Need Help removing DOSEARCHES

[ken545]

Its in your Add Remove list, I think I would uninstall it

[JD the DJ]

A popup appears with mostly a blank page
upper left a title : 'Uninstall Manager'
upper right : an 'x' button
lower left: blue highlighted text that can be clicked 'Remove this program from Add/Remove list'
lower right: a button labelled 'Close'

[ken545]

Before you run this fix with OTL, make sure to do another registry backup with ERUNT

Open OTL.exe

• Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL
  
  

  :OTL
  C:\Users\Dana\AppData\Roaming\0D0S1L2Z1P1B\Zip Extractor Packages\uninstaller.exe
  
  :Services
  
  :Reg
  [-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Zip Extractor Packages]
  [-HKEY_USERS\S-1-5-21-899990179-4107465522-2500062467-1001\Software\Microsoft\Windows\CurrentVersion\Uninstall\Zip Extractor Packages]
  
  
  :Files
  ipconfig /flushdns /c
  
  
  :Commands
  [purity]
  [emptytemp]
  [start explorer]
  [Reboot]

• Then click the Run Fix button at the top. <--Not run Scan
• Let the program run unhindered, reboot when it is done
• Then post the results of the log it produces

[JD the DJ]

OTL log file

All processes killed
========== OTL ==========
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
Registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Zip Extractor Packages\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-899990179-4107465522-2500062467-1001\Software\Microsoft\Windows\CurrentVersion\Uninstall\Zip Extractor Packages\ not found.
========== FILES ==========
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Users\Dana\Desktop\cmd.bat deleted successfully.
C:\Users\Dana\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Dana
->Temp folder emptied: 791161596 bytes
->Temporary Internet Files folder emptied: 7541198 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 1443304 bytes
->Google Chrome cache emptied: 8249584 bytes
->Flash cache emptied: 0 bytes

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 32524 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 771.00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 11292013_172628

Files\Folders moved on Reboot...
C:\Users\Dana\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Dana\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

[ken545]

Great, looks like your good to go

[JD the DJ]

Your help is greatly appreciated.

Thanks again!

[ken545]

Just looking over your log and I put this one in incorrectly, no biggie, just run another quick fix

Open OTL.exe

• Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL
  
  

  :OTL
  
  
  :Services
  
  :Reg
  
  :Files
  C:\Users\Dana\AppData\Roaming\0D0S1L2Z1P1B\Zip Extractor Packages\uninstaller.exec
  
  
  :Commands
  [purity]
  [emptytemp]
  [start explorer]
  [Reboot]

• Then click the Run Fix button at the top. <--Not run Scan
• Let the program run unhindered, reboot when it is done
• Then post the results of the log it produces

[JD the DJ]

I just deleted the folder '0D0S1L2Z1P1B' and all its contents and then emptied Recycle Bin.

contents of '0D0S1L2Z1P1B':
1 folder: 'Zip Extractor Packages'
1 file: 'uninstaller.exe' (located in the sub-folder 'Zip Extractor Packages' )

[ken545]

Good, your ahead of me


Open OTL and click on Clean Up and it will remove programs we used to clean your system along with there backups, any programs that where not removed you can just drag to the trash.


Malwarebytes is the free version and yours to keep and will not be removed

• How did I get infected in the first place ?
  Read these links and find out how to prevent getting infected again.
• Tutorial for System Restore <-- Do this first to prevent yourself from being reinfected.
• WhattheTech
• Grinler BleepingComputer
• GeeksTo Go
• Dslreports

Safe Surfn
Ken

[ken545]

Since this issue appears to be resolved ... this Topic has been closed. Glad I could help.