Results 1 to 8 of 8

Thread: Delta.Toolbar in Google Chrome

  1. #1
    Junior Member orssi's Avatar
    Join Date
    Sep 2013
    Location
    Surrey UK
    Posts
    8

    Smile Delta.Toolbar in Google Chrome

    Hi Trisha all 3 of my browsers I’ve previously checked tools, settings and control panel and removed any traces of delta toolbar. Delta toolbar only utilises chrome Version 29.0.1547.76 m.
    Since Saturday last 5 days ago Delta.Toolbar has not sent up any pop-ups in chrome. As chrome had decided itself to delete itself and re-install another version. I think google had decided to do that as I had sent them a screen shot of all the pop-ups that delta.toolbar had put out.

    I have Spybot S&D 2.1.

    Can’t include Spybots scan results. My pc on right click to copy to clipboard spybots results doesn’t work in this situ. It normally works fine. As two items are not being cleaned these are delta.toolbar. Please instruct if you want this info?
    Last night when I ran aswMBR.exe, a third of the way through the scan it shutdown and restarted my PC. Obviously, I re-started the scan and that’s the one I’ve posted.

    Thank you again for your help

    Orssi
    Attached Files Attached Files

  2. #2
    Emeritus-Security Expert
    Join Date
    Nov 2005
    Location
    Florida's SpaceCoast
    Posts
    15,208

    Default



    I moved your post to the malware removal forum, we just use the waiting room for you to let us know you where overlooked


    It looks like you just have some bogus toolbars installed, lets do this

    Please download AdwCleaner by Xplode and save to your Desktop.
    • Double click on AdwCleaner.exe to run the tool.
      Vista/Windows 7/8 users right-click and select Run As Administrator.
    • Click on the Scan button.
    • AdwCleaner will begin...be patient as the scan may take some time to complete.
    • After the scan has finished, click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
    • The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
    • Copy and paste the contents of that logfile in your next reply.
    • A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.
    Last edited by ken545; 2013-10-02 at 11:34.
    Microsoft MVP Consumer Security 2007-2008-2009-2010-2011-2012-2013-2014

    ERROR MESSAGE 386
    No KeyBoard Detected
    Press F1 To Continue

    Just a reminder that threads will be closed if no reply in 3 days.

  3. #3
    Emeritus-Security Expert
    Join Date
    Nov 2005
    Location
    Florida's SpaceCoast
    Posts
    15,208

    Default

    Hi, still with me , still need help ?
    Microsoft MVP Consumer Security 2007-2008-2009-2010-2011-2012-2013-2014

    ERROR MESSAGE 386
    No KeyBoard Detected
    Press F1 To Continue

    Just a reminder that threads will be closed if no reply in 3 days.

  4. #4
    Junior Member orssi's Avatar
    Join Date
    Sep 2013
    Location
    Surrey UK
    Posts
    8

    Default download AdwCleaner from your link

    Hi Ken: Thanks for your help. Had problem finding AdwCleaner to downloadfrom the link. spent 3hrs removing from my computer secure address bar gizmo. avg search that hijacked all 3 of my browsers and another going to rid me of all malware. none of this I had any choice or had choosen to download.
    I stress you check out the link yourself. Take it down or re-new it. Or make it clearer to find. I am going away early tomorrow morn. back on monday and don't have any time to spend on this reply to you. I will be downloading the AdwCleaner remotely and running it. before I leave. Good luck.

    Regards

    http://forums.spybot.info/showthread...661#post445661
    Last edited by tashi; 2013-10-04 at 05:56. Reason: Added link to previous topic

  5. #5
    Emeritus-Security Expert
    Join Date
    Nov 2005
    Location
    Florida's SpaceCoast
    Posts
    15,208

    Default

    If you would have put your mouse over the link its hot and would have taken you to the download page

    AdwCleaner by Xplode and save to your Desktop.

    http://www.bleepingcomputer.com/download/adwcleaner/ <--Here is is

    I will keep this thread open for you, see you when you return
    Microsoft MVP Consumer Security 2007-2008-2009-2010-2011-2012-2013-2014

    ERROR MESSAGE 386
    No KeyBoard Detected
    Press F1 To Continue

    Just a reminder that threads will be closed if no reply in 3 days.

  6. #6
    Junior Member orssi's Avatar
    Join Date
    Sep 2013
    Location
    Surrey UK
    Posts
    8

    Default Retreaved log from Adwcleaner.exe

    I had cleaned some items from the scan including delta toolbar. here is my logfie.

    # AdwCleaner v3.007 - Report created 09/10/2013 at 21:02:57
    # Updated 09/10/2013 by Xplode
    # Operating System : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
    # Username : Roy - RAYS-PC
    # Running from : C:\Users\Roy\Downloads\AdwCleaner.exe
    # Option : Clean

    ***** [ Services ] *****


    ***** [ Files / Folders ] *****

    [x] Not Deleted : C:\ProgramData\~0
    [x] Not Deleted : C:\ProgramData\Ask
    [x] Not Deleted : C:\ProgramData\boost_interprocess
    [x] Not Deleted : C:\ProgramData\ParetoLogic
    [x] Not Deleted : C:\Program Files\WebConnect
    Folder Deleted : C:\Program Files\My_Voucher_Codes
    Folder Deleted : C:\Program Files\Common Files\AVG Secure Search
    Folder Deleted : C:\Users\Roy\AppData\Local\AVG Secure Search
    [x] Not Deleted : C:\Users\Roy\AppData\Local\PackageAware
    [x] Not Deleted : C:\Users\Roy\AppData\Local\torch
    Folder Deleted : C:\Users\Roy\AppData\Local\My_Voucher_Codes
    [x] Not Deleted : C:\Users\Roy\AppData\LocalLow\Conduit
    Folder Deleted : C:\Users\Roy\AppData\LocalLow\Delta
    [x] Not Deleted : C:\Users\Roy\AppData\LocalLow\searchquband
    [x] Not Deleted : C:\Users\Roy\AppData\LocalLow\ShopperReports3
    Folder Deleted : C:\Users\Roy\AppData\LocalLow\My_Voucher_Codes
    [x] Not Deleted : C:\Users\Roy\AppData\Roaming\DriverCure
    [x] Not Deleted : C:\Users\Roy\AppData\Roaming\DSite
    [x] Not Deleted : C:\Users\Roy\AppData\Roaming\ParetoLogic
    [x] Not Deleted : C:\Users\Roy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\torch
    [x] Not Deleted : C:\Users\Roy\AppData\Local\Google\Chrome\User Data\Default\Extensions\kiplfnciaokpcennlkldkdaeaaomamof
    File Deleted : C:\Users\Roy\AppData\Local\Temp\Uninstall.exe
    File Deleted : C:\Windows\Tasks\DSite.job
    File Deleted : C:\Windows\System32\Tasks\DSite
    File Deleted : C:\Windows\System32\Tasks\QtraxPlayer

    ***** [ Shortcuts ] *****


    ***** [ Registry ] *****

    Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
    [x] Not Deleted : HKCU\Software\Mozilla\Firefox\Extensions [lfind@nijadsoft.net]
    [x] Not Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\kiplfnciaokpcennlkldkdaeaaomamof
    [x] Not Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DSite
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DA37771C-5761-408A-B000-74AC3BE04FFD}
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DA37771C-5761-408A-B000-74AC3BE04FFD}
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\QtraxPlayer
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{572332F3-F126-43C1-8A06-A4308B15537D}
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{572332F3-F126-43C1-8A06-A4308B15537D}
    [x] Not Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\grusskartencenter.com
    [x] Not Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\grusskartencenter.com
    [x] Not Deleted : HKCU\Toolbar
    [x] Not Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
    [x] Not Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
    [x] Not Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
    [x] Not Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
    [x] Not Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
    [x] Not Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
    [x] Not Deleted : HKLM\SOFTWARE\Classes\Prod.cap
    [x] Not Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
    [x] Not Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
    [x] Not Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
    [x] Not Deleted : HKLM\SOFTWARE\Classes\S
    [x] Not Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
    [x] Not Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
    [x] Not Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
    [x] Not Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ApnUpdater
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
    [x] Not Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
    [x] Not Deleted : HKCU\Software\a2d8dae76ab810
    [x] Not Deleted : HKLM\SOFTWARE\a2d8dae76ab810
    [x] Not Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT1971030
    [x] Not Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2336436
    [x] Not Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{058F0E48-61CA-4964-9FBA-1978A1BB060D}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{18F33C35-8EF2-40D7-8BA4-932B0121B472}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{865D7100-82C7-42F4-9C06-860DEC0871B2}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{15B9700D-F5B7-4D0A-AE43-9B5099836A58}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\CLSID\{C680ABC0-F407-40EC-B0AC-9D9A23B7F5E5}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\Interface\{0BF91075-F457-4A8B-99EF-140B52D2F22A}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\Interface\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\Interface\{37425600-CB21-49A0-8659-476FBAB0F8E8}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\Interface\{453DB0C5-F41C-4D97-8DD6-CC72ECD5F699}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\Interface\{4AFC07D0-59BB-46B8-B097-1A46E88EEF71}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\Interface\{6511CE4C-4722-40D0-AD3D-4AFA2F50978A}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\Interface\{83B2FE06-BA20-4F7D-96C6-6FC3A4E877D3}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\Interface\{9BEC9B38-BF39-4899-806E-A1C5DFEB60A2}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\Interface\{B32966A2-F7C2-4362-A6CF-399EC8B44110}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\Interface\{B86D82BF-D39F-439A-A07C-43EDDC6F6EA6}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\Interface\{DA6305B9-0869-4235-8C1D-533A65E639E5}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\Interface\{E6961C59-CFCE-4CCD-B794-BC78DB98413A}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\Interface\{F8B4EC8A-2407-4BE0-AEE2-0F430D65A90D}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
    [x] Not Deleted : HKLM\SOFTWARE\Classes\TypeLib\{F74E6442-E998-4144-AAF2-4D653061239A}
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{15B9700D-F5B7-4D0A-AE43-9B5099836A58}
    [x] Not Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
    [x] Not Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
    [x] Not Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
    [x] Not Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
    [x] Not Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
    [x] Not Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
    [x] Not Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{15B9700D-F5B7-4D0A-AE43-9B5099836A58}
    [x] Not Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
    [x] Not Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
    [x] Not Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
    [x] Not Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
    [x] Not Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
    [x] Not Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{15B9700D-F5B7-4D0A-AE43-9B5099836A58}
    [x] Not Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CCB69577-088B-4004-9ED8-FF5BCC83A039}
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CCB69577-088B-4004-9ED8-FF5BCC83A039}
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C680ABC0-F407-40EC-B0AC-9D9A23B7F5E5}
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B6}
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{25336ECB-63D2-4585-B7B3-9965D560EBB7}
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FDA8B18B-A318-4122-AAF0-6EE76D676A22}
    [x] Not Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
    [x] Not Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
    [x] Not Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8B63A8D6-BBED-4341-8867-790E5F524C96}
    [x] Not Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2102}
    [x] Not Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
    [x] Not Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6}
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2102}
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{99079A25-328F-4BD4-BE04-00955ACAA0A7}]
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{15B9700D-F5B7-4D0A-AE43-9B5099836A58}]
    [x] Not Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{30F9B915-B755-4826-820B-08FBA6BD249D}]
    [x] Not Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
    [x] Not Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D7E97865-918F-41E4-9CD0-25AB1C574CE8}]
    [x] Not Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{15B9700D-F5B7-4D0A-AE43-9B5099836A58}]
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{15B9700D-F5B7-4D0A-AE43-9B5099836A58}]
    [x] Not Deleted : HKCU\Software\DataMngr
    [x] Not Deleted : HKCU\Software\dsiteproducts
    [x] Not Deleted : HKCU\Software\ilivid
    [x] Not Deleted : HKCU\Software\ImInstaller
    [x] Not Deleted : HKCU\Software\InstallCore
    [x] Not Deleted : HKCU\Software\jZip
    [x] Not Deleted : HKCU\Software\ParetoLogic
    [x] Not Deleted : HKCU\Software\torch
    [x] Not Deleted : HKCU\Software\YahooPartnerToolbar
    Key Deleted : HKCU\Software\My_Voucher_Codes
    [x] Not Deleted : HKCU\Software\AppDataLow\Toolbar
    [x] Not Deleted : HKCU\Software\AppDataLow\Software\Conduit
    [x] Not Deleted : HKCU\Software\AppDataLow\Software\LyricsFinder
    [x] Not Deleted : HKCU\Software\AppDataLow\Software\searchqutoolbar
    [x] Not Deleted : HKCU\Software\AppDataLow\Software\ShopperReports3
    Key Deleted : HKCU\Software\AppDataLow\Software\My_Voucher_Codes
    Key Deleted : HKLM\Software\AVG Security Toolbar
    [x] Not Deleted : HKLM\Software\DataMngr
    [x] Not Deleted : HKLM\Software\ImInstaller
    [x] Not Deleted : HKLM\Software\ParetoLogic
    [x] Not Deleted : HKLM\Software\torch
    [x] Not Deleted : HKLM\Software\Vittalia
    Key Deleted : HKLM\Software\My_Voucher_Codes
    [x] Not Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\torch
    [x] Not Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\My_Voucher_Codes Toolbar
    [x] Not Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
    [x] Not Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}
    [x] Not Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
    [x] Not Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ShopperReportsSA
    [x] Not Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\torch
    [x] Not Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\WebConnect
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\My_Voucher_Codes Toolbar
    [x] Not Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
    [x] Not Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536

    ***** [ Browsers ] *****

    -\\ Internet Explorer v9.0.8112.16506


    -\\ Mozilla Firefox v24.0 (en-GB)

    [ File : C:\Users\Roy\AppData\Roaming\Mozilla\Firefox\Profiles\oh77v4ob.default-1380658783501\prefs.js ]


    -\\ Google Chrome v30.0.1599.69

    [ File : C:\Users\Roy\AppData\Local\Google\Chrome\User Data\Default\preferences ]

    Deleted : icon_url

    *************************

    AdwCleaner[R0].txt - [17098 octets] - [09/10/2013 20:09:09]
    AdwCleaner[S0].txt - [17891 octets] - [09/10/2013 21:02:57]

    ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [17952 octets] ##########

  7. #7
    Emeritus-Security Expert
    Join Date
    Nov 2005
    Location
    Florida's SpaceCoast
    Posts
    15,208

    Default

    Hi,

    Why did you not remove these ?


    This is not malware but a very inferior search engine
    C:\ProgramData\Ask

    These will serve up adds and other stuff and are garbage and need to be removed, they fall somewhere in the grey zone
    C:\Program Files\WebConnect
    C:\Users\Roy\AppData\LocalLow\searchquband
    C:\Users\Roy\AppData\LocalLow\Conduit
    C:\Users\Roy\AppData\LocalLow\ShopperReports3
    [x] Not Deleted : HKCU\Software\DataMngr
    [x] Not Deleted : HKCU\Software\dsiteproducts
    [x] Not Deleted : HKCU\Software\ilivid
    [x] Not Deleted : HKCU\Software\ImInstaller
    [x] Not Deleted : HKCU\Software\InstallCore



    Double click on AdwCleaner.exe to run the tool again.
    • Click on the Scan button.
    • AdwCleaner will begin to scan your computer like it did before.
    • After the scan has finished...
    • This time, click on the Clean button.
    • Press OK when asked to close all programs and follow the onscreen prompts.
    • Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
    • After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
    • Copy and paste the contents of that logfile in your next reply.
    • A copy of that logfile will also be saved in the C:\AdwCleaner folder.





    Please download Junkware Removal Tool to your desktop.
    • Shut down your protection software now to avoid potential conflicts.
    • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
    • The tool will open and start scanning your system.
    • Please be patient as this can take a while to complete depending on your system's specifications.
    • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
    • Post the contents of JRT.txt into your next message.
    Microsoft MVP Consumer Security 2007-2008-2009-2010-2011-2012-2013-2014

    ERROR MESSAGE 386
    No KeyBoard Detected
    Press F1 To Continue

    Just a reminder that threads will be closed if no reply in 3 days.

  8. #8
    Emeritus-Security Expert
    Join Date
    Nov 2005
    Location
    Florida's SpaceCoast
    Posts
    15,208

    Default

    Due to inactivity, this thread will now be closed.

    If it has been three days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a new DDS log with a link to your previous thread. Please do not add any logs that might have been requested in the closed topic, you would be starting fresh.
    Microsoft MVP Consumer Security 2007-2008-2009-2010-2011-2012-2013-2014

    ERROR MESSAGE 386
    No KeyBoard Detected
    Press F1 To Continue

    Just a reminder that threads will be closed if no reply in 3 days.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •