Brothersft search engine & toolbar removal

11 years ago

Zep516 posted a reply with instructions in Jan 2013 for another user and asked they paste results. I followed his instructions and have pasted scan results below. HELP ANYBODY!

# AdwCleaner v2.115 - Logfile created 03/28/2013 at 19:12:46
# Updated 17/03/2013 by Xplode
# Operating system : Windows Vista (TM) Business Service Pack 2 (32 bits)
# User : Judy - JUDY-PC
# Boot Mode : Normal
# Running from : C:\Users\Judy\Desktop\adwcleaner.exe
# Option [Search]

***** [Services] *****

Found : CltMngSvc

***** [Files / Folders] *****

File Found : \END
File Found : C:\END
File Found : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
File Found : C:\Program Files\Mozilla Firefox\searchplugins\SearchResults.xml
File Found : C:\user.js
File Found : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\searchplugins\Askcom.xml
File Found : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\searchplugins\BrowserProtect.xml
File Found : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\searchplugins\delta.xml
File Found : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\searchplugins\SearchResults.xml
Folder Found : C:\Program Files\Conduit
Folder Found : C:\Program Files\hdvidcodec.com
Folder Found : C:\Program Files\Movie2KDownloader.com
Folder Found : C:\Program Files\Qwiklinx
Folder Found : C:\Program Files\SearchProtect
Folder Found : C:\Program Files\Windows Searchqu Toolbar
Folder Found : C:\ProgramData\~0
Folder Found : C:\ProgramData\Babylon
Folder Found : C:\ProgramData\blekko toolbars
Folder Found : C:\ProgramData\boost_interprocess
Folder Found : C:\ProgramData\Tarma Installer
Folder Found : C:\ProgramData\WeCareReminder
Folder Found : C:\Users\Judy\AppData\Local\Conduit
Folder Found : C:\Users\Judy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blaofbhgbmeikidhlkmjhbkbfohpgekf
Folder Found : C:\Users\Judy\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnfaglepmjgohnkcoieaijlheabmcdeo
Folder Found : C:\Users\Judy\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Folder Found : C:\Users\Judy\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndeiekmdhemaggmkgljlpdeaomeplbp
Folder Found : C:\Users\Judy\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndeiekmdhemaggmkgljlpdeaomeplbp
Folder Found : C:\Users\Judy\AppData\Local\Google\Chrome\User Data\Default\Extensions\niapdbllcanepiiimjjndipklodoedlc
Folder Found : C:\Users\Judy\AppData\Local\PackageAware
Folder Found : C:\Users\Judy\AppData\Local\Temp\CT3281348
Folder Found : C:\Users\Judy\AppData\LocalLow\AskToolbar
Folder Found : C:\Users\Judy\AppData\LocalLow\Conduit
Folder Found : C:\Users\Judy\AppData\LocalLow\Delta
Folder Found : C:\Users\Judy\AppData\Roaming\Babylon
Folder Found : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\Conduit
Folder Found : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\ConduitCommon
Folder Found : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\ConduitEngine
Folder Found : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\CT3281348
Folder Found : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\extensions\(6921B3CC-9935-4D28-9A83-B3D824210580)
Folder Found : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\extensions\(94193c2f-e73f-4feb-b393-2b95f0a01430)
Folder Found : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\extensions\wecarereminder@bryan
Folder Found : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\jetpack
Folder Found : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\Smartbar
Folder Found : C:\Users\Judy\AppData\Roaming\OpenCandy
Folder Found : C:\Users\Judy\AppData\Roaming\Qwiklinx
Folder Found : C:\Users\Judy\AppData\Roaming\SearchProtect
Folder Found : C:\Users\Judy\Desktop\Programs\hdvidcodec.com

***** [Registry] *****

Key Found : HKCU\Software\1ClickDownload
Key Found : HKCU\Software\5d538a8bb46eec10
Key Found : HKCU\Software\AppDataLow\Software\Crossrider
Key Found : HKCU\Software\AppDataLow\Software\SmartBar
Key Found : HKCU\Software\AppDataLow\Software\xfin_portal
Key Found : HKCU\Software\BabylonToolbar
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\DataMngr
Key Found : HKCU\Software\DataMngr_Toolbar
Key Found : HKCU\Software\delta LTD
Key Found : HKCU\Software\Google\Chrome\Extensions\jndeiekmdhemaggmkgljlpdeaomeplbp
Key Found : HKCU\Software\Google\Chrome\Extensions\jndeiekmdhemaggmkgljlpdeaomeplbp
Key Found : HKCU\Software\Headlight
Key Found : HKCU\Software\InstallCore
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\(0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9)
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\(9BB47C17-9C68-4BB3-B188-DD9AF0FD2102)
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\(15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693)
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\(2E497885-E60B-420A-832D-0148B392E058)_is1
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\1ClickDownload
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SearchProtect
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\xfin_portal
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\(82E1477C-B154-48D3-9891-33D83C26BCD3)
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\(9D425283-D487-4337-BAB6-AB8354A81457)
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\(C1AF5FA5-852C-4C90-812E-A7F75E011D87)
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\(D824F0DE-3D60-4F57-9EB1-66033ECD8ABB)
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\(FD72061E-9FDE-484D-A58A-0BAB4151CAD8)
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\(82E1477C-B154-48D3-9891-33D83C26BCD3)
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\(9D425283-D487-4337-BAB6-AB8354A81457)
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\(C1AF5FA5-852C-4C90-812E-A7F75E011D87)
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\(D824F0DE-3D60-4F57-9EB1-66033ECD8ABB)
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\(DF7770F7-832F-4BDF-B144-100EDDD0C3AE)
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\(FD72061E-9FDE-484D-A58A-0BAB4151CAD8)
Key Found : HKCU\Software\Qwiklinx
Key Found : HKCU\Software\SearchCore for Browsers
Key Found : HKCU\Software\SearchProtect
Key Found : HKCU\Software\wecarereminder
Key Found : HKCU\Software\Zugo
Key Found : HKLM\SOFTWARE\5d538a8bb46eec10
Key Found : HKLM\Software\Babylon
Key Found : HKLM\SOFTWARE\Classes\AppID\(49BC4DD1-0E69-4611-9164-0009538C5E46)
Key Found : HKLM\SOFTWARE\Classes\AppID\(4FBBF769-ECEB-420A-B536-133B1D505C36)
Key Found : HKLM\SOFTWARE\Classes\AppID\(608D3067-77E8-463D-9084-908966806826)
Key Found : HKLM\SOFTWARE\Classes\AppID\(BDB69379-802F-4EAF-B541-F8DE92DD98DB)
Key Found : HKLM\SOFTWARE\Classes\AppID\(C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3)
Key Found : HKLM\SOFTWARE\Classes\AppID\IEHelperv2.5.0.DLL
Key Found : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Key Found : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Key Found : HKLM\SOFTWARE\Classes\CLSID\(0214A12B-C5A3-437F-A6F3-068ABCD8C85E)
Key Found : HKLM\SOFTWARE\Classes\CLSID\(08635077-8829-49E2-B338-C968817EB460)
Key Found : HKLM\SOFTWARE\Classes\CLSID\(20A3F109-F7C1-47B4-8098-8E654B264B1D)
Key Found : HKLM\SOFTWARE\Classes\CLSID\(2EECD738-5844-4A99-B4B6-146BF802613B)
Key Found : HKLM\SOFTWARE\Classes\CLSID\(3C471948-F874-49F5-B338-4F214A2EE0B1)
Key Found : HKLM\SOFTWARE\Classes\CLSID\(4B9BCCE8-A70B-402A-A7E1-DB96831EE26F)
Key Found : HKLM\SOFTWARE\Classes\CLSID\(80922EE0-8A76-46AE-95D5-BD3C3FE0708D)
Key Found : HKLM\SOFTWARE\Classes\CLSID\(8C7478AB-3155-463E-936F-55F91F0F10D0)
Key Found : HKLM\SOFTWARE\Classes\CLSID\(96DD9437-5D20-4EFB-BF52-A4A605A4E0AA)
Key Found : HKLM\SOFTWARE\Classes\CLSID\(D824F0DE-3D60-4F57-9EB1-66033ECD8ABB)
Key Found : HKLM\SOFTWARE\Classes\CLSID\(E46C8196-B634-44A1-AF6E-957C64278AB1)
Key Found : HKLM\SOFTWARE\Classes\CLSID\(F773BB94-6C19-4643-A570-0E429103D1C3)
Key Found : HKLM\SOFTWARE\Classes\IEHelperv250.WeCareReminder
Key Found : HKLM\SOFTWARE\Classes\IEHelperv250.WeCareReminder.1
Key Found : HKLM\SOFTWARE\Classes\Interface\(96DD9437-5D20-4EFB-BF52-A4A605A4E0AA)
Key Found : HKLM\SOFTWARE\Classes\Interface\(E2C1A522-B8E1-45D1-B316-F5625004A28C)
Key Found : HKLM\SOFTWARE\Classes\Interface\(F773BB94-6C19-4643-A570-0E429103D1C3)
Key Found : HKLM\SOFTWARE\Classes\Prod.cap
Key Found : HKLM\SOFTWARE\Classes\QwiklinxBHO
Key Found : HKLM\SOFTWARE\Classes\QwiklinxBHO.1
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3281348
Key Found : HKLM\SOFTWARE\Classes\TypeLib\(204C0025-C26A-43E2-853C-D8A8EB1BCE51)
Key Found : HKLM\SOFTWARE\Classes\TypeLib\(B12920CF-BE13-4C09-890D-1B6EFFFE2FBE)
Key Found : HKLM\Software\Conduit
Key Found : HKLM\Software\DataMngr
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\blaofbhgbmeikidhlkmjhbkbfohpgekf
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\dnfaglepmjgohnkcoieaijlheabmcdeo
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\jndeiekmdhemaggmkgljlpdeaomeplbp
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\jndeiekmdhemaggmkgljlpdeaomeplbp
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\(1791C1B5-FFD0-4D4B-ABCD-7A7DF6EAA89C)
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\(49BC4DD1-0E69-4611-9164-0009538C5E46)
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\(AC5B6CDA-8F90-4740-9A8C-28AC5D3C73FE)
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\(9BB47C17-9C68-4BB3-B188-DD9AF0FD2102)
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\(9D425283-D487-4337-BAB6-AB8354A81457)
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\(D824F0DE-3D60-4F57-9EB1-66033ECD8ABB)
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\(02478D38-C3F9-4EFB-9B51-7695ECA05670)
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\(EF99BD32-C1FB-11D2-892F-0090271D4F88)
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\(2E497885-E60B-420A-832D-0148B392E058)_is1
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Key Found : HKLM\Software\SearchProtect
Key Found : HKLM\Software\Tarma Installer
Key Found : HKU\S-1-5-21-3059724291-270862476-368955131-1000\Software\Microsoft\Internet Explorer\SearchScopes\(0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9)
Key Found : HKU\S-1-5-21-3059724291-270862476-368955131-1000\Software\Microsoft\Internet Explorer\SearchScopes\(9BB47C17-9C68-4BB3-B188-DD9AF0FD2102)
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [(9D425283-D487-4337-BAB6-AB8354A81457)]
Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [searchprotect]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow [*.crossrider.com]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [(9D425283-D487-4337-BAB6-AB8354A81457)]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [10]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SearchProtectAll]
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [(EB132DB0-A4CA-11DF-9732-0E29E0D72085)]

***** [Internet Browsers] *****

-\\ Internet Explorer v9.0.8112.16470

[OK] Registry is clean.

-\\ Mozilla Firefox v19.0.2 (en-US)

File : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\prefs.js

Found : user_pref("CT3281348.1000082.isPlayDisplay", "true");
Found : user_pref("CT3281348.1000082.state", "(\"state\":\"stopped\",\"text\":\"1.FM (Cou...\",\"description[...]
Found : user_pref("CT3281348.ENABALE_HISTORY", "(\"dataType\":\"string\",\"data\":\"true\")");
Found : user_pref("CT3281348.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "(\"dataType\":\"string\",\"data\":\"tru[...]
Found : user_pref("CT3281348.FF19Solved", "true");
Found : user_pref("CT3281348.FirstTime", "true");
Found : user_pref("CT3281348.FirstTimeFF3", "true");
Found : user_pref("CT3281348.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT328[...]
Found : user_pref("CT3281348.UserID", "UN76184982422238258");
Found : user_pref("CT3281348.addressBarTakeOverEnabledInHidden", "true");
Found : user_pref("CT3281348.autoDisableScopes", 0);
Found : user_pref("CT3281348.browser.search.defaultthis.engineName", "true");
Found : user_pref("CT3281348.defaultSearch", "true");
Found : user_pref("CT3281348.embeddedsData", "[(\"appId\":\"130035115119979375\",\"apiPermissions\":(\"cross[...]
Found : user_pref("CT3281348.enableAlerts", "true");
Found : user_pref("CT3281348.enableFix404ByUser", "TRUE");
Found : user_pref("CT3281348.enableSearchFromAddressBar", "true");
Found : user_pref("CT3281348.firstTimeDialogOpened", "true");
Found : user_pref("CT3281348.fixPageNotFoundError", "true");
Found : user_pref("CT3281348.fixPageNotFoundErrorByUser", "true");
Found : user_pref("CT3281348.fixPageNotFoundErrorInHidden", "true");
Found : user_pref("CT3281348.fixUrls", true);
Found : user_pref("CT3281348.installDate", "27/3/2013 23:34:59");
Found : user_pref("CT3281348.installId", "stub.exe");
Found : user_pref("CT3281348.installType", "conduitnsisintegration");
Found : user_pref("CT3281348.installUsage", "2013-03-28T09:36:39.0514942+03:00");
Found : user_pref("CT3281348.installUsageEarly", "2013-03-28T09:36:35.8171192+03:00");
Found : user_pref("CT3281348.installerVersion", "1.3.7.3");
Found : user_pref("CT3281348.isCheckedStartAsHidden", true);
Found : user_pref("CT3281348.isEnableAllDialogs", "(\"dataType\":\"string\",\"data\":\"true\")");
Found : user_pref("CT3281348.isFirstTimeToolbarLoading", "false");
Found : user_pref("CT3281348.isToolbarShrinked", "(\"dataType\":\"string\",\"data\":\"false\")");
Found : user_pref("CT3281348.keyword", "true");
Found : user_pref("CT3281348.lastNewTabSettings", "(\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit[...]
Found : user_pref("CT3281348.lastVersion", "10.15.0.62");
Found : user_pref("CT3281348.mam_gk_installer_preapproved.enc", "dHJ1ZQ==");
Found : user_pref("CT3281348.migrateAppsAndComponents", true);
Found : user_pref("CT3281348.navigationAliasesJson", "(\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"\",\"[...]
Found : user_pref("CT3281348.openThankYouPage", "false");
Found : user_pref("CT3281348.openUninstallPage", "true");
Found : user_pref("CT3281348.revertSettingsEnabled", "false");
Found : user_pref("CT3281348.search.searchAppId", "130035115119979375");
Found : user_pref("CT3281348.search.searchCount", "0");
Found : user_pref("CT3281348.searchFromAddressBarEnabledByUser", "true");
Found : user_pref("CT3281348.searchInNewTabEnabledByUser", "true");
Found : user_pref("CT3281348.searchInNewTabEnabledInHidden", "true");
Found : user_pref("CT3281348.selectToSearchBoxEnabled", "(\"dataType\":\"string\",\"data\":\"true\")");
Found : user_pref("CT3281348.serviceLayer_service_login_isFirstLoginInvoked", "(\"dataType\":\"boolean\",\"d[...]
Found : user_pref("CT3281348.serviceLayer_service_login_loginCount", "(\"dataType\":\"number\",\"data\":\"4\[...]
Found : user_pref("CT3281348.serviceLayer_service_toolbarGrouping_activeCTID", "(\"dataType\":\"string\",\"d[...]
Found : user_pref("CT3281348.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "(\"dataType\":\"strin[...]
Found : user_pref("CT3281348.serviceLayer_service_toolbarGrouping_activeToolbarName", "(\"dataType\":\"strin[...]
Found : user_pref("CT3281348.serviceLayer_service_toolbarGrouping_invoked", "(\"dataType\":\"string\",\"data[...]
Found : user_pref("CT3281348.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1364452607670");
Found : user_pref("CT3281348.serviceLayer_services_appsMetadata_lastUpdate", "1364452607529");
Found : user_pref("CT3281348.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1364452607378");
Found : user_pref("CT3281348.serviceLayer_services_installUsage_ToolbarInstallEarly_lastUpdate", "1364452605[...]
Found : user_pref("CT3281348.serviceLayer_services_installUsage_ToolbarInstall_lastUpdate", "1364452608887")[...]
Found : user_pref("CT3281348.serviceLayer_services_location_lastUpdate", "1364452605166");
Found : user_pref("CT3281348.serviceLayer_services_login_10.15.0.62_lastUpdate", "1364521708352");
Found : user_pref("CT3281348.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1364452607260");
Found : user_pref("CT3281348.serviceLayer_services_searchAPI_lastUpdate", "1364452605045");
Found : user_pref("CT3281348.serviceLayer_services_serviceMap_lastUpdate", "1364452602212");
Found : user_pref("CT3281348.serviceLayer_services_toolbarContextMenu_lastUpdate", "1364452607141");
Found : user_pref("CT3281348.serviceLayer_services_toolbarSettings_lastUpdate", "1364521708447");
Found : user_pref("CT3281348.serviceLayer_services_translation_lastUpdate", "1364452607570");
Found : user_pref("CT3281348.settingsINI", true);
Found : user_pref("CT3281348.shouldFirstTimeDialog", "false");
Found : user_pref("CT3281348.showToolbarPermission", "false");
Found : user_pref("CT3281348.smartbar.CTID", "CT3281348");
Found : user_pref("CT3281348.smartbar.Uninstall", "0");
Found : user_pref("CT3281348.smartbar.homepage", true);
Found : user_pref("CT3281348.smartbar.toolbarName", "BrotherSoft Extreme2 B1 ");
Found : user_pref("CT3281348.startPage", "true");
Found : user_pref("CT3281348.toolbarBornServerTime", "28-3-2013");
Found : user_pref("CT3281348.toolbarCurrentServerTime", "29-3-2013");
Found : user_pref("CT3281348.toolbarLoginClientTime", "Wed Mar 27 2013 23:36:48 GMT-0700 (Pacific Daylight T[...]
Found : user_pref("CT3281348_Firefox.csv", "[(\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Found : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3281348&CUI=UN76184982[...]
Found : user_pref("Smartbar.ConduitSearchEngineList", "");
Found : user_pref("Smartbar.ConduitSearchUrlList", "");
Found : user_pref("Smartbar.keywordURLSelectedCTID", "CT3281348");
Found : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Found : user_pref("browser.search.defaultthis.engineName", "BrotherSoft Extreme2 B1 Customized Web Search");
Found : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3281348&CUI[...]
Found : user_pref("browser.startup.homepage", "hxxp://search.conduit.com/?ctid=CT3281348&CUI=UN7618498242223[...]
Found : user_pref("extensions.BabylonToolbar.admin", false);
Found : user_pref("extensions.BabylonToolbar.aflt", "orgnl");
Found : user_pref("extensions.BabylonToolbar.bbDpng", 18);
Found : user_pref("extensions.BabylonToolbar.dfltSrch", false);
Found : user_pref("extensions.BabylonToolbar.hmpg", false);
Found : user_pref("extensions.BabylonToolbar.lastDP", 18);
Found : user_pref("extensions.BabylonToolbar.lastVrsnTs", "");
Found : user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "9.0");
Found : user_pref("extensions.BabylonToolbar.newTab", false);
Found : user_pref("extensions.BabylonToolbar.newTabUrl", "");
Found : user_pref("extensions.BabylonToolbar.noFFXTlbr", false);
Found : user_pref("extensions.BabylonToolbar.propectorlck", 65505886);
Found : user_pref("extensions.BabylonToolbar.prtkDS", 0);
Found : user_pref("extensions.BabylonToolbar.prtkHmpg", 0);
Found : user_pref("extensions.BabylonToolbar.smplGrp", "free");
Found : user_pref("extensions.BabylonToolbar_i.newTab", true);
Found : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?AF=108976&babsrc=NT_s[...]
Found : user_pref("extensions.wecarereminder.merchHash", "(\"AFFILIATES\":(\"1-Sale-A-Day\":(\"name\":\"1 Sa[...]
Found : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3281348&SearchSource=2&CU[...]
Found : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3281348&CUI=UN761849824[...]
Found : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT[...]
Found : user_pref("smartbar.machineId", "AF+LFTJD4NUIKJJOVZA9AUM7WK/WQKHVO+68K+QWWHYF2PGR3N0HPH300TM39BRK1AM[...]
Found : user_pref("smartbar.originalHomepage", "www.yahoo.com");
Found : user_pref("smartbar.originalSearchAddressUrl", "");
Found : user_pref("smartbar.originalSearchEngine", "Delta Search");

-\\ Google Chrome v25.0.1364.172

File : C:\Users\Judy\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [21219 octets] - [28/03/2013 19:12:46]

########## EOF - C:\AdwCleaner[R1].txt - [21280 octets] ##########

Comments (2)

zep516
11 years ago
last modified: 9 years ago
Hello

Please rescan with AdwCleaner.
Double-click AdwCleaner.exe to run the tool.
Click Delete.
Everything that was found will be deleted.
Save and open files and approve the reboot. A text file will open after the restart.
Please post the contents of that logfile with your next reply.

This post was edited by zep516 on Thu, Mar 28, 13 at 23:59
akdjfhg
Original Author
11 years ago
last modified: 9 years ago
# AdwCleaner v2.115 - Logfile created 03/28/2013 at 21:45:52
# Updated 17/03/2013 by Xplode
# Operating system : Windows Vista (TM) Business Service Pack 2 (32 bits)
# User : Judy - JUDY-PC
# Boot Mode : Normal
# Running from : C:\Users\Judy\Desktop\adwcleaner.exe
# Option [Delete]

***** [Services] *****

Stopped & Deleted : CltMngSvc

***** [Files / Folders] *****

Deleted on reboot : C:\Users\Judy\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndeiekmdhemaggmkgljlpdeaomeplbp
File Deleted : \END
File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\SearchResults.xml
File Deleted : C:\user.js
File Deleted : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\searchplugins\Askcom.xml
File Deleted : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\searchplugins\BrowserProtect.xml
File Deleted : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\searchplugins\delta.xml
File Deleted : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\searchplugins\SearchResults.xml
Folder Deleted : C:\Program Files\Conduit
Folder Deleted : C:\Program Files\hdvidcodec.com
Folder Deleted : C:\Program Files\Movie2KDownloader.com
Folder Deleted : C:\Program Files\Qwiklinx
Folder Deleted : C:\Program Files\SearchProtect
Folder Deleted : C:\Program Files\Windows Searchqu Toolbar
Folder Deleted : C:\ProgramData\~0
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\ProgramData\blekko toolbars
Folder Deleted : C:\ProgramData\boost_interprocess
Folder Deleted : C:\ProgramData\Tarma Installer
Folder Deleted : C:\ProgramData\WeCareReminder
Folder Deleted : C:\Users\Judy\AppData\Local\Conduit
Folder Deleted : C:\Users\Judy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blaofbhgbmeikidhlkmjhbkbfohpgekf
Folder Deleted : C:\Users\Judy\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnfaglepmjgohnkcoieaijlheabmcdeo
Folder Deleted : C:\Users\Judy\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Folder Deleted : C:\Users\Judy\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndeiekmdhemaggmkgljlpdeaomeplbp
Folder Deleted : C:\Users\Judy\AppData\Local\Google\Chrome\User Data\Default\Extensions\niapdbllcanepiiimjjndipklodoedlc
Folder Deleted : C:\Users\Judy\AppData\Local\PackageAware
Folder Deleted : C:\Users\Judy\AppData\Local\Temp\CT3281348
Folder Deleted : C:\Users\Judy\AppData\LocalLow\AskToolbar
Folder Deleted : C:\Users\Judy\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Judy\AppData\LocalLow\Delta
Folder Deleted : C:\Users\Judy\AppData\Roaming\Babylon
Folder Deleted : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\Conduit
Folder Deleted : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\ConduitCommon
Folder Deleted : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\ConduitEngine
Folder Deleted : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\CT3281348
Folder Deleted : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\extensions\(6921B3CC-9935-4D28-9A83-B3D824210580)
Folder Deleted : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\extensions\(94193c2f-e73f-4feb-b393-2b95f0a01430)
Folder Deleted : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\extensions\staged
Folder Deleted : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\extensions\wecarereminder@bryan
Folder Deleted : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\jetpack
Folder Deleted : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\Smartbar
Folder Deleted : C:\Users\Judy\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\Judy\AppData\Roaming\Qwiklinx
Folder Deleted : C:\Users\Judy\AppData\Roaming\SearchProtect
Folder Deleted : C:\Users\Judy\Desktop\Programs\hdvidcodec.com

***** [Registry] *****

Key Deleted : HKCU\Software\1ClickDownload
Key Deleted : HKCU\Software\5d538a8bb46eec10
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKCU\Software\AppDataLow\Software\xfin_portal
Key Deleted : HKCU\Software\BabylonToolbar
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\DataMngr
Key Deleted : HKCU\Software\DataMngr_Toolbar
Key Deleted : HKCU\Software\delta LTD
Key Deleted : HKCU\Software\Google\Chrome\Extensions\jndeiekmdhemaggmkgljlpdeaomeplbp
Key Deleted : HKCU\Software\Headlight
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\(0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9)
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\(9BB47C17-9C68-4BB3-B188-DD9AF0FD2102)
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\(15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693)
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\(2E497885-E60B-420A-832D-0148B392E058)_is1
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\1ClickDownload
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SearchProtect
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\xfin_portal
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\(82E1477C-B154-48D3-9891-33D83C26BCD3)
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\(C1AF5FA5-852C-4C90-812E-A7F75E011D87)
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\(D824F0DE-3D60-4F57-9EB1-66033ECD8ABB)
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\(FD72061E-9FDE-484D-A58A-0BAB4151CAD8)
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\(82E1477C-B154-48D3-9891-33D83C26BCD3)
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\(9D425283-D487-4337-BAB6-AB8354A81457)
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\(C1AF5FA5-852C-4C90-812E-A7F75E011D87)
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\(D824F0DE-3D60-4F57-9EB1-66033ECD8ABB)
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\(DF7770F7-832F-4BDF-B144-100EDDD0C3AE)
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\(FD72061E-9FDE-484D-A58A-0BAB4151CAD8)
Key Deleted : HKCU\Software\Qwiklinx
Key Deleted : HKCU\Software\SearchCore for Browsers
Key Deleted : HKCU\Software\SearchProtect
Key Deleted : HKCU\Software\wecarereminder
Key Deleted : HKCU\Software\Zugo
Key Deleted : HKLM\SOFTWARE\5d538a8bb46eec10
Key Deleted : HKLM\Software\Babylon
Key Deleted : HKLM\SOFTWARE\Classes\AppID\(49BC4DD1-0E69-4611-9164-0009538C5E46)
Key Deleted : HKLM\SOFTWARE\Classes\AppID\(4FBBF769-ECEB-420A-B536-133B1D505C36)
Key Deleted : HKLM\SOFTWARE\Classes\AppID\(608D3067-77E8-463D-9084-908966806826)
Key Deleted : HKLM\SOFTWARE\Classes\AppID\(BDB69379-802F-4EAF-B541-F8DE92DD98DB)
Key Deleted : HKLM\SOFTWARE\Classes\AppID\(C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3)
Key Deleted : HKLM\SOFTWARE\Classes\AppID\IEHelperv2.5.0.DLL
Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\(0214A12B-C5A3-437F-A6F3-068ABCD8C85E)
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\(08635077-8829-49E2-B338-C968817EB460)
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\(20A3F109-F7C1-47B4-8098-8E654B264B1D)
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\(2EECD738-5844-4A99-B4B6-146BF802613B)
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\(3C471948-F874-49F5-B338-4F214A2EE0B1)
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\(4B9BCCE8-A70B-402A-A7E1-DB96831EE26F)
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\(80922EE0-8A76-46AE-95D5-BD3C3FE0708D)
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\(8C7478AB-3155-463E-936F-55F91F0F10D0)
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\(96DD9437-5D20-4EFB-BF52-A4A605A4E0AA)
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\(D824F0DE-3D60-4F57-9EB1-66033ECD8ABB)
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\(E46C8196-B634-44A1-AF6E-957C64278AB1)
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\(F773BB94-6C19-4643-A570-0E429103D1C3)
Key Deleted : HKLM\SOFTWARE\Classes\IEHelperv250.WeCareReminder
Key Deleted : HKLM\SOFTWARE\Classes\IEHelperv250.WeCareReminder.1
Key Deleted : HKLM\SOFTWARE\Classes\Interface\(96DD9437-5D20-4EFB-BF52-A4A605A4E0AA)
Key Deleted : HKLM\SOFTWARE\Classes\Interface\(E2C1A522-B8E1-45D1-B316-F5625004A28C)
Key Deleted : HKLM\SOFTWARE\Classes\Interface\(F773BB94-6C19-4643-A570-0E429103D1C3)
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\QwiklinxBHO
Key Deleted : HKLM\SOFTWARE\Classes\QwiklinxBHO.1
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3281348
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\(204C0025-C26A-43E2-853C-D8A8EB1BCE51)
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\(B12920CF-BE13-4C09-890D-1B6EFFFE2FBE)
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\DataMngr
Related Discussions
Extremely slow start up
Q
Comments (29)
Zep, thank you so much for all you time and advise. I truly appreciate it. Can I ask you about the log I posted at 14:41 particularly the double entries? Acrobat.com Acrobat.com Ad-Aware Ad-Aware Adobe AIR Adobe AIR Corel Painter Photo Essentials 4 Corel Painter Photo Essentials 4 CyberLink DVD Suite CyberLink DVD Suite Google Toolbar for Internet Explorer Google Toolbar for Internet Explorer HP MediaSmart TV HP MediaSmart TV HP MediaSmart Webcam HP MediaSmart Webcam LabelPrint LabelPrint etc? Why are there doubles? I have to log off for the night, but if you have any more suggestions I will check back tomorrow. Thanks again. Carol
...See More
Now Troubleshooting DD's laptop - Soooo Slow
Q
Comments (16)
Here's the issue with firefox, FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=109936&tt=100512_2_ FF - user.js: extensions.BabylonToolbar_i.babExt - FF - user.js: extensions.BabylonToolbar_i.srcExt - ss FF - user.js: extensions.BabylonToolbar_i.id - b8457168000000000000bc7737387210 FF - user.js: extensions.BabylonToolbar_i.hardId - b8457168000000000000bc7737387210 FF - user.js: extensions.BabylonToolbar_i.instlDay - 15473 FF - user.js: extensions.BabylonToolbar_i.vrsn - 1.5.3.17 FF - user.js: extensions.BabylonToolbar_i.vrsni - 1.5.3.17 FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.5.3.1715:35:37 FF - user.js: extensions.BabylonToolbar_i.prtnrId - babylon FF - user.js: extensions.BabylonToolbar_i.prdct - BabylonToolbar FF - user.js: extensions.BabylonToolbar_i.aflt - babsst FF - user.js: extensions.BabylonToolbar_i.smplGrp - none FF - user.js: extensions.BabylonToolbar_i.tlbrId - tb9 FF - user.js: extensions.BabylonToolbar_i.instlRef - sst FF - user.js: network.protocol-handler.warn-external.dnupdate - false FF - user.js: browser.sessionstore.resume_from_crash - false We will be getting rid of that, by running the tools above.
...See More
Moving bookmark bar above tabs
Q
Comments (11)
Just a follow up on this problem. I still had the problem with Google in FF, it would not search so I did a system restore to a November date. When I got it updated again and things in order, the tabs were on the top again. I checked view before I went to the site DA recommended, low and behold the option "tabs on top" was there. The mysteries of the computer!
...See More
search engine
Q
Comments (9)
If you are using only malwarebytes and NO antivirus program you definitely need to install an antivirus program, the 2 are not the same at all. AVAST is an excellent free antivirus program, I have it on all of my windows machines. I also have malwarebytes malware scanner on all of them which I update and run the scan weekly. Please do not confuse the issue they are very different programs and do very different tasks. You need Both an AV and malware removal programs. Now clairdo you can not remove IE it is built into windows you will have one version of IE on the pc it may be 6,7 or 8. You should have the latest version of IE8 if you do not then you can go get it and install it, It is not possible to remove all versions of IE. You can use firefox and IE at the same time or you can choose some other browser like Opera or Chrome, you can have all of them at once. I would remove the browser defender and what ever program it is associated with, then once your browser is working properly you could consider if you want to re install that other program. It sounds like it is part of sypware doctor, remove that from add remove programs and see if your browsers work. it looks like from their website that it is an extension to firefox and IE this is how they suggest removing it Q. What if I donÃ¯Â¿Â½t want to use the toolbar? A. Disabling the toolbar will also remove your ability to view search safety mark-ups and threat notification. Depending on what browser you use, you can easily remove the toolbar in a few steps. Mozilla Firefox Select Tools/Add Ons/Extensions then select Ã¯Â¿Â½disableÃ¯Â¿Â½. Internet Explorer Right click on the PC Tools icon in the navigation bar, select Settings and then check to remove the Browser Defender Toolbar. Please Note: PC Tools Browser Guard & Browser Guard BHO will remain defaulted to Ã¯Â¿Â½enabledÃ¯Â¿Â½ and will to continue to protect you from web related exploits. Frequently asked questions there is more info on it there. open your IE browser and click on about IE to see what version it is.
...See More

Brothersft search engine & toolbar removal

Comments (2)

zep516

akdjfhg
Original Author

Related Discussions

COMPANY

BUSINESS SERVICES

GET HELP

CONNECT WITH US

Brothersft search engine & toolbar removal

Comments (2)

zep516

akdjfhgOriginal Author

Related Discussions

COMPANY

BUSINESS SERVICES

GET HELP

CONNECT WITH US

akdjfhg
Original Author