Advertisement

There's no such thing as a stupid question, but they're the easiest to answer.
Login
Search

Advertisement

Virus & Other Malware Removal Virus & Other Malware Removal
Go to first new post Unable to use HJT
Go to first new post Files keep deleting themselves! NEED HEL ...
Go to first new post Trojan virus
Go to first new post Windows Update not working
Go to first new post Search Conduit Virus
Go to first new post Bsod!!!!
Go to first new post Infected with "Police Cybercrime In ...
Go to first new post virus n error loading problem
Go to first new post Please check my log...Computer running S ...
Go to first new post Memory upgrade problems.
Go to first new post Browser & other programs running slo ...
Go to first new post Computer Crime and Intellectual Property ...
Go to first new post Unable to turn on Windows Security Centr ...
Go to first new post only command prompt apears on boot
Go to first new post Browser shutdown
Search Search
Search for:
Tech Support Guy Forums > > >

Solved: Lavasoft securesearch


(!)

Reply
Page 1 of 3 1 23
red43560's Avatar
Member with 22 posts.
THREAD STARTER
  
Join Date: Mar 2013
06-Mar-2013, 09:25 PM #1
Lavasoft securesearch
As I upgraded versions of Lavasoft adware I unchecked the box to add the SecureSearch toolbar....but now I have it. Unfortunately, I already attempted to uninstall and delete files and run anti malware and antivirus software. So what would you suggest now? Thank you.
red43560's Avatar
Member with 22 posts.
THREAD STARTER
  
Join Date: Mar 2013
10-Mar-2013, 09:59 AM #2
bump
bump
red43560's Avatar
Member with 22 posts.
THREAD STARTER
  
Join Date: Mar 2013
11-Mar-2013, 12:59 PM #3
Bump
Bump
red43560's Avatar
Member with 22 posts.
THREAD STARTER
  
Join Date: Mar 2013
12-Mar-2013, 10:26 PM #4
Bump
Bump
dvk01's Avatar
dvk01   (Derek) dvk01 is offline dvk01 is authorized to help remove malware.
Moderator & Malware Removal Specialist with 42,933 posts.
  
Join Date: Dec 2002
Location: Loughton, Essex, UK
13-Mar-2013, 08:47 AM #5
Please download AdwCleaner to your desktop.
  • Double click the adwcleaner.exe to run the tool.
  • Click Search.
  • When the scan finished, a notepad window will be opened.
  • Please post the contents here in your topic.
  • The logfile will also be saved in C:\AdwCleaner[R1].txt.
red43560's Avatar
Member with 22 posts.
THREAD STARTER
  
Join Date: Mar 2013
13-Mar-2013, 08:53 PM #6
ADWCleaner results
# AdwCleaner v2.114 - Logfile created 03/13/2013 at 20:51:36
# Updated 05/03/2013 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Chris - CHRISNOTEBOOK
# Boot Mode : Normal
# Running from : C:\Documents and Settings\Chris\Desktop\AdwCleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

Folder Found : C:\Documents and Settings\All Users\Application Data\search protection
Folder Found : C:\Documents and Settings\Chris\Application Data\PriceGong
Folder Found : C:\Documents and Settings\Chris\Local Settings\Application Data\Conduit
Folder Found : C:\Documents and Settings\Chris\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla
Folder Found : C:\Program Files\Conduit

***** [Registry] *****

Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKCU\Software\PriceGong
Key Found : HKCU\Software\SmartBar
Key Found : HKLM\Software\AVG Secure Search
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Found : HKLM\SOFTWARE\Classes\Conduit.Engine
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT2790392
Key Found : HKLM\Software\Conduit
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKU\S-1-5-21-3919648721-3038869406-929393948-1006\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}
Key Found : HKU\S-1-5-21-3919648721-3038869406-929393948-1006\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.6001.18702

[OK] Registry is clean.

-\\ Google Chrome v25.0.1364.152

File : C:\Documents and Settings\Chris\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

Found [l.65] : search_url = "hxxp://lavasoft.blekko.com/ws/?source=f439e2c0&tbp=rbox&toolbarid=adawaretb&u=472D5C3109B5DBDCE2CBED5135D 96D9F&q={searchTerms}",

*************************

AdwCleaner[R1].txt - [2724 octets] - [13/03/2013 20:51:36]

########## EOF - C:\AdwCleaner[R1].txt - [2784 octets] ##########
dvk01's Avatar
dvk01   (Derek) dvk01 is offline dvk01 is authorized to help remove malware.
Moderator & Malware Removal Specialist with 42,933 posts.
  
Join Date: Dec 2002
Location: Loughton, Essex, UK
14-Mar-2013, 04:16 AM #7
Please run AdwCleaner again, This time press delete, It will clear the problems & then offer to reboot, please let it reboot & then post the log it makes.
The logfile will also be saved in C:\AdwCleaner[S1].txt
and tell us if that cured it
red43560's Avatar
Member with 22 posts.
THREAD STARTER
  
Join Date: Mar 2013
14-Mar-2013, 06:46 AM #8
Thank you! The search and delete worked.
# AdwCleaner v2.114 - Logfile created 03/14/2013 at 06:42:28
# Updated 05/03/2013 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Chris - CHRISNOTEBOOK
# Boot Mode : Normal
# Running from : C:\Documents and Settings\Chris\Desktop\AdwCleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

Folder Deleted : C:\Documents and Settings\All Users\Application Data\search protection
Folder Deleted : C:\Documents and Settings\Chris\Application Data\PriceGong
Folder Deleted : C:\Documents and Settings\Chris\Local Settings\Application Data\Conduit
Folder Deleted : C:\Documents and Settings\Chris\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla
Folder Deleted : C:\Program Files\Conduit

***** [Registry] *****

Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKCU\Software\PriceGong
Key Deleted : HKCU\Software\SmartBar
Key Deleted : HKLM\Software\AVG Secure Search
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2790392
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}

***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.6001.18702

[OK] Registry is clean.

-\\ Google Chrome v25.0.1364.152

File : C:\Documents and Settings\Chris\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

Deleted [l.65] : search_url = "hxxp://lavasoft.blekko.com/ws/?source=f439e2c0&tbp=rbox&toolbarid=adawaretb&u=4[...]

*************************

AdwCleaner[R1].txt - [2853 octets] - [14/03/2013 06:42:09]
AdwCleaner[S1].txt - [2478 octets] - [14/03/2013 06:42:28]

########## EOF - C:\AdwCleaner[S1].txt - [2538 octets] ##########
dvk01's Avatar
dvk01   (Derek) dvk01 is offline dvk01 is authorized to help remove malware.
Moderator & Malware Removal Specialist with 42,933 posts.
  
Join Date: Dec 2002
Location: Loughton, Essex, UK
14-Mar-2013, 07:21 AM #9
Has that solved your problem
red43560's Avatar
Member with 22 posts.
THREAD STARTER
  
Join Date: Mar 2013
14-Mar-2013, 07:20 PM #10
Yes, thank you...all appears to be back to normal!
red43560's Avatar
Member with 22 posts.
THREAD STARTER
  
Join Date: Mar 2013
14-Mar-2013, 07:22 PM #11
Ooops!
Just did another search and it's back! Help!!
red43560's Avatar
Member with 22 posts.
THREAD STARTER
  
Join Date: Mar 2013
14-Mar-2013, 07:31 PM #12
ADWCleaner results
I ran the cleaner again and this was the result:

# AdwCleaner v2.114 - Logfile created 03/14/2013 at 19:26:54
# Updated 05/03/2013 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Chris - CHRISNOTEBOOK
# Boot Mode : Normal
# Running from : C:\Documents and Settings\Chris\Desktop\AdwCleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****


***** [Registry] *****


***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.6001.18702

[OK] Registry is clean.

-\\ Google Chrome v25.0.1364.172

File : C:\Documents and Settings\Chris\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

Deleted [l.65] : search_url = "hxxp://lavasoft.blekko.com/ws/?source=f439e2c0&tbp=rbox&toolbarid=adawaretb&u=4[...]

*************************

AdwCleaner[R1].txt - [2853 octets] - [14/03/2013 06:42:09]
AdwCleaner[R2].txt - [1098 octets] - [14/03/2013 19:26:21]
AdwCleaner[S1].txt - [2607 octets] - [14/03/2013 06:42:28]
AdwCleaner[S2].txt - [988 octets] - [14/03/2013 19:26:54]

########## EOF - C:\AdwCleaner[S2].txt - [1047 octets] ##########
red43560's Avatar
Member with 22 posts.
THREAD STARTER
  
Join Date: Mar 2013
14-Mar-2013, 07:37 PM #13
ran again
It came back again....

# AdwCleaner v2.114 - Logfile created 03/14/2013 at 19:33:15
# Updated 05/03/2013 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Chris - CHRISNOTEBOOK
# Boot Mode : Normal
# Running from : C:\Documents and Settings\Chris\Desktop\AdwCleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****


***** [Registry] *****


***** [Internet Browsers] *****

-\\ Internet Explorer v8.0.6001.18702

[OK] Registry is clean.

-\\ Google Chrome v25.0.1364.172

File : C:\Documents and Settings\Chris\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

Deleted [l.65] : search_url = "hxxp://lavasoft.blekko.com/ws/?source=f439e2c0&tbp=rbox&toolbarid=adawaretb&u=4[...]

*************************

AdwCleaner[R1].txt - [2853 octets] - [14/03/2013 06:42:09]
AdwCleaner[R2].txt - [1098 octets] - [14/03/2013 19:26:21]
AdwCleaner[R3].txt - [1218 octets] - [14/03/2013 19:32:30]
AdwCleaner[S1].txt - [2607 octets] - [14/03/2013 06:42:28]
AdwCleaner[S2].txt - [1116 octets] - [14/03/2013 19:26:54]
AdwCleaner[S3].txt - [1108 octets] - [14/03/2013 19:33:15]

########## EOF - C:\AdwCleaner[S3].txt - [1168 octets] ##########
dvk01's Avatar
dvk01   (Derek) dvk01 is offline dvk01 is authorized to help remove malware.
Moderator & Malware Removal Specialist with 42,933 posts.
  
Join Date: Dec 2002
Location: Loughton, Essex, UK
15-Mar-2013, 04:31 AM #14
is it only happening in chrome or in all browsers
if it is just in chrome then

The only likely cure is going to be uninstall chrome, make sure you take the option to remove all user data.
first make sure that you are not set up to sync chrome with your google account, if you are, set it to stop sync first ( otherwise the backups on your google account will reinstall the malware).
Then reboot & reinstall chrome
__________________
Derek Microsoft MVP/Windows - Security | Thespykiller
Find out all about the European Wild Hedgehog, what you can do to save it from extinction Hedgehog Rescue
red43560's Avatar
Member with 22 posts.
THREAD STARTER
  
Join Date: Mar 2013
15-Mar-2013, 06:04 AM #15
Is happening in both Chrome and Explorer, the only two browsers that I have installed. Suggestions?
Email This Email  Print This Print  Tweet This Send to Facebook Send to MySpace Send to StumbleUpon Digg This | More Services More
Reply
Page 1 of 3 1 23
As Seen On

BBC, Reader's Digest, PC Magazine, Today Show, Money Magazine
WELCOME TO TECH SUPPORT GUY!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join Today!

(clock)
THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!

« Previous Thread | Virus & Other Malware Removal | Next Thread »

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools


TECH SUPPORT GUY
WELCOME
FOLLOW US
 
You Are Using: Server ID
All times are GMT -4. The time now is 10:20 PM.
Advertisements do not imply our endorsement of that product or service.
Copyright © 1996 - 2013 TechGuy, Inc. All rights reserved. Privacy & Terms.

Trusted Website Back to the Top ↑