# AdwCleaner v2.115 - Logfile created 03/28/2013 at 21:45:52 # Updated 17/03/2013 by Xplode # Operating system : Windows Vista (TM) Business Service Pack 2 (32 bits) # User : Judy - JUDY-PC # Boot Mode : Normal # Running from : C:\Users\Judy\Desktop\adwcleaner.exe # Option [Delete] ***** [Services] ***** Stopped & Deleted : CltMngSvc ***** [Files / Folders] ***** Deleted on reboot : C:\Users\Judy\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndeiekmdhemaggmkgljlpdeaomeplbp File Deleted : \END File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\SearchResults.xml File Deleted : C:\user.js File Deleted : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\searchplugins\Askcom.xml File Deleted : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\searchplugins\BrowserProtect.xml File Deleted : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\searchplugins\delta.xml File Deleted : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\searchplugins\SearchResults.xml Folder Deleted : C:\Program Files\Conduit Folder Deleted : C:\Program Files\hdvidcodec.com Folder Deleted : C:\Program Files\Movie2KDownloader.com Folder Deleted : C:\Program Files\Qwiklinx Folder Deleted : C:\Program Files\SearchProtect Folder Deleted : C:\Program Files\Windows Searchqu Toolbar Folder Deleted : C:\ProgramData\~0 Folder Deleted : C:\ProgramData\Babylon Folder Deleted : C:\ProgramData\blekko toolbars Folder Deleted : C:\ProgramData\boost_interprocess Folder Deleted : C:\ProgramData\Tarma Installer Folder Deleted : C:\ProgramData\WeCareReminder Folder Deleted : C:\Users\Judy\AppData\Local\Conduit Folder Deleted : C:\Users\Judy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blaofbhgbmeikidhlkmjhbkbfohpgekf Folder Deleted : C:\Users\Judy\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnfaglepmjgohnkcoieaijlheabmcdeo Folder Deleted : C:\Users\Judy\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde Folder Deleted : C:\Users\Judy\AppData\Local\Google\Chrome\User Data\Default\Extensions\jndeiekmdhemaggmkgljlpdeaomeplbp Folder Deleted : C:\Users\Judy\AppData\Local\Google\Chrome\User Data\Default\Extensions\niapdbllcanepiiimjjndipklodoedlc Folder Deleted : C:\Users\Judy\AppData\Local\PackageAware Folder Deleted : C:\Users\Judy\AppData\Local\Temp\CT3281348 Folder Deleted : C:\Users\Judy\AppData\LocalLow\AskToolbar Folder Deleted : C:\Users\Judy\AppData\LocalLow\Conduit Folder Deleted : C:\Users\Judy\AppData\LocalLow\Delta Folder Deleted : C:\Users\Judy\AppData\Roaming\Babylon Folder Deleted : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\Conduit Folder Deleted : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\ConduitCommon Folder Deleted : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\ConduitEngine Folder Deleted : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\CT3281348 Folder Deleted : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\extensions\(6921B3CC-9935-4D28-9A83-B3D824210580) Folder Deleted : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\extensions\(94193c2f-e73f-4feb-b393-2b95f0a01430) Folder Deleted : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\extensions\staged Folder Deleted : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\extensions\wecarereminder@bryan Folder Deleted : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\jetpack Folder Deleted : C:\Users\Judy\AppData\Roaming\Mozilla\Firefox\Profiles\g264jafr.default\Smartbar Folder Deleted : C:\Users\Judy\AppData\Roaming\OpenCandy Folder Deleted : C:\Users\Judy\AppData\Roaming\Qwiklinx Folder Deleted : C:\Users\Judy\AppData\Roaming\SearchProtect Folder Deleted : C:\Users\Judy\Desktop\Programs\hdvidcodec.com ***** [Registry] ***** Key Deleted : HKCU\Software\1ClickDownload Key Deleted : HKCU\Software\5d538a8bb46eec10 Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar Key Deleted : HKCU\Software\AppDataLow\Software\xfin_portal Key Deleted : HKCU\Software\BabylonToolbar Key Deleted : HKCU\Software\Conduit Key Deleted : HKCU\Software\DataMngr Key Deleted : HKCU\Software\DataMngr_Toolbar Key Deleted : HKCU\Software\delta LTD Key Deleted : HKCU\Software\Google\Chrome\Extensions\jndeiekmdhemaggmkgljlpdeaomeplbp Key Deleted : HKCU\Software\Headlight Key Deleted : HKCU\Software\InstallCore Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\(0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9) Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\(9BB47C17-9C68-4BB3-B188-DD9AF0FD2102) Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\(15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693) Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\(2E497885-E60B-420A-832D-0148B392E058)_is1 Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\1ClickDownload Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SearchProtect Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\xfin_portal Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\(82E1477C-B154-48D3-9891-33D83C26BCD3) Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\(C1AF5FA5-852C-4C90-812E-A7F75E011D87) Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\(D824F0DE-3D60-4F57-9EB1-66033ECD8ABB) Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\(FD72061E-9FDE-484D-A58A-0BAB4151CAD8) Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\(82E1477C-B154-48D3-9891-33D83C26BCD3) Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\(9D425283-D487-4337-BAB6-AB8354A81457) Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\(C1AF5FA5-852C-4C90-812E-A7F75E011D87) Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\(D824F0DE-3D60-4F57-9EB1-66033ECD8ABB) Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\(DF7770F7-832F-4BDF-B144-100EDDD0C3AE) Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\(FD72061E-9FDE-484D-A58A-0BAB4151CAD8) Key Deleted : HKCU\Software\Qwiklinx Key Deleted : HKCU\Software\SearchCore for Browsers Key Deleted : HKCU\Software\SearchProtect Key Deleted : HKCU\Software\wecarereminder Key Deleted : HKCU\Software\Zugo Key Deleted : HKLM\SOFTWARE\5d538a8bb46eec10 Key Deleted : HKLM\Software\Babylon Key Deleted : HKLM\SOFTWARE\Classes\AppID\(49BC4DD1-0E69-4611-9164-0009538C5E46) Key Deleted : HKLM\SOFTWARE\Classes\AppID\(4FBBF769-ECEB-420A-B536-133B1D505C36) Key Deleted : HKLM\SOFTWARE\Classes\AppID\(608D3067-77E8-463D-9084-908966806826) Key Deleted : HKLM\SOFTWARE\Classes\AppID\(BDB69379-802F-4EAF-B541-F8DE92DD98DB) Key Deleted : HKLM\SOFTWARE\Classes\AppID\(C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3) Key Deleted : HKLM\SOFTWARE\Classes\AppID\IEHelperv2.5.0.DLL Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1 Key Deleted : HKLM\SOFTWARE\Classes\CLSID\(0214A12B-C5A3-437F-A6F3-068ABCD8C85E) Key Deleted : HKLM\SOFTWARE\Classes\CLSID\(08635077-8829-49E2-B338-C968817EB460) Key Deleted : HKLM\SOFTWARE\Classes\CLSID\(20A3F109-F7C1-47B4-8098-8E654B264B1D) Key Deleted : HKLM\SOFTWARE\Classes\CLSID\(2EECD738-5844-4A99-B4B6-146BF802613B) Key Deleted : HKLM\SOFTWARE\Classes\CLSID\(3C471948-F874-49F5-B338-4F214A2EE0B1) Key Deleted : HKLM\SOFTWARE\Classes\CLSID\(4B9BCCE8-A70B-402A-A7E1-DB96831EE26F) Key Deleted : HKLM\SOFTWARE\Classes\CLSID\(80922EE0-8A76-46AE-95D5-BD3C3FE0708D) Key Deleted : HKLM\SOFTWARE\Classes\CLSID\(8C7478AB-3155-463E-936F-55F91F0F10D0) Key Deleted : HKLM\SOFTWARE\Classes\CLSID\(96DD9437-5D20-4EFB-BF52-A4A605A4E0AA) Key Deleted : HKLM\SOFTWARE\Classes\CLSID\(D824F0DE-3D60-4F57-9EB1-66033ECD8ABB) Key Deleted : HKLM\SOFTWARE\Classes\CLSID\(E46C8196-B634-44A1-AF6E-957C64278AB1) Key Deleted : HKLM\SOFTWARE\Classes\CLSID\(F773BB94-6C19-4643-A570-0E429103D1C3) Key Deleted : HKLM\SOFTWARE\Classes\IEHelperv250.WeCareReminder Key Deleted : HKLM\SOFTWARE\Classes\IEHelperv250.WeCareReminder.1 Key Deleted : HKLM\SOFTWARE\Classes\Interface\(96DD9437-5D20-4EFB-BF52-A4A605A4E0AA) Key Deleted : HKLM\SOFTWARE\Classes\Interface\(E2C1A522-B8E1-45D1-B316-F5625004A28C) Key Deleted : HKLM\SOFTWARE\Classes\Interface\(F773BB94-6C19-4643-A570-0E429103D1C3) Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap Key Deleted : HKLM\SOFTWARE\Classes\QwiklinxBHO Key Deleted : HKLM\SOFTWARE\Classes\QwiklinxBHO.1 Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3281348 Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\(204C0025-C26A-43E2-853C-D8A8EB1BCE51) Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\(B12920CF-BE13-4C09-890D-1B6EFFFE2FBE) Key Deleted : HKLM\Software\Conduit Key Deleted : HKLM\Software\DataMngr

RC, I did a system restore early on;in fact did it twice with different dates. Message said there were no changes. So I went to Bob's link, found a download box, clicked on it and nothing happened. I also saw this there: Visit the Firefox download page in any browser (e.g. Microsoft Internet Explorer). The page will automatically recommend the best version(s) of Firefox for you. I went there, didn't see anything like a recommendation. I did see a download box, clicked on it, but nothing happened. There were illustrations and instructions, but nothing live to click on. So I am back where I started. There has got to be a way to do this. But what, where? Thanks. Sue

Please look in your add/remove programs list for anything funny you may find these or simular types if so remove them: *Connect MFC Application *FunWeb *FunWebProducts *MyWay.MyWebSearch *MyWebSearch You may want to run: (spybot search & destroy) & ccleaner, these can find these by Google--You may also want to run Superantispyware if these instructions fail sounds like you picked up some ad-ware

poohbear please follow up, for additional clean up measures. note Drive C: : 232.88 Gb Total Space : 44.83 Gb Free Space : 19.25% Space Free : Partition Type: NTFS You're running out of free space! Windows needs 20% or more to run efficently. Please run OTL again. Under the Custom Scans/Fixes box at the bottom paste in the following text between the stars ********************************************************* :otl FF - prefs.js..extensions.enabledAddons: download_YouTube_ghribi@gmail.com:1.0.0 @Alternate Data Stream - 182 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:408F95E5 @Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C8B8CEBD @Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C31F31E6 :Files ipconfig /flushdns /c :commands [CreateRestorePoint] [emptytemp] [purity] ************************************************************ Then click the Run Fix button at the top Let the program run unhindered, reboot the PC when it is done Open OTL again and click the Quick Scan button. Post the log it produces in your next reply. Post that directly to the forum.