local\Installer deleted
C:\Users\Abi\AppData\Local\CrashRpt deleted
C:\Users\Abi\AppData\Local\Conduit deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2 deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PepperZip deleted
C:\Users\Abi\AppData\LocalLow\Company deleted
C:\Users\Abi\AppData\LocalLow\SmartWeb deleted
C:\Users\Abi\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A} deleted
C:\Users\Abi\AppData\LocalLow\Yahoo! deleted
C:\Windows\wininit.ini deleted
C:\windows\SysNative\tasks\YTDownloader deleted
C:\windows\SysNative\tasks\YTDownloaderUpd deleted
C:\windows\SysNative\tasks\SMWUpd deleted
C:\windows\SysNative\tasks\Optimizer Pro Schedule deleted
C:\end deleted
C:\windows\SysNative\drivers\SPPD.sys deleted
C:\windows\SysNative\GroupPolicy\Machine deleted
C:\windows\SysNative\GroupPolicy\User deleted
C:\windows\SysNative\GroupPolicy\GPT.INI deleted
C:\Windows\Syswow64\GroupPolicy\gpt.ini deleted
C:\Users\Abi\Documents\Optimizer Pro deleted
C:\Users\Abi\avg_tuh_stf_all_2015_185_24c28.exe deleted
"C:\Windows\Installer\653b0.msi" deleted
"C:\Users\Abi\AppData\Local\0c9c273ee1323e513b79485b8b992a49" deleted
"C:\Users\Abi\AppData\Roaming\biP0nlErrVBt7l4j" deleted
"C:\Windows\tasks\biP0nlErrVBt7l4j.job" deleted
"C:\Windows\SysNative\tasks\biP0nlErrVBt7l4j" deleted
"C:\Users\Abi\AppData\Roaming\LjLcZITvn" deleted
"C:\Windows\tasks\LjLcZITvn.job" deleted
"C:\Windows\SysNative\tasks\LjLcZITvn" deleted
"C:\ProgramData\.24554863501262644635642126105" deleted
"C:\PROGRA~2\Windows Collaboration" deleted
==== Firefox Extensions Registry ======================
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"smartwebprinting@hp.com"="C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3" [10/17/2009 11:42 AM]
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"smartwebprinting@hp.com"="C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3" [10/17/2009 11:42 AM]
==== Fake Chromium Profiles Check ======================
Fake profile C:\Users\Abi\AppData\Local\Torch deleted
Fake profile C:\Users\Abi\AppData\Local\Google\Chrome SxS deleted
Fake profile C:\Users\Abi\AppData\Local\Comodo\Dragon deleted
Fake profile C:\Users\Abi\AppData\Local\Chromatic Browser deleted
Fake profile C:\Users\Administrator\AppData\Local\Torch deleted
Fake profile C:\Users\Administrator\AppData\Local\Google\Chrome deleted
Fake profile C:\Users\Administrator\AppData\Local\Google\Chrome SxS deleted
Fake profile C:\Users\Administrator\AppData\Local\Comodo\Dragon deleted
Fake profile C:\Users\Administrator\AppData\Local\Chromatic Browser deleted
Fake profile C:\Users\Guest\AppData\Local\Torch deleted
Fake profile C:\Users\Guest\AppData\Local\Google\Chrome deleted
Fake profile C:\Users\Guest\AppData\Local\Google\Chrome SxS deleted
Fake profile C:\Users\Guest\AppData\Local\Comodo\Dragon deleted
Fake profile C:\Users\Guest\AppData\Local\Chromatic Browser deleted
Fake profile C:\Users\RA Media Server\AppData\Local\Torch deleted
Fake profile C:\Users\RA Media Server\AppData\Local\Google\Chrome deleted
Fake profile C:\Users\RA Media Server\AppData\Local\Google\Chrome SxS deleted
Fake profile C:\Users\RA Media Server\AppData\Local\Comodo\Dragon deleted
Fake profile C:\Users\RA Media Server\AppData\Local\Chromatic Browser deleted
==== Chromium Look ======================
Google Chrome Version: 43.0.2357.65
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx[10/10/2011 12:09 PM]
Bookmark Manager - Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik
Chrome Hotword Shared Module - Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg
==== Chromium Fix ======================
C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.acronymfinder.com_0.localstorage deleted successfully
C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.acronymfinder.com_0.localstorage-journal deleted successfully
C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_offers.boostsaves.com_0.localstorage deleted successfully
C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_offers.boostsaves.com_0.localstorage-journal deleted successfully
C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage deleted successfully
C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage-journal deleted successfully
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://mysearch.avg.com/?cid={824E...coid=avgtbavg&cmpid=0415tb&pr=fr&d=2014-12-30 08:04:09&v=4.1.0.411&pid=wtu&sg=&sap=hp"
"Search Page"="http://www.google.com"
"Default_Page_URL"="http://www.yahoo.com/?fr=fp-yie8"
"First Home Page"="http://downloads.yahoo.com/internetexplorer/welcome"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.yahoo.com/?ilc=8"
"Default_Search_URL"="http://us.rd.yahoo.com/customize/ie/defaults/su/msgr10/*http://www.yahoo.com"
"Search Page"="http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr10/*http://www.yahoo.com"
"Search Bar"="http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr10/*http://www.yahoo.com/ext/search/search.html"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.yahoo.com/?ilc=8"
"Default_Search_URL"="http://us.rd.yahoo.com/customize/ie/defaults/su/msgr10/*http://www.yahoo.com"
"Search Page"="http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr10/*http://www.yahoo.com"
"Search Bar"="http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr10/*http://www.yahoo.com/ext/search/search.html"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
@="http://www.google.com/search?q=%s"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]
"CustomSearch"="http://us.rd.yahoo.com/customize/ie/defaults/cs/msgr10/*http://www.yahoo.com/ext/search/search.html"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Search]
"CustomSearch"="http://us.rd.yahoo.com/customize/ie/defaults/cs/msgr10/*http://www.yahoo.com/ext/search/search.html"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"SearchAssistant"="http://www.google.com/ie"
"Default_Search_URL"="http://www.google.com/ie"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{7AE3713D-D105-4E74-83E2-8ABA1B30FDEB}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{7AE3713D-D105-4E74-83E2-8ABA1B30FDEB}] not found
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"First Home Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]
"CustomSearch"="http://go.microsoft.com/fwlink/?LinkId=54896"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Search]
"CustomSearch"="http://go.microsoft.com/fwlink/?LinkId=54896"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{57860E2D-9D55-4364-B82E-5A04CD352F46} Flickr Url="http://www.flickr.com/search/?q={searchTerms}"
{6B0E7624-52E6-4024-BF1C-565824ADF0E1} eBay Url="http://rover.ebay.com/rover/1/711-43047-14818-1/4?satitle={searchTerms}"
{B74441A5-3A0C-4C85-91F3-C14E7DB02B0D} Delicious Url="http://delicious.com/search?p={searchTerms}"
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4E30E037E0535E84D9E3349209D354D4 deleted successfully
HKEY_LOCAL_MACHINE\Software\Policies\Google deleted successfully
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\FLV Player deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{730E03E4-350E-48E5-9D3E-4329903D454D} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1 deleted successfully
==== Empty IE Cache ======================
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Abi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Abi\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\RA Media Server\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\TEMP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Abi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2AJS2G8Z will be deleted at reboot
C:\Users\Abi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7NTHMJUK will be deleted at reboot
C:\Users\Abi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IZWH0SQ1 will be deleted at reboot
C:\Users\Abi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
==== Empty FireFox Cache ======================
No FireFox Profiles found
==== Empty Chrome Cache ======================
C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== C:\zoek_backup content ======================
C:\zoek_backup (files=340 folders=81 108847765 bytes)
==== Empty Temp Folders ======================
C:\Users\Abi\AppData\Local\Temp will be emptied at reboot
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\RA Media Server\AppData\Local\Temp emptied successfully
C:\Users\TEMP\AppData\Local\Temp emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\Windows\Temp successfully emptied
C:\Users\Abi\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== Deleting Files / Folders ======================
"C:\Users\Abi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\Users\Abi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2AJS2G8Z" not found
"C:\Users\Abi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7NTHMJUK" not found
"C:\Users\Abi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IZWH0SQ1" not found
==== EOF on Wed 05/20/2015 at 10:19:28.70 ======================
Tool run by Abi on Wed 05/20/2015 at 9:10:27.29.
Microsoft® Windows Vista™ Home Premium 6.0.6002 Service Pack 2 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Abi\Downloads\zoek.exe [Scan all users] [Script inserted]
==== System Restore Info ======================
5/20/2015 9:12:20 AM Zoek.exe System Restore Point Created Successfully.
==== Empty Folders Check ======================
C:\PROGRA~2\Amazon deleted successfully
C:\PROGRA~2\Broadcom deleted successfully
C:\PROGRA~2\d7129893-7b92-443f-8cce-0cd76b3291ba deleted successfully
C:\PROGRA~2\DeltaFix deleted successfully
C:\PROGRA~2\Extegrity deleted successfully
C:\PROGRA~2\MSXML 4.0 deleted successfully
C:\PROGRA~2\Noel Danjou deleted successfully
C:\PROGRA~2\predm deleted successfully
C:\PROGRA~2\COMMON~1\AOL deleted successfully
C:\Program Files\Google deleted successfully
C:\PROGRA~3\04741f5cd84a49bcb1c2ee8c75c31c52 deleted successfully
C:\PROGRA~3\8fbe1fa400002f6c deleted successfully
C:\PROGRA~3\Babylon deleted successfully
C:\PROGRA~3\PCDr deleted successfully
C:\PROGRA~3\Roxio deleted successfully
C:\PROGRA~3\Trusted Publisher deleted successfully
C:\PROGRA~3\Viewpoint deleted successfully
C:\PROGRA~3\{0DD0EEEE-2A7C-411C-9243-1AE62F445FC3} deleted successfully
C:\PROGRA~3\{35733029-9859-49C7-8475-1E78E2AAE413} deleted successfully
C:\PROGRA~3\{93E26451-CD9A-43A5-A2FA-C42392EA4001} deleted successfully
C:\Users\Abi\AppData\Roaming\24U deleted successfully
C:\Users\Abi\AppData\Roaming\Amazon deleted successfully
C:\Users\Abi\AppData\Roaming\HpUpdate deleted successfully
C:\Users\Abi\AppData\Roaming\Octoshape deleted successfully
C:\Users\Abi\AppData\Roaming\Pro PC Cleaner deleted successfully
C:\Users\Abi\AppData\Roaming\tmp deleted successfully
C:\Users\Abi\AppData\Roaming\VBBE Forms Wizard v3 deleted successfully
C:\Users\Abi\AppData\Local\DataSafeOnline deleted successfully
C:\Users\Abi\AppData\Local\ntr deleted successfully
C:\Users\Abi\AppData\Local\Yahoo deleted successfully
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-2997099549-3781780513-1091738752-1000\Software\Microsoft\Internet Explorer\SearchScopes\{7AE3713D-D105-4E74-83E2-8ABA1B30FDEB} deleted successfully
HKEY_USERS\S-1-5-21-2997099549-3781780513-1091738752-1000\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully
HKEY_USERS\S-1-5-21-2997099549-3781780513-1091738752-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully
HKEY_USERS\S-1-5-21-2997099549-3781780513-1091738752-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5298F866-6C50-45E9-B4B1-D28CE9D5203A} deleted successfully
HKEY_USERS\S-1-5-21-2997099549-3781780513-1091738752-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8E66592B-8E7C-4A14-88A5-8BF21032F651} deleted successfully
HKEY_USERS\S-1-5-21-2997099549-3781780513-1091738752-1000\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BA86FCBB-BDFA-43CA-B213-6985ED1DDF7B} deleted successfully
==== Deleting CLSID Registry Values ======================
==== Deleting Services ======================
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\54cc00c0 deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\54cc00c0 deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BrsHelper deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\BrsHelper deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\globalUpdate deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\globalUpdate deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\globalUpdatem deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\globalUpdatem deleted successfully
==== Batch Command(s) Run By Tool======================
C:\Windows\system32\appdata deleted
==== Deleting Files \ Folders ======================
C:\PROGRA~2\Amazon not found
C:\PROGRA~2\Broadcom not found
C:\PROGRA~2\d7129893-7b92-443f-8cce-0cd76b3291ba not found
C:\PROGRA~2\DeltaFix not found
C:\PROGRA~2\Extegrity not found
C:\PROGRA~2\Noel Danjou not found
C:\PROGRA~2\predm not found
C:\PROGRA~3\04741f5cd84a49bcb1c2ee8c75c31c52 not found
C:\PROGRA~3\{0DD0EEEE-2A7C-411C-9243-1AE62F445FC3} not found
C:\PROGRA~3\{35733029-9859-49C7-8475-1E78E2AAE413} not found
C:\PROGRA~3\{93E26451-CD9A-43A5-A2FA-C42392EA4001} not found
C:\Windows\syswow64\appdata deleted
C:\windows\SysNative\Tasks\NCCQRI deleted
C:\windows\SysNative\Tasks\LMVHRTEJX1 deleted
C:\windows\SysNative\Tasks\Periodic Synchronize Task deleted
C:\PROGRA~3\28341ff220e0446c9fff27c4493d622e deleted
C:\PROGRA~3\7ec05e47c5822e81 deleted
C:\Users\Abi\AppData\LocalLow\Conduit deleted
C:\PROGRA~2\Yahoo! deleted
C:\PROGRA~2\Celebrity Toolbar deleted
C:\PROGRA~2\globalUpdate deleted
C:\PROGRA~2\Conduit deleted
C:\Program Files\Common Files\System\SysMenu.dll deleted
C:\Program Files\Common Files\System\SysMenu64.dll deleted
C:\user.js deleted
C:\Users\Abi\AppData\Roaming\Optimizer Pro deleted
C:\PROGRA~3\oHlFmV3.dat deleted
C:\PROGRA~3\Yahoo! deleted
C:\PROGRA~3\Avg_Update_0215tb deleted
C:\PROGRA~3\AVG Security Toolbar deleted
C:\PROGRA~3\Browser deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\Abi\AppData\Local\globalUpdate deleted
C:\Users\Abi\AppData\Local\Windesk_Winsearch deleted
C:\Users\Abi\AppData\Local\Installer deleted
C:\Users\Abi\AppData\Local\CrashRpt deleted
C:\Users\Abi\AppData\Local\Conduit deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2 deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PepperZip deleted
C:\Users\Abi\AppData\LocalLow\Company deleted
C:\Users\Abi\AppData\LocalLow\SmartWeb deleted
C:\Users\Abi\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A} deleted
C:\Users\Abi\AppData\LocalLow\Yahoo! deleted
C:\Windows\wininit.ini deleted
C:\windows\SysNative\tasks\YTDownloader deleted
C:\windows\SysNative\tasks\YTDownloaderUpd deleted
C:\windows\SysNative\tasks\SMWUpd deleted
C:\windows\SysNative\tasks\Optimizer Pro Schedule deleted
C:\end deleted
C:\windows\SysNative\drivers\SPPD.sys deleted
C:\windows\SysNative\GroupPolicy\Machine deleted
C:\windows\SysNative\GroupPolicy\User deleted
C:\windows\SysNative\GroupPolicy\GPT.INI deleted
C:\Windows\Syswow64\GroupPolicy\gpt.ini deleted
C:\Users\Abi\Documents\Optimizer Pro deleted
C:\Users\Abi\avg_tuh_stf_all_2015_185_24c28.exe deleted
"C:\Windows\Installer\653b0.msi" deleted
"C:\Users\Abi\AppData\Local\0c9c273ee1323e513b79485b8b992a49" deleted
"C:\Users\Abi\AppData\Roaming\biP0nlErrVBt7l4j" deleted
"C:\Windows\tasks\biP0nlErrVBt7l4j.job" deleted
"C:\Windows\SysNative\tasks\biP0nlErrVBt7l4j" deleted
"C:\Users\Abi\AppData\Roaming\LjLcZITvn" deleted
"C:\Windows\tasks\LjLcZITvn.job" deleted
"C:\Windows\SysNative\tasks\LjLcZITvn" deleted
"C:\ProgramData\.24554863501262644635642126105" deleted
"C:\PROGRA~2\Windows Collaboration" deleted
==== Firefox Extensions Registry ======================
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"smartwebprinting@hp.com"="C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3" [10/17/2009 11:42 AM]
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"smartwebprinting@hp.com"="C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3" [10/17/2009 11:42 AM]
==== Fake Chromium Profiles Check ======================
Fake profile C:\Users\Abi\AppData\Local\Torch deleted
Fake profile C:\Users\Abi\AppData\Local\Google\Chrome SxS deleted
Fake profile C:\Users\Abi\AppData\Local\Comodo\Dragon deleted
Fake profile C:\Users\Abi\AppData\Local\Chromatic Browser deleted
Fake profile C:\Users\Administrator\AppData\Local\Torch deleted
Fake profile C:\Users\Administrator\AppData\Local\Google\Chrome deleted
Fake profile C:\Users\Administrator\AppData\Local\Google\Chrome SxS deleted
Fake profile C:\Users\Administrator\AppData\Local\Comodo\Dragon deleted
Fake profile C:\Users\Administrator\AppData\Local\Chromatic Browser deleted
Fake profile C:\Users\Guest\AppData\Local\Torch deleted
Fake profile C:\Users\Guest\AppData\Local\Google\Chrome deleted
Fake profile C:\Users\Guest\AppData\Local\Google\Chrome SxS deleted
Fake profile C:\Users\Guest\AppData\Local\Comodo\Dragon deleted
Fake profile C:\Users\Guest\AppData\Local\Chromatic Browser deleted
Fake profile C:\Users\RA Media Server\AppData\Local\Torch deleted
Fake profile C:\Users\RA Media Server\AppData\Local\Google\Chrome deleted
Fake profile C:\Users\RA Media Server\AppData\Local\Google\Chrome SxS deleted
Fake profile C:\Users\RA Media Server\AppData\Local\Comodo\Dragon deleted
Fake profile C:\Users\RA Media Server\AppData\Local\Chromatic Browser deleted
==== Chromium Look ======================
Google Chrome Version: 43.0.2357.65
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx[10/10/2011 12:09 PM]
Bookmark Manager - Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik
Chrome Hotword Shared Module - Abi\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg
==== Chromium Fix ======================
C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.acronymfinder.com_0.localstorage deleted successfully
C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.acronymfinder.com_0.localstorage-journal deleted successfully
C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_offers.boostsaves.com_0.localstorage deleted successfully
C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_offers.boostsaves.com_0.localstorage-journal deleted successfully
C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage deleted successfully
C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage-journal deleted successfully
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://mysearch.avg.com/?cid={824E...coid=avgtbavg&cmpid=0415tb&pr=fr&d=2014-12-30 08:04:09&v=4.1.0.411&pid=wtu&sg=&sap=hp"
"Search Page"="http://www.google.com"
"Default_Page_URL"="http://www.yahoo.com/?fr=fp-yie8"
"First Home Page"="http://downloads.yahoo.com/internetexplorer/welcome"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.yahoo.com/?ilc=8"
"Default_Search_URL"="http://us.rd.yahoo.com/customize/ie/defaults/su/msgr10/*http://www.yahoo.com"
"Search Page"="http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr10/*http://www.yahoo.com"
"Search Bar"="http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr10/*http://www.yahoo.com/ext/search/search.html"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://www.yahoo.com/?ilc=8"
"Default_Search_URL"="http://us.rd.yahoo.com/customize/ie/defaults/su/msgr10/*http://www.yahoo.com"
"Search Page"="http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr10/*http://www.yahoo.com"
"Search Bar"="http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr10/*http://www.yahoo.com/ext/search/search.html"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
@="http://www.google.com/search?q=%s"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]
"CustomSearch"="http://us.rd.yahoo.com/customize/ie/defaults/cs/msgr10/*http://www.yahoo.com/ext/search/search.html"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Search]
"CustomSearch"="http://us.rd.yahoo.com/customize/ie/defaults/cs/msgr10/*http://www.yahoo.com/ext/search/search.html"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"SearchAssistant"="http://www.google.com/ie"
"Default_Search_URL"="http://www.google.com/ie"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{7AE3713D-D105-4E74-83E2-8ABA1B30FDEB}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{7AE3713D-D105-4E74-83E2-8ABA1B30FDEB}] not found
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"First Home Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]
"CustomSearch"="http://go.microsoft.com/fwlink/?LinkId=54896"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Search]
"CustomSearch"="http://go.microsoft.com/fwlink/?LinkId=54896"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{57860E2D-9D55-4364-B82E-5A04CD352F46} Flickr Url="http://www.flickr.com/search/?q={searchTerms}"
{6B0E7624-52E6-4024-BF1C-565824ADF0E1} eBay Url="http://rover.ebay.com/rover/1/711-43047-14818-1/4?satitle={searchTerms}"
{B74441A5-3A0C-4C85-91F3-C14E7DB02B0D} Delicious Url="http://delicious.com/search?p={searchTerms}"
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4E30E037E0535E84D9E3349209D354D4 deleted successfully
HKEY_LOCAL_MACHINE\Software\Policies\Google deleted successfully
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\FLV Player deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{730E03E4-350E-48E5-9D3E-4329903D454D} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1 deleted successfully
==== Empty IE Cache ======================
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Abi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Abi\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\RA Media Server\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\TEMP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Abi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2AJS2G8Z will be deleted at reboot
C:\Users\Abi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7NTHMJUK will be deleted at reboot
C:\Users\Abi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IZWH0SQ1 will be deleted at reboot
C:\Users\Abi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
==== Empty FireFox Cache ======================
No FireFox Profiles found
==== Empty Chrome Cache ======================
C:\Users\Abi\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== C:\zoek_backup content ======================
C:\zoek_backup (files=340 folders=81 108847765 bytes)
==== Empty Temp Folders ======================
C:\Users\Abi\AppData\Local\Temp will be emptied at reboot
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\RA Media Server\AppData\Local\Temp emptied successfully
C:\Users\TEMP\AppData\Local\Temp emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\Windows\Temp successfully emptied
C:\Users\Abi\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== Deleting Files / Folders ======================
"C:\Users\Abi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\Users\Abi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2AJS2G8Z" not found
"C:\Users\Abi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7NTHMJUK" not found
"C:\Users\Abi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IZWH0SQ1" not found
==== EOF on Wed 05/20/2015 at 10:19:28.70 ======================
- Mar 8, 2013
- 22,627
No window pop-ups anymore. Chrome is back to working normally. It seems to be behaving quite a bit better. However, when I look at my programs list - Pro PC Cleaner is still listed. But it is the only extra/malware thing I see listed there now.
- Mar 8, 2013
- 22,627
When I go to uninstall a window pops us and says "there's a problem with this windows installer package. A DLL required for this install to complete could not be run. Contact your support personnel or package vendor.
Side note - Unable to connect to webpages Or view this thread (On husband's smartphone) Internet is connected tho. Malwarebtyes keeps popping up windows saying nonmalware detected ... Blocked a potentially unwanted program .. refers to vendorhjackboot.
Side note - Unable to connect to webpages Or view this thread (On husband's smartphone) Internet is connected tho. Malwarebtyes keeps popping up windows saying nonmalware detected ... Blocked a potentially unwanted program .. refers to vendorhjackboot.
- Mar 8, 2013
- 22,627
Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.
- Right-click on
icon and select
Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File). - Make sure that Addition option is checked.
- Press Scan button and wait.
- The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.
Scan with Farbar Recovery Scan Tool
Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.
Please include their content into your next reply.
- Right-click on
icon and selectRun as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).- Make sure that Addition option is checked.
- Press Scan button and wait.
- The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.
Also, just tried to print something and I cannot find my printers listed. Not even under control panel. When I go to add a printer - window pops up saying "Windows can't open Add Printer. The local print spooler service is not running. Please restart the spooler or restart the machine."
:-/
:-/
- Mar 8, 2013
- 22,627
Download attached fixlist.txt file and save it to the Desktop:
Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!
- Right-click on
icon and select
Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File). - Press the Fix button just once and wait.
- If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
- When finished FRST will generate a log on the Desktop, called Fixlog.txt.
Please attach it to your reply.
Please download AdwCleaner by Xplode and save the file to your Desktop.
- Right-click on
icon and select
Run as Administrator to start the tool.
- Wait until the database is updated.
- Accept the Terms of use and click Scan.
- When finished, please click Clean.
- Upon completion, click Report. A log (AdwCleaner[S*].txt) will open.
Please include the contents of that file in your reply.
Note: Reports will be saved in your system partition, usually at C:\Adwcleaner
I downloaded it. Requested that it scan ... says "Waiting for action. Please uncheck items you want to keep."
Hasn't really done anything yet ... been sitting there about 5-10 mins. I will post log when completed.
Hasn't really done anything yet ... been sitting there about 5-10 mins. I will post log when completed.
- Mar 8, 2013
- 22,627
- Mar 8, 2013
- 22,627
Similar threads
