Solved: Reformat?

[rcarrosq]

I have a desktop computer which is 8 years old and running Vista Home Edition, 32bit. In the past few months it's gotten very slow and freezes or is nonresponsive if I try to do more than 1 thing at a time. I have 4G of ram installed. I've gone into MSConfig/Startup and disabled all the unnecessary programs from starting at bootup but that really hasn't helped the problem. I'm using Vipre as my antivirus.

I'm wondering if a reformat would help with this issue or if anyone knows if Vipre could be causing this slowdown. Also, I'm using a magicjack with this computer. When I got it last July I tried running it through my new Linksys router but I had problems so I plugged it directly into the back of my computer.

Does anybody have any ideas about how to make this computer run better? I've heard reformat MIGHT help but this might be a hardware issue. Any insight is welcome

 

[renegade600]

how full is your c drive on that computer? you need about 15-20 percent of your drive free for the computer to run efficiently. you can disable vipre to see if it is slowing down your computer.

 

[CleaverX]

Well you did not say that you have experienced errors, freezing, BSOD or other things. Check Task Manager and make sure the machine does see all of your 4gb or ram (well ok you are using 32bit so probably only sees 3.8Gb). Since you have an 8 year old installation a full refresh would be the thing to do, but it would not hurt to use a free rescue disk and test your hdd and ram for issues first.

 

[SpywareDr]

Windows.Microsoft.com > Speed up your PC

 

[rcarrosq]

Renegade ..... My HD is 500G and I have 256G space available. CleaverX... I do have freezing but no errors and have not had BSOD. Where can I get a free rescue disc?

 

[renegade600]

do you have any other antivirus installed on your computer but not running. if so uninstall them. you can also go to your event viewer and check the logs to see if are any errors.

http://windows.microsoft.com/en-us/windows/open-event-viewer#1TC=windows-7

 

[rcarrosq]

Renegade.... I have no other AV software installed except for Vipre. Prior to buying Viper I used to use the free version of AVG. I will take a look at the event viewer to see if I can find any info and if I don't I'm going to uninstall Viper and install AVG and see if that helps. If all else fails I'll look into the rescue disk option. Although I do have the installation discs from when I bought this PC I hate having to wipe everything and start over

 

[CleaverX]

You can get rescue disks online, sorry the moderators do not want us to provide the names, you will be able to boot the computer using the rescue disk and then you can test your hard drive and ram.
If everything checks out, start gathering all of your licenses and installation disks, then reinstall the OS from scratch, take about 48-72 hours to reinstall all the Windows Updates and Service Packs, make sure you also install all the latest drivers and all the applicable versions of the .Net framework. Then you can start reinstalling all of your software.

 

[flavallee]

A format and clean reinstall will give a computer a fresh start and breathe new life into it, but it's time-consuming and may not be necessary in your case.

Do the following in the order that they're listed.

----------------------------------------------------------

Download and save the TSG System Information Utility (SysInfo.exe) to the desktop.

After it's been downloaded and saved, double-click it to run it.

Information about your computer will appear.

Return here to your thread, then copy-and-paste the ENTIRE text here.

----------------------------------------------------------

Go here, then click the large blue "Download Now @ Bleeping Computer" button to download and save AdwCleaner.exe to your desktop.

Close all open windows first, then double-click AdwCleaner.exe to load its main window.

Click the "Scan" button, then allow the scanning process to finish.
(Note: Several seconds may pass before the scanning process starts, so be patient.)

Click the "Logfile" button.

When the log appears, save it.

Return here to your thread, then copy-and-paste the ENTIRE log here.

Note: After you submit the log, close AdwCleaner. When the warning appears, click "Yes".

----------------------------------------------------------

Go here, then click the large blue "Download Now @ Author's Site" button to download and save TFC.exe (Temp File Cleaner by OldTimer) to your desktop.

After it's downloaded and saved, close all open windows.

Double-click it to load its main window.

Click the "Start" button.

If there are a large number of temp files or if there are multiple user accounts, the temp file deletion process may appear to freeze and may take a few minutes, so don't interfere with or abort it.

After it's finished, restart the computer.

Note: Advise how many temp files in MB's appeared in red.

-----------------------------------------------------------

 

[rcarrosq]

Flavallee.....here is what I got from the sysinfo scan:

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft® Windows Vista™ Home Premium, Service Pack 2, 32 bit
Processor: Intel(R) Core(TM)2 CPU 6400 @ 2.13GHz, x64 Family 6 Model 15 Stepping 2
Processor Count: 2
RAM: 3069 Mb
Graphics Card: 256MB ATI Radeon X1300PRO, 5 Mb
Hard Drives: C: Total - 466643 MB, Free - 282444 MB; D: Total - 10239 MB, Free - 4148 MB;
Motherboard: Dell Inc., 0WG864
Antivirus: PC Cleaners, Updated: Yes, On-Demand Scanner: Disabled

This is what I got from AdwCleaner:
# AdwCleaner v4.201 - Logfile created 18/04/2015 at 11:43:36
# Updated 08/04/2015 by Xplode
# Database : 2015-04-08.1 [Local]
# Operating system : Windows Vista (TM) Home Premium Service Pack 2 (x86)
# Username : Rose - ROSE-PC
# Running from : C:\Users\Rose\Downloads\adwcleaner_4.201.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

File Found : C:\END
File Found : C:\Program Files\Mozilla Firefox\browser\nsprotector.js
File Found : C:\Program Files\Mozilla Firefox\browser\searchplugins\adawaretb.xml
File Found : C:\Program Files\Mozilla Firefox\browser\searchplugins\avg-secure-search.xml
File Found : C:\Program Files\Mozilla Firefox\defaults\pref\itms.js
File Found : C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_eekjldapjblgadclklmgolijbagmdnfk_0
File Found : C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eekjldapjblgadclklmgolijbagmdnfk_0.localstorage
File Found : C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eekjldapjblgadclklmgolijbagmdnfk_0.localstorage-journal
File Found : C:\Users\Rose\AppData\Roaming\Mozilla\Firefox\Profiles\p5ys3qlm.default-1404211710723\searchplugins\yahoo_ff.xml
File Found : C:\Users\Rose\AppData\Roaming\Mozilla\Firefox\Profiles\ssp3mwco.default\searchplugins\yahoo_ff.xml
Folder Found : C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Extensions\eekjldapjblgadclklmgolijbagmdnfk
Folder Found : C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Extensions\khopmdnhncdeojhcdpelanocficgdfng
Folder Found : C:\Users\Rose\AppData\Roaming\Mozilla\Firefox\Profiles\p5ys3qlm.default-1404211710723\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
Folder Found : C:\Users\Rose\AppData\Roaming\myturbopc.com
Folder Found : C:\Users\Rose\AppData\Roaming\SearchProtect

***** [ Scheduled tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Data Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local
Data Found : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local
Key Found : HKCU\Software\AppDataLow\Software\AVG Security Toolbar
Key Found : HKCU\Software\AppDataLow\Software\Conduit
Key Found : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Found : HKCU\Software\AppDataLow\Toolbar
Key Found : HKCU\Software\AVG Secure Search
Key Found : HKCU\Software\b1.org
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\Google\Chrome\Extensions\cflheckfmhopnialghigdlggahiomebp
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B81CDEFA-0E7F-4BC2-AB96-554612E975A4}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Coupon Printer for Windows5.0.0.7
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Yahoo! Companion
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}
Key Found : HKCU\Software\MyTurboPC.com
Key Found : HKCU\Software\systweak
Key Found : HKCU\Software\YahooPartnerToolbar
Key Found : HKLM\SOFTWARE\AVG Secure Search
Key Found : HKLM\SOFTWARE\AVG Security Toolbar
Key Found : HKLM\SOFTWARE\b1.org
Key Found : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Found : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Found : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Found : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Key Found : HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{81017EA9-9AA8-4A6A-9734-7AF40E7D593F}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{A43DE495-3D00-47D4-9D2C-303115707939}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}
Key Found : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Found : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Found : HKLM\SOFTWARE\Conduit
Key Found : HKLM\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar
Key Found : HKLM\SOFTWARE\Freeze.com
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\oejkcgajlodefenbbjdnaiahmbnnoole
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Coupon Printer for Windows5.0.0.7
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Companion
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Toolbar
Key Found : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Found : HKLM\SOFTWARE\MyTurboPC.com
Key Found : HKLM\SOFTWARE\SearchProtect
Key Found : HKLM\SOFTWARE\Uniblue
Key Found : HKU\.DEFAULT\Software\AVG Secure Search
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{CCC7A320-B3CA-4199-B1A6-9F516DD69829}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{CCC7A320-B3CA-4199-B1A6-9F516DD69829}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [[email protected]]

***** [ Web browsers ] *****

-\\ Internet Explorer v9.0.8112.16636


-\\ Mozilla Firefox v37.0.1 (x86 en-US)

[p5ys3qlm.default-1404211710723] - Line Found : user_pref("browser.search.selectedEngine", "Astromenda");
[p5ys3qlm.default-1404211710723] - Line Found : user_pref("extensions.dashlane.safesearchcapable", false);

-\\ Google Chrome v42.0.2311.90

[C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://isearch.avg.com/search?cid={ED67B7AC-EE5A-4380-A7C3-3B38A3889C76}&mid=9419344f7e56bd75a9307beff276b34d-0d08dd5024366781b0f8c28557ea645983727b17&lang=en&ds=AVG&pr=fr&d=2012-09-29 11:57:29&v=15.2.0.5&pid=avg&sg=0&sap=dsp&q={searchTerms}
[C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&CUI=UN13319229372108111&ctid=CT3289075&UM=2
[C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
[C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}
[C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Web data] - Found [Search Provider] : hxxp://www8.hp.com/us/en/hp-search/search-results.html?client=&qt={searchTerms}&search=&cc=us&charset=utf-8&hpa=hxxp%3A%2F%2Fwww.hp.com%2Fcountry%2Fus%2Fen%2Fcontact_us.html&hpn=Home&hpr=hxxp%3A%2F%2Fh41131.www4.hp.com%2Fus%2Fen&hps=Home&lang=en&qp=url%3Ah41131.www4.hp.com%2Fus%2Fen+url%3ANEW+URL+GOES+HERE
[C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Found [Extension] : eekjldapjblgadclklmgolijbagmdnfk
[C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Found [Extension] : khopmdnhncdeojhcdpelanocficgdfng
[C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Found [Startup_URLs] : hxxp://search.conduit.com/?ctid=CT3289075&SearchSource=48&CUI=UN13319229372108111&UM=2

*************************

AdwCleaner[R0].txt - [27096 bytes] - [24/09/2013 18:32:03]
AdwCleaner[R1].txt - [26500 bytes] - [25/09/2013 08:44:36]
AdwCleaner[R2].txt - [25066 bytes] - [25/09/2013 14:49:12]
AdwCleaner[R3].txt - [11552 bytes] - [18/04/2015 10:44:12]
AdwCleaner[R4].txt - [10687 bytes] - [18/04/2015 10:52:21]
AdwCleaner[R5].txt - [10747 bytes] - [18/04/2015 10:55:23]
AdwCleaner[R6].txt - [10433 bytes] - [18/04/2015 11:43:36]
AdwCleaner[S0].txt - [1116 bytes] - [24/09/2013 18:33:59]
AdwCleaner[S1].txt - [606 bytes] - [25/09/2013 08:50:29]
AdwCleaner[S2].txt - [343 bytes] - [25/09/2013 14:49:56]
AdwCleaner[S3].txt - [1142 bytes] - [18/04/2015 10:48:34]

########## EOF - C:\AdwCleaner\AdwCleaner[R6].txt - [10727 bytes] ##########

 

[rcarrosq]

On the TFC.exe program I never did see any temp files in red. Rather, this is what I got after running the scan:

Getting user folders.

Stopping running processes.

Emptying Temp folders.


User: All Users
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 56475 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: Public
User: ReleaseEngineer.MACROVISION
User: Rose
->Temp folder emptied: 24379645 bytes
->Temporary Internet Files folder emptied: 106405673 bytes
->Java cache emptied: 2008951 bytes
->FireFox cache emptied: 368883126 bytes
->Google Chrome cache emptied: 27158320 bytes
->Apple Safari cache emptied: 0 bytes
->Flash cache emptied: 63215 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 1500281 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 5764429 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 742465 bytes
Emptying RecycleBin. Do not interrupt.
RecycleBin emptied: 21494 bytes
Process complete!
Total Files Cleaned = 512.00 mb

 

[valis]

flavallee; let me know if you want this moved.

 

[flavallee]

Motherboard: Dell Inc., 0WG864

Your computer appears to be a Dell Dimension E520 desktop.

Is that correct?

-----------------------------------------------------------

Total Files Cleaned = 512.00 mb

TFC.exe found and deleted 512 MB of temp files.

-----------------------------------------------------------

AdwCleaner confirmed your computer is infested with malware, spyware, etc..

Close all open windows first, then double-click AdwCleaner to load its main window.

Click the "Scan" button, then allow the scanning process to finish.

Click the "Cleaning" button, then click "OK".

Allow the cleaning process to finish.

When it's finished, click "OK" in each window that appears.

The computer will restart.

When the log appears during restart, save it.

Return here to your thread, then copy-and-paste the ENTIRE log here.

-----------------------------------------------------------

 

[flavallee]

flavallee; let me know if you want this moved.

Will do.

-----------------------------------------------------------

 

[rcarrosq]

Ran AdwCleaner again as instructed and here is the results below. Also, yes my PC is a Dell Dimension E520

# AdwCleaner v4.201 - Logfile created 19/04/2015 at 11:47:11
# Updated 08/04/2015 by Xplode
# Database : 2015-04-08.1 [Local]
# Operating system : Windows Vista (TM) Home Premium Service Pack 2 (x86)
# Username : Rose - ROSE-PC
# Running from : C:\Users\Rose\Desktop\adwcleaner_4.201.exe
# Option : Cleaning

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Users\Rose\AppData\Roaming\SearchProtect
Folder Deleted : C:\Users\Rose\AppData\Roaming\myturbopc.com
Folder Deleted : C:\Users\Rose\AppData\Roaming\Mozilla\Firefox\Profiles\p5ys3qlm.default-1404211710723\Extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
Folder Deleted : C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Extensions\eekjldapjblgadclklmgolijbagmdnfk
Folder Deleted : C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Extensions\khopmdnhncdeojhcdpelanocficgdfng
File Deleted : C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eekjldapjblgadclklmgolijbagmdnfk_0.localstorage
File Deleted : C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eekjldapjblgadclklmgolijbagmdnfk_0.localstorage-journal
File Deleted : C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_eekjldapjblgadclklmgolijbagmdnfk_0
File Deleted : C:\END
File Deleted : C:\Program Files\Mozilla Firefox\browser\nsprotector.js
File Deleted : C:\Program Files\Mozilla Firefox\browser\searchplugins\adawaretb.xml
File Deleted : C:\Program Files\Mozilla Firefox\browser\searchplugins\avg-secure-search.xml
File Deleted : C:\Users\Rose\AppData\Roaming\Mozilla\Firefox\Profiles\p5ys3qlm.default-1404211710723\searchplugins\yahoo_ff.xml
File Deleted : C:\Users\Rose\AppData\Roaming\Mozilla\Firefox\Profiles\ssp3mwco.default\searchplugins\yahoo_ff.xml
File Deleted : C:\Program Files\Mozilla Firefox\defaults\pref\itms.js

***** [ Scheduled tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [[email protected]]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\oejkcgajlodefenbbjdnaiahmbnnoole
Key Deleted : HKCU\Software\Google\Chrome\Extensions\cflheckfmhopnialghigdlggahiomebp
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A43DE495-3D00-47D4-9D2C-303115707939}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{81017EA9-9AA8-4A6A-9734-7AF40E7D593F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{CCC7A320-B3CA-4199-B1A6-9F516DD69829}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{CCC7A320-B3CA-4199-B1A6-9F516DD69829}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B81CDEFA-0E7F-4BC2-AB96-554612E975A4}
Key Deleted : HKCU\Software\AVG Secure Search
Key Deleted : HKCU\Software\b1.org
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\systweak
Key Deleted : HKCU\Software\YahooPartnerToolbar
Key Deleted : HKCU\Software\MyTurboPC.com
Key Deleted : HKCU\Software\AppDataLow\Toolbar
Key Deleted : HKCU\Software\AppDataLow\Software\AVG Security Toolbar
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKLM\SOFTWARE\AVG Secure Search
Key Deleted : HKLM\SOFTWARE\AVG Security Toolbar
Key Deleted : HKLM\SOFTWARE\b1.org
Key Deleted : HKLM\SOFTWARE\Conduit
Key Deleted : HKLM\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar
Key Deleted : HKLM\SOFTWARE\Freeze.com
Key Deleted : HKLM\SOFTWARE\SearchProtect
Key Deleted : HKLM\SOFTWARE\Uniblue
Key Deleted : HKLM\SOFTWARE\MyTurboPC.com
Key Deleted : HKU\.DEFAULT\Software\AVG Secure Search
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Toolbar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Companion
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Coupon Printer for Windows5.0.0.7
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Yahoo! Companion
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Coupon Printer for Windows5.0.0.7
Data Deleted : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local
Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local

***** [ Web browsers ] *****

-\\ Internet Explorer v9.0.8112.16636


-\\ Mozilla Firefox v37.0.1 (x86 en-US)

[p5ys3qlm.default-1404211710723\prefs.js] - Line Deleted : user_pref("browser.search.selectedEngine", "Astromenda");
[p5ys3qlm.default-1404211710723\prefs.js] - Line Deleted : user_pref("extensions.dashlane.safesearchcapable", false);

-\\ Google Chrome v42.0.2311.90

[C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://isearch.avg.com/search?cid={ED67B7AC-EE5A-4380-A7C3-3B38A3889C76}&mid=9419344f7e56bd75a9307beff276b34d-0d08dd5024366781b0f8c28557ea645983727b17&lang=en&ds=AVG&pr=fr&d=2012-09-29 11:57:29&v=15.2.0.5&pid=avg&sg=0&sap=dsp&q={searchTerms}
[C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&CUI=UN13319229372108111&ctid=CT3289075&UM=2
[C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
[C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}
[C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www8.hp.com/us/en/hp-search/search-results.html?client=&qt={searchTerms}&search=&cc=us&charset=utf-8&hpa=hxxp%3A%2F%2Fwww.hp.com%2Fcountry%2Fus%2Fen%2Fcontact_us.html&hpn=Home&hpr=hxxp%3A%2F%2Fh41131.www4.hp.com%2Fus%2Fen&hps=Home&lang=en&qp=url%3Ah41131.www4.hp.com%2Fus%2Fen+url%3ANEW+URL+GOES+HERE
[C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Deleted [Extension] : eekjldapjblgadclklmgolijbagmdnfk
[C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Deleted [Extension] : khopmdnhncdeojhcdpelanocficgdfng
[C:\Users\Rose\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Deleted [Startup_URLs] : hxxp://search.conduit.com/?ctid=CT3289075&SearchSource=48&CUI=UN13319229372108111&UM=2

*************************

AdwCleaner[R0].txt - [27096 bytes] - [24/09/2013 18:32:03]
AdwCleaner[R1].txt - [26500 bytes] - [25/09/2013 08:44:36]
AdwCleaner[R2].txt - [25066 bytes] - [25/09/2013 14:49:12]
AdwCleaner[R3].txt - [11552 bytes] - [18/04/2015 10:44:12]
AdwCleaner[R4].txt - [10687 bytes] - [18/04/2015 10:52:21]
AdwCleaner[R5].txt - [10747 bytes] - [18/04/2015 10:55:23]
AdwCleaner[R6].txt - [10807 bytes] - [18/04/2015 11:43:36]
AdwCleaner[R7].txt - [10865 bytes] - [19/04/2015 11:42:16]
AdwCleaner[S0].txt - [1116 bytes] - [24/09/2013 18:33:59]
AdwCleaner[S1].txt - [606 bytes] - [25/09/2013 08:50:29]
AdwCleaner[S2].txt - [343 bytes] - [25/09/2013 14:49:56]
AdwCleaner[S3].txt - [1142 bytes] - [18/04/2015 10:48:34]
AdwCleaner[S4].txt - [11001 bytes] - [19/04/2015 11:47:11]

########## EOF - C:\AdwCleaner\AdwCleaner[S4].txt - [11061 bytes] ##########