We’d like to remind Forumites to please avoid political debate on the Forum.

This is to keep it a safe and useful space for MoneySaving discussions. Threads that are – or become – political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.

📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!

MyWebSearch Hijack

13567

Comments

  • montymud
    montymud Posts: 1,015 Forumite
    Part of the Furniture Combo Breaker
    I just want to add a huge thank you waddler_8 for taking the considerable amount of time and effort to help me with this. I thought I was tech savvy before this, I have removed all sorts of things before but uhhh nope! Ihavent a clue about this one at all!
  • bod1467
    bod1467 Posts: 15,214 Forumite
    Has the problem now gone?
  • montymud
    montymud Posts: 1,015 Forumite
    Part of the Furniture Combo Breaker
    No, it is a persistant little nusance!
  • waddler_8
    waddler_8 Posts: 3,588 Forumite
    montymud wrote: »
    No, it is a persistant little nusance!
    Can you describe exactly what's happening?

    Malwarebytes targets MyWebSearch files - There were no detections.

    OTL shows browser settings for IE, Firefox & Chrome.

    The only MyWebSearch entry was found in Firefox's settings - This was successfully removed by the OTL script.
    Prefs.js: "My Web Search" removed from searchreset.backup.browser.search.defaultenginename
    Download AdwCleaner from the link below & save it to your desktop.

    LINK
    • Right click AdwCleaner.exe & chosse "Run as Administrator" to run it.
    • Click Search.
    • A logfile will automatically open after the scan has finished.
    • Close the adwCleaner window, click ok to the prompt.
    • Post the contents of that logfile with your next reply.
    • You can also find the logfile at C:\AdwCleaner[R1].txt.
  • montymud
    montymud Posts: 1,015 Forumite
    Part of the Furniture Combo Breaker
    Thank you again, Mywebsearch only hijacks the homepage, if I go to google.co.uk it is fine. results of scan to follow:
  • montymud
    montymud Posts: 1,015 Forumite
    Part of the Furniture Combo Breaker
    # AdwCleaner v2.007 - Logfile created 11/12/2012 at 23:55:31
    # Updated 06/11/2012 by Xplode
    # Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
    # User : Abbie - TURBOSPEED
    # Boot Mode : Normal
    # Running from : C:\Users\Abbie\Downloads\adwcleaner.exe
    # Option [Search]


    ***** [Services] *****


    ***** [Files / Folders] *****

    File Found : C:\Users\Abbie\AppData\Roaming\Mozilla\Firefox\Profiles\4ytq0hwq.default\searchplugins\Conduit.xml
    File Found : C:\Users\Public\Desktop\eBay.lnk
    Folder Found : C:\Program Files (x86)\Conduit
    Folder Found : C:\ProgramData\Partner
    Folder Found : C:\Users\Abbie\AppData\Local\Conduit
    Folder Found : C:\Users\Abbie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dknkjnkhedbanphkkpbpcgoblmkbfhlf
    Folder Found : C:\Users\Abbie\AppData\LocalLow\Conduit
    Folder Found : C:\Users\Abbie\AppData\Roaming\Mozilla\Firefox\Profiles\4ytq0hwq.default\Smartbar

    ***** [Registry] *****

    Key Found : HKCU\Software\AppDataLow\Software\SmartBar
    Key Found : HKCU\Software\Conduit
    Key Found : HKCU\Software\Google\Chrome\Extensions\dknkjnkhedbanphkkpbpcgoblmkbfhlf
    Key Found : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
    Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3225826
    Key Found : HKLM\Software\Conduit
    Key Found : HKLM\Software\Iminent
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dknkjnkhedbanphkkpbpcgoblmkbfhlf
    Key Found : HKLM\SOFTWARE\Classes\Interface\{23119123-0854-469D-807A-171568457991}
    Key Found : HKLM\SOFTWARE\Software

    ***** [Internet Browsers] *****

    -\\ Internet Explorer v9.0.8112.16421

    [OK] Registry is clean.

    -\\ Mozilla Firefox v15.0 (en-GB)

    Profile name : default
    File : C:\Users\Abbie\AppData\Roaming\Mozilla\Firefox\Profiles\4ytq0hwq.default\prefs.js

    Found : user_pref("CT3225826.129298377185919347.isToggled_item0_12", "true");
    Found : user_pref("CT3225826.129887590378280857.APP_WIN_FEATURES", "resizable=0,saveresizedsize=0,titlebar=0[...]
    Found : user_pref("CT3225826.BT_Stats", "{\"last_log\":1346632029,\"uuid\":461052754108186,\"seq_id\":1,\"ss[...]
    Found : user_pref("CT3225826.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
    Found : user_pref("CT3225826.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
    Found : user_pref("CT3225826.FirstTime", "true");
    Found : user_pref("CT3225826.FirstTimeFF3", "true");
    Found : user_pref("CT3225826.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT322[...]
    Found : user_pref("CT3225826.UserID", "UN33693707714488256");
    Found : user_pref("CT3225826.addressBarTakeOverEnabledInHidden", "true");
    Found : user_pref("CT3225826.autoDisableScopes", -1);
    Found : user_pref("CT3225826.browser.search.defaultthis.engineName", "");
    Found : user_pref("CT3225826.cbcountry_001", "GB");
    Found : user_pref("CT3225826.cbfirsttime", "Mon Sep 03 2012 01:27:05 GMT+0100 (GMT Daylight Time)");
    Found : user_pref("CT3225826.embeddedsData", "[{\"appId\":\"129830626805552092\",\"apiPermissions\":{\"cross[...]
    Found : user_pref("CT3225826.enableAlerts", "always");
    Found : user_pref("CT3225826.enableSearchFromAddressBar", "true");
    Found : user_pref("CT3225826.firstTimeDialogOpened", "true");
    Found : user_pref("CT3225826.fixPageNotFoundError", "true");
    Found : user_pref("CT3225826.fixPageNotFoundErrorInHidden", "true");
    Found : user_pref("CT3225826.fixUrls", true);
    Found : user_pref("CT3225826.installId", "fft285F.tmp.exe");
    Found : user_pref("CT3225826.installType", "XPE");
    Found : user_pref("CT3225826.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
    Found : user_pref("CT3225826.isNewTabEnabled", true);
    Found : user_pref("CT3225826.isPerformedSmartBarTransition", "true");
    Found : user_pref("CT3225826.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"true\"}");
    Found : user_pref("CT3225826.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
    Found : user_pref("CT3225826.keyword", true);
    Found : user_pref("CT3225826.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"mpy kid dog days\",\"EB_MAIN_FRA[...]
    Found : user_pref("CT3225826.openThankYouPage", "true");
    Found : user_pref("CT3225826.openUninstallPage", "FALSE");
    Found : user_pref("CT3225826.search.searchAppId", "129830626805552092");
    Found : user_pref("CT3225826.search.searchCount", "2");
    Found : user_pref("CT3225826.searchInNewTabEnabledInHidden", "true");
    Found : user_pref("CT3225826.searchProtector.notifyChanges", "{\"dataType\":\"string\",\"data\":\"true\"}");
    Found : user_pref("CT3225826.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
    Found : user_pref("CT3225826.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
    Found : user_pref("CT3225826.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
    Found : user_pref("CT3225826.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
    Found : user_pref("CT3225826.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
    Found : user_pref("CT3225826.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
    Found : user_pref("CT3225826.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
    Found : user_pref("CT3225826.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data[...]
    Found : user_pref("CT3225826.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1346632021700");
    Found : user_pref("CT3225826.serviceLayer_services_appsMetadata_lastUpdate", "1346667624617");
    Found : user_pref("CT3225826.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1346632022374");
    Found : user_pref("CT3225826.serviceLayer_services_login_10.10.27.6_lastUpdate", "1346664818944");
    Found : user_pref("CT3225826.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1346632022448");
    Found : user_pref("CT3225826.serviceLayer_services_searchAPI_lastUpdate", "1346632020433");
    Found : user_pref("CT3225826.serviceLayer_services_serviceMap_lastUpdate", "1346632019787");
    Found : user_pref("CT3225826.serviceLayer_services_toolbarContextMenu_lastUpdate", "1346632022276");
    Found : user_pref("CT3225826.serviceLayer_services_toolbarSettings_lastUpdate", "1346667623203");
    Found : user_pref("CT3225826.serviceLayer_services_translation_lastUpdate", "1346632021659");
    Found : user_pref("CT3225826.settingsINI", true);
    Found : user_pref("CT3225826.shouldFirstTimeDialog", "false");
    Found : user_pref("CT3225826.smartbar.CTID", "CT3225826");
    Found : user_pref("CT3225826.smartbar.Uninstall", "1");
    Found : user_pref("CT3225826.smartbar.homepage", true);
    Found : user_pref("CT3225826.smartbar.toolbarName", "BitTorrentControl_v12 ");
    Found : user_pref("CT3225826.startPage", "userChanged");
    Found : user_pref("CT3225826.toolbarBornServerTime", "3-9-2012");
    Found : user_pref("CT3225826.toolbarCurrentServerTime", "3-9-2012");
    Found : user_pref("CT3225826.toolbarDisabled", "true");
    Found : user_pref("CT3225826.url_history0001", "hxxp://www.roblox.com/Welcome-To-Lakeside-TRAILER-place?id=7[...]
    Found : user_pref("Smartbar.ConduitHomepagesList", "");
    Found : user_pref("Smartbar.ConduitSearchEngineList", "BitTorrentControl_v12 Customized Web Search");
    Found : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3225826[...]
    Found : user_pref("Smartbar.keywordURLSelectedCTID", "CT3225826");

    -\\ Google Chrome v [Unable to get version]

    File : C:\Users\Abbie\AppData\Local\Google\Chrome\User Data\Default\Preferences

    Found [l.8] : homepage = "hxxp://search.conduit.com/?ctid=CT3225826&SearchSource=48",
    Found [l.12] : urls_to_restore_on_startup = [ "hxxp://search.conduit.com/?ctid=CT3225826&SearchSource=48" ]
    Found [l.39] : icon_url = "hxxp://search.conduit.com/fav.ico",
    Found [l.42] : keyword = "search.conduit.com",
    Found [l.45] : search_url = "hxxp://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&ctid=CT3225826",
    Found [l.46] : suggest_url = "hxxp://search.conduit.com/"
    Found [l.1460] : homepage = "hxxp://search.conduit.com/?ctid=CT3225826&SearchSource=48",
    Found [l.1676] : urls_to_restore_on_startup = [ "hxxp://search.conduit.com/?ctid=CT3225826&SearchSource=48" ]

    *************************

    AdwCleaner[R1].txt - [8763 octets] - [12/11/2012 23:55:31]

    ########## EOF - C:\AdwCleaner[R1].txt - [8823 octets] ##########
  • waddler_8
    waddler_8 Posts: 3,588 Forumite
    Lots of conduit related entries but none for MyWebSearch.
    montymud wrote: »
    Thank you again, Mywebsearch only hijacks the homepage, if I go to google.co.uk it is fine. results of scan to follow:

    Are we talking about firefox here?

    • Double-click OTL.exe to start the program.
    • Allow the UAC prompt
    • Copy and Paste all the following code into the customFix.png textbox. Do not include the word Code: 
      :otl
FF - prefs.js..browser.startup.homepage: "about:home"
    • Then click the Run Fix button at the top.
    • Click btnOK.png.
    • OTL may ask to reboot the machine. Click OK & allow it to do so if asked.
    • The report should appear in Notepad (after the reboot if required).
    • Copy and Paste that report in your next reply.
    Then:

    Run adwCleaner as before but this time choose delete, click ok to the prompt and allow the computer to reboot. The report should appear in Notepad after the reboot.Copy and Paste that report in your next reply.
  • montymud
    montymud Posts: 1,015 Forumite
    Part of the Furniture Combo Breaker
    OTL Report:

    ========== OTL ==========
    Prefs.js: "about:home" removed from browser.startup.homepage

    OTL by OldTimer - Version 3.2.69.0 log created on 11132012_093150
  • montymud
    montymud Posts: 1,015 Forumite
    Part of the Furniture Combo Breaker
    AdwCleaner Report:

    # AdwCleaner v2.007 - Logfile created 11/13/2012 at 09:35:24
    # Updated 06/11/2012 by Xplode
    # Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
    # User : Abbie - TURBOSPEED
    # Boot Mode : Normal
    # Running from : C:\Users\Abbie\Downloads\adwcleaner.exe
    # Option [Delete]


    ***** [Services] *****


    ***** [Files / Folders] *****

    File Deleted : C:\Users\Abbie\AppData\Roaming\Mozilla\Firefox\Profiles\4ytq0hwq.default\searchplugins\Conduit.xml
    File Deleted : C:\Users\Public\Desktop\eBay.lnk
    Folder Deleted : C:\Program Files (x86)\Conduit
    Folder Deleted : C:\ProgramData\Partner
    Folder Deleted : C:\Users\Abbie\AppData\Local\Conduit
    Folder Deleted : C:\Users\Abbie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dknkjnkhedbanphkkpbpcgoblmkbfhlf
    Folder Deleted : C:\Users\Abbie\AppData\LocalLow\Conduit
    Folder Deleted : C:\Users\Abbie\AppData\Roaming\Mozilla\Firefox\Profiles\4ytq0hwq.default\Smartbar

    ***** [Registry] *****

    Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
    Key Deleted : HKCU\Software\Conduit
    Key Deleted : HKCU\Software\Google\Chrome\Extensions\dknkjnkhedbanphkkpbpcgoblmkbfhlf
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
    Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3225826
    Key Deleted : HKLM\Software\Conduit
    Key Deleted : HKLM\Software\Iminent
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dknkjnkhedbanphkkpbpcgoblmkbfhlf
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23119123-0854-469D-807A-171568457991}
    Key Deleted : HKLM\SOFTWARE\Software

    ***** [Internet Browsers] *****

    -\\ Internet Explorer v9.0.8112.16421

    [OK] Registry is clean.

    -\\ Mozilla Firefox v15.0 (en-GB)

    Profile name : default
    File : C:\Users\Abbie\AppData\Roaming\Mozilla\Firefox\Profiles\4ytq0hwq.default\prefs.js

    C:\Users\Abbie\AppData\Roaming\Mozilla\Firefox\Profiles\4ytq0hwq.default\user.js ... Deleted !

    Deleted : user_pref("CT3225826.129298377185919347.isToggled_item0_12", "true");
    Deleted : user_pref("CT3225826.129887590378280857.APP_WIN_FEATURES", "resizable=0,saveresizedsize=0,titlebar=0[...]
    Deleted : user_pref("CT3225826.BT_Stats", "{\"last_log\":1346632029,\"uuid\":461052754108186,\"seq_id\":1,\"ss[...]
    Deleted : user_pref("CT3225826.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
    Deleted : user_pref("CT3225826.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
    Deleted : user_pref("CT3225826.FirstTime", "true");
    Deleted : user_pref("CT3225826.FirstTimeFF3", "true");
    Deleted : user_pref("CT3225826.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT322[...]
    Deleted : user_pref("CT3225826.UserID", "UN33693707714488256");
    Deleted : user_pref("CT3225826.addressBarTakeOverEnabledInHidden", "true");
    Deleted : user_pref("CT3225826.autoDisableScopes", -1);
    Deleted : user_pref("CT3225826.browser.search.defaultthis.engineName", "");
    Deleted : user_pref("CT3225826.cbcountry_001", "GB");
    Deleted : user_pref("CT3225826.cbfirsttime", "Mon Sep 03 2012 01:27:05 GMT+0100 (GMT Daylight Time)");
    Deleted : user_pref("CT3225826.embeddedsData", "[{\"appId\":\"129830626805552092\",\"apiPermissions\":{\"cross[...]
    Deleted : user_pref("CT3225826.enableAlerts", "always");
    Deleted : user_pref("CT3225826.enableSearchFromAddressBar", "true");
    Deleted : user_pref("CT3225826.firstTimeDialogOpened", "true");
    Deleted : user_pref("CT3225826.fixPageNotFoundError", "true");
    Deleted : user_pref("CT3225826.fixPageNotFoundErrorInHidden", "true");
    Deleted : user_pref("CT3225826.fixUrls", true);
    Deleted : user_pref("CT3225826.installId", "fft285F.tmp.exe");
    Deleted : user_pref("CT3225826.installType", "XPE");
    Deleted : user_pref("CT3225826.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
    Deleted : user_pref("CT3225826.isNewTabEnabled", true);
    Deleted : user_pref("CT3225826.isPerformedSmartBarTransition", "true");
    Deleted : user_pref("CT3225826.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"true\"}");
    Deleted : user_pref("CT3225826.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
    Deleted : user_pref("CT3225826.keyword", true);
    Deleted : user_pref("CT3225826.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"mpy kid dog days\",\"EB_MAIN_FRA[...]
    Deleted : user_pref("CT3225826.openThankYouPage", "true");
    Deleted : user_pref("CT3225826.openUninstallPage", "FALSE");
    Deleted : user_pref("CT3225826.search.searchAppId", "129830626805552092");
    Deleted : user_pref("CT3225826.search.searchCount", "2");
    Deleted : user_pref("CT3225826.searchInNewTabEnabledInHidden", "true");
    Deleted : user_pref("CT3225826.searchProtector.notifyChanges", "{\"dataType\":\"string\",\"data\":\"true\"}");
    Deleted : user_pref("CT3225826.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
    Deleted : user_pref("CT3225826.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
    Deleted : user_pref("CT3225826.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
    Deleted : user_pref("CT3225826.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
    Deleted : user_pref("CT3225826.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
    Deleted : user_pref("CT3225826.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
    Deleted : user_pref("CT3225826.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
    Deleted : user_pref("CT3225826.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data[...]
    Deleted : user_pref("CT3225826.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1346632021700");
    Deleted : user_pref("CT3225826.serviceLayer_services_appsMetadata_lastUpdate", "1346667624617");
    Deleted : user_pref("CT3225826.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1346632022374");
    Deleted : user_pref("CT3225826.serviceLayer_services_login_10.10.27.6_lastUpdate", "1346664818944");
    Deleted : user_pref("CT3225826.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1346632022448");
    Deleted : user_pref("CT3225826.serviceLayer_services_searchAPI_lastUpdate", "1346632020433");
    Deleted : user_pref("CT3225826.serviceLayer_services_serviceMap_lastUpdate", "1346632019787");
    Deleted : user_pref("CT3225826.serviceLayer_services_toolbarContextMenu_lastUpdate", "1346632022276");
    Deleted : user_pref("CT3225826.serviceLayer_services_toolbarSettings_lastUpdate", "1346667623203");
    Deleted : user_pref("CT3225826.serviceLayer_services_translation_lastUpdate", "1346632021659");
    Deleted : user_pref("CT3225826.settingsINI", true);
    Deleted : user_pref("CT3225826.shouldFirstTimeDialog", "false");
    Deleted : user_pref("CT3225826.smartbar.CTID", "CT3225826");
    Deleted : user_pref("CT3225826.smartbar.Uninstall", "1");
    Deleted : user_pref("CT3225826.smartbar.homepage", true);
    Deleted : user_pref("CT3225826.smartbar.toolbarName", "BitTorrentControl_v12 ");
    Deleted : user_pref("CT3225826.startPage", "userChanged");
    Deleted : user_pref("CT3225826.toolbarBornServerTime", "3-9-2012");
    Deleted : user_pref("CT3225826.toolbarCurrentServerTime", "3-9-2012");
    Deleted : user_pref("CT3225826.toolbarDisabled", "true");
    Deleted : user_pref("CT3225826.url_history0001", "hxxp://www.roblox.com/Welcome-To-Lakeside-TRAILER-place?id=7[...]
    Deleted : user_pref("Smartbar.ConduitHomepagesList", "");
    Deleted : user_pref("Smartbar.ConduitSearchEngineList", "BitTorrentControl_v12 Customized Web Search");
    Deleted : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3225826[...]
    Deleted : user_pref("Smartbar.keywordURLSelectedCTID", "CT3225826");

    -\\ Google Chrome v [Unable to get version]

    File : C:\Users\Abbie\AppData\Local\Google\Chrome\User Data\Default\Preferences

    Deleted [l.8] : homepage = "hxxp://search.conduit.com/?ctid=CT3225826&SearchSource=48",
    Deleted [l.12] : urls_to_restore_on_startup = [ "hxxp://search.conduit.com/?ctid=CT3225826&SearchSource=48" ]
    Deleted [l.39] : icon_url = "hxxp://search.conduit.com/fav.ico",
    Deleted [l.42] : keyword = "search.conduit.com",
    Deleted [l.45] : search_url = "hxxp://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&ctid=CT3225826",
    Deleted [l.46] : suggest_url = "hxxp://search.conduit.com/"
    Deleted [l.1460] : homepage = "hxxp://search.conduit.com/?ctid=CT3225826&SearchSource=48",
    Deleted [l.1676] : urls_to_restore_on_startup = [ "hxxp://search.conduit.com/?ctid=CT3225826&SearchSource=48" ]

    *************************

    AdwCleaner[R1].txt - [8888 octets] - [12/11/2012 23:55:31]
    AdwCleaner[R2].txt - [8948 octets] - [13/11/2012 09:34:17]
    AdwCleaner[S1].txt - [9179 octets] - [13/11/2012 09:35:24]

    ########## EOF - C:\AdwCleaner[S1].txt - [9239 octets] ##########
  • montymud
    montymud Posts: 1,015 Forumite
    Part of the Furniture Combo Breaker
    Yes it is Firefox that is the problem. The other browsers work with no problems.
This discussion has been closed.
★ ★ ★ Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 352.9K Banking & Borrowing
  • 253.9K Reduce Debt & Boost Income
  • 454.7K Spending & Discounts
  • 246K Work, Benefits & Business
  • 602K Mortgages, Homes & Bills
  • 177.8K Life & Family
  • 259.9K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16K Discuss & Feedback
  • 37.7K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.
Update Your Picture