Currys, New Laptop and Norton!

waddler_8

It does.

Operating System:
Windows XP/Vista/7/8
Can be used on both 32-bit and 64-bit operating systems.

You can use the search option first and post the logfile here first if you'd like. Otherwise go straight for delete.

aaroncaz

Here it is:

# AdwCleaner v2.112 - Logfile created 02/22/2013 at 21:23:28
# Updated 10/02/2013 by Xplode
# Operating system : Windows 8 (64 bits)
# User : Aaroncaz - CAROLAARON
# Boot Mode : Normal
# Running from : C:\Users\Aaroncaz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3BDTWJG7\AdwCleaner.exe
# Option [Search]

***** [Services] *****

***** [Files / Folders] *****

***** [Registry] *****
Key Found : HKCU\Software\InstallCore
Key Found : HKCU\Software\searchya
Key Found : HKLM\SOFTWARE\Classes\AppID\{1973277F-87B0-4EA3-9ED2-470A91D284CF}
Key Found : HKLM\Software\InstallCore
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\cjpglkicenollcignonpgiafdgfeehoj
***** [Internet Browsers] *****
-\\ Internet Explorer v10.0.9200.16482
[HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://www.searchya.com/?f=2&a=alnyhoo&cd=2XzuyEtN2Y1L1Qzu0D0CzzyD0D0EyDtD0DtBtA0EtDyC0CyCtN0D0Tzu0CyEtCzztN1L2XzutBtFtBtFtCtFyDtDtAtN1L1Czu1T1I1G2U1M1F1F&cr=677890893&ir=
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.searchya.com/?f=1&a=alnyhoo&cd=2XzuyEtN2Y1L1Qzu0D0CzzyD0D0EyDtD0DtBtA0EtDyC0CyCtN0D0Tzu0CyEtCzztN1L2XzutBtFtBtFtCtFyDtDtAtN1L1Czu1T1I1G2U1M1F1F&cr=677890893&ir=
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.searchya.com/?f=1&a=alnyhoo&cd=2XzuyEtN2Y1L1Qzu0D0CzzyD0D0EyDtD0DtBtA0EtDyC0CyCtN0D0Tzu0CyEtCzztN1L2XzutBtFtBtFtCtFyDtDtAtN1L1Czu1T1I1G2U1M1F1F&cr=677890893&ir=
-\\ Google Chrome v25.0.1364.97
File : C:\Users\Aaroncaz\AppData\Local\Google\Chrome\User Data\Default\Preferences
[OK] File is clean.
*************************
AdwCleaner[R1].txt - [1691 octets] - [22/02/2013 21:23:28]
########## EOF - C:\AdwCleaner[R1].txt - [1751 octets] ##########

aaroncaz

Deleted them :


# AdwCleaner v2.112 - Logfile created 02/22/2013 at 21:24:48
# Updated 10/02/2013 by Xplode
# Operating system : Windows 8 (64 bits)
# User : Aaroncaz - CAROLAARON
# Boot Mode : Normal
# Running from : C:\Users\Aaroncaz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3BDTWJG7\AdwCleaner.exe
# Option [Delete]

***** [Services] *****

***** [Files / Folders] *****

***** [Registry] *****
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\searchya
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1973277F-87B0-4EA3-9ED2-470A91D284CF}
Key Deleted : HKLM\Software\InstallCore
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\cjpglkicenollcignonpgiafdgfeehoj
***** [Internet Browsers] *****
-\\ Internet Explorer v10.0.9200.16482
Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://www.searchya.com/?f=2&a=alnyhoo&cd=2XzuyEtN2Y1L1Qzu0D0CzzyD0D0EyDtD0DtBtA0EtDyC0CyCtN0D0Tzu0CyEtCzztN1L2XzutBtFtBtFtCtFyDtDtAtN1L1Czu1T1I1G2U1M1F1F&cr=677890893&ir= --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.searchya.com/?f=1&a=alnyhoo&cd=2XzuyEtN2Y1L1Qzu0D0CzzyD0D0EyDtD0DtBtA0EtDyC0CyCtN0D0Tzu0CyEtCzztN1L2XzutBtFtBtFtCtFyDtDtAtN1L1Czu1T1I1G2U1M1F1F&cr=677890893&ir= --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.searchya.com/?f=1&a=alnyhoo&cd=2XzuyEtN2Y1L1Qzu0D0CzzyD0D0EyDtD0DtBtA0EtDyC0CyCtN0D0Tzu0CyEtCzztN1L2XzutBtFtBtFtCtFyDtDtAtN1L1Czu1T1I1G2U1M1F1F&cr=677890893&ir= --> hxxp://www.google.com
-\\ Google Chrome v25.0.1364.97
File : C:\Users\Aaroncaz\AppData\Local\Google\Chrome\User Data\Default\Preferences
[OK] File is clean.
*************************
AdwCleaner[R1].txt - [1816 octets] - [22/02/2013 21:23:28]
AdwCleaner[S1].txt - [1872 octets] - [22/02/2013 21:24:48]
########## EOF - C:\AdwCleaner[S1].txt - [1932 octets] ##########

waddler_8

aaroncaz wrote: »

# AdwCleaner v2.112 - Logfile created 02/22/2013 at 21:23:28
# Updated 10/02/2013 by Xplode
# Operating system : Windows 8 (64 bits)
# User : Aaroncaz - CAROLAARON
# Boot Mode : Normal
# Running from : C:\Users\Aaroncaz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3BDTWJG7\AdwCleaner.exe
# Option [Search]

***** [Services] *****

***** [Files / Folders] *****

***** [Registry] *****
Key Found : HKCU\Software\InstallCore
Key Found : HKCU\Software\searchya
Key Found : HKLM\SOFTWARE\Classes\AppID\{1973277F-87B0-4EA3-9ED2-470A91D284CF}
Key Found : HKLM\Software\InstallCore
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\cjpglkicenollcignonpgiafdgfeehoj
***** [Internet Browsers] *****
-\\ Internet Explorer v10.0.9200.16482
[HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://www.searchya.com/?f=2&a=alnyhoo&cd=2XzuyEtN2Y1L1Qzu0D0CzzyD0D0EyDtD0DtBtA0EtDyC0CyCtN0D0Tzu0CyEtCzztN1L2XzutBtFtBtFtCtFyDtDtAtN1L1Czu1T1I1G2U1M1F1F&cr=677890893&ir=
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.searchya.com/?f=1&a=alnyhoo&cd=2XzuyEtN2Y1L1Qzu0D0CzzyD0D0EyDtD0DtBtA0EtDyC0CyCtN0D0Tzu0CyEtCzztN1L2XzutBtFtBtFtCtFyDtDtAtN1L1Czu1T1I1G2U1M1F1F&cr=677890893&ir=
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.searchya.com/?f=1&a=alnyhoo&cd=2XzuyEtN2Y1L1Qzu0D0CzzyD0D0EyDtD0DtBtA0EtDyC0CyCtN0D0Tzu0CyEtCzztN1L2XzutBtFtBtFtCtFyDtDtAtN1L1Czu1T1I1G2U1M1F1F&cr=677890893&ir=
-\\ Google Chrome v25.0.1364.97
File : C:\Users\Aaroncaz\AppData\Local\Google\Chrome\User Data\Default\Preferences
[OK] File is clean.
*************************
AdwCleaner[R1].txt - [1691 octets] - [22/02/2013 21:23:28]
########## EOF - C:\AdwCleaner[R1].txt - [1751 octets] ##########

Use the delete function now.


One thing; It's always best to download & save these files to your hard drive first & then run them, rather than run them straight from the internet.

# Running from : C:\Users\Aaroncaz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3BDTWJG7\AdwCleaner.exe

waddler_8

aaroncaz wrote: »

Deleted them :

Yes, we cross posted - all gone?

aaroncaz

waddler_8 wrote: »

Use the delete function now.


One thing; It's always best to download & save these files to your hard drive first & then run them, rather than run them straight from the internet.

I just hit run rather than save...... I always get confused with the two....

The log said it was all gone, should I do it again?

It may not have been a virus but it was very intrusive and nasty! Hope it's gone now though how I blooming got it in the 1st place!

waddler_8

Stuff like this is usually bundled with freeware you have downloaded.

aaroncaz

I did it again and downloaded it this time :


# AdwCleaner v2.112 - Logfile created 02/22/2013 at 21:41:55
# Updated 10/02/2013 by Xplode
# Operating system : Windows 8 (64 bits)
# User : Aaroncaz - CAROLAARON
# Boot Mode : Normal
# Running from : C:\Users\Aaroncaz\Downloads\AdwCleaner.exe
# Option [Search]

***** [Services] *****

***** [Files / Folders] *****

***** [Registry] *****

***** [Internet Browsers] *****
-\\ Internet Explorer v10.0.9200.16482
[OK] Registry is clean.
-\\ Google Chrome v25.0.1364.97
File : C:\Users\Aaroncaz\AppData\Local\Google\Chrome\User Data\Default\Preferences
[OK] File is clean.
*************************
AdwCleaner[R1].txt - [1816 octets] - [22/02/2013 21:23:28]
AdwCleaner[R2].txt - [703 octets] - [22/02/2013 21:41:55]
AdwCleaner[S1].txt - [1997 octets] - [22/02/2013 21:24:48]
########## EOF - C:\AdwCleaner[R2].txt - [822 octets] ##########

aaroncaz

waddler_8 wrote: »

Stuff like this is usually bundled with freeware you have downloaded.

I did the system refresh last night must have done something I shouldn't have.

waddler_8

looks good.