FB downloader

movinghelp

Ugh, so sad it's still there. There was 2 logs:


[.ShellClassInfo]
[EMAIL="LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21769"]LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21769[/EMAIL]
IconResource=%SystemRoot%\system32\imageres.dll,-183



[.ShellClassInfo]
[EMAIL="LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21799"]LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21799[/EMAIL]

waddler_8

It will be still there for now. This should allow us to run AdwCleaner successfully.

Post the log found at C:\_otm\movedfiles\********_******.log

movinghelp

Sorry confused by the last message. So run AdwCleaner again? How do I get to that log if it has asterixes as I get a Windows cannot find message when I copy and paste it.

movinghelp

# AdwCleaner v2.113 - Logfile created 02/25/2013 at 19:12:10
# Updated 23/02/2013 by Xplode
# Operating system : Windows 7 Professional Service Pack 1 (64 bits)
# User : Caitlin - CAITLIN-PC
# Boot Mode : Normal
# Running from : C:\Users\Caitlin\Downloads\AdwCleaner.exe
# Option [Search]

***** [Services] *****

***** [Files / Folders] *****
File Found : C:\Users\Caitlin\AppData\Roaming\Mozilla\Firefox\Profiles\w2yc5u6y.default\searchplugins\search.xml
***** [Registry] *****
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Found : HKU\S-1-5-21-2873185378-3454444883-899591097-1000\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
***** [Internet Browsers] *****
-\\ Internet Explorer v9.0.8112.16464
[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.fbdownloader.com/?channel=sfuk206
-\\ Mozilla Firefox v [Unable to get version]
File : C:\Users\Caitlin\AppData\Roaming\Mozilla\Firefox\Profiles\w2yc5u6y.default\prefs.js
Found : user_pref("browser.startup.homepage", "hxxp://search.fbdownloader.com/?channel=sfuk206");
Found : user_pref("browser.search.defaulturl", "hxxp://search.fbdownloader.com/search.php?channel=sfuk206&q=[...]
Found : user_pref("keyword.URL", "hxxp://search.fbdownloader.com/search.php?channel=sfuk206&q=");
*************************
AdwCleaner[R1].txt - [1699 octets] - [25/02/2013 17:14:26]
AdwCleaner[R2].txt - [1751 octets] - [25/02/2013 18:03:38]
AdwCleaner[R3].txt - [1811 octets] - [25/02/2013 18:04:26]
AdwCleaner[R4].txt - [1624 octets] - [25/02/2013 19:12:10]
AdwCleaner[S1].txt - [3727 octets] - [24/02/2013 20:09:32]
AdwCleaner[S2].txt - [1586 octets] - [25/02/2013 17:23:55]
########## EOF - C:\AdwCleaner[R4].txt - [1804 octets] ##########

waddler_8

Before running AdwCleaner go to this folder:

C:\_otm\movedfiles

In there there will be a time stamped log file ********_******.log

movinghelp

========== COMMANDS ==========
Restore point Set: OTM Restore Point
========== PROCESSES ==========
All processes killed
========== REGISTRY ==========
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\SCheck deleted successfully.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\SSync deleted successfully.
========== FILES ==========
C:\Users\Caitlin\AppData\Roaming\SCheck folder moved successfully.
C:\Users\Caitlin\AppData\Roaming\SSync folder moved successfully.
C:\Users\Caitlin\AppData\Roaming\Common\LuaRT\socket folder moved successfully.
C:\Users\Caitlin\AppData\Roaming\Common\LuaRT\mime folder moved successfully.
C:\Users\Caitlin\AppData\Roaming\Common\LuaRT\Microsoft.VC80.CRT folder moved successfully.
C:\Users\Caitlin\AppData\Roaming\Common\LuaRT\luasql folder moved successfully.
C:\Users\Caitlin\AppData\Roaming\Common\LuaRT\json\encode folder moved successfully.
C:\Users\Caitlin\AppData\Roaming\Common\LuaRT\json\decode folder moved successfully.
C:\Users\Caitlin\AppData\Roaming\Common\LuaRT\json folder moved successfully.
C:\Users\Caitlin\AppData\Roaming\Common\LuaRT\alien folder moved successfully.
C:\Users\Caitlin\AppData\Roaming\Common\LuaRT folder moved successfully.
C:\Users\Caitlin\AppData\Roaming\Common folder moved successfully.
========== COMMANDS ==========
Restore point Set: OTM Restore Point

OTM by OldTimer - Version 3.1.21.0 log created on 02252013_185807

waddler_8

Good, now run AdwCleaner (delete)

• Right click AdwCleaner.exe & choose "Run as Administrator" to run it.
• Click Delete.
• Click OK to the prompt.
• The tool will run & your computer will be rebooted automatically. A logfile will open after the restart.
• Post the contents of the logfile with your next reply.
• You can also find the logfile at C:\AdwCleaner[s3].txt.

movinghelp

# AdwCleaner v2.113 - Logfile created 02/25/2013 at 19:18:52
# Updated 23/02/2013 by Xplode
# Operating system : Windows 7 Professional Service Pack 1 (64 bits)
# User : Caitlin - CAITLIN-PC
# Boot Mode : Normal
# Running from : C:\Users\Caitlin\Downloads\AdwCleaner.exe
# Option [Delete]

***** [Services] *****

***** [Files / Folders] *****
File Deleted : C:\Users\Caitlin\AppData\Roaming\Mozilla\Firefox\Profiles\w2yc5u6y.default\searchplugins\search.xml
***** [Registry] *****
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
***** [Internet Browsers] *****
-\\ Internet Explorer v9.0.8112.16464
Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.fbdownloader.com/?channel=sfuk206 --> hxxp://www.google.com
-\\ Mozilla Firefox v [Unable to get version]
File : C:\Users\Caitlin\AppData\Roaming\Mozilla\Firefox\Profiles\w2yc5u6y.default\prefs.js
Deleted : user_pref("browser.startup.homepage", "hxxp://search.fbdownloader.com/?channel=sfuk206");
Deleted : user_pref("browser.search.defaulturl", "hxxp://search.fbdownloader.com/search.php?channel=sfuk206&q=[...]
Deleted : user_pref("keyword.URL", "hxxp://search.fbdownloader.com/search.php?channel=sfuk206&q=");
*************************
AdwCleaner[R1].txt - [1699 octets] - [25/02/2013 17:14:26]
AdwCleaner[R2].txt - [1751 octets] - [25/02/2013 18:03:38]
AdwCleaner[R3].txt - [1811 octets] - [25/02/2013 18:04:26]
AdwCleaner[R4].txt - [1871 octets] - [25/02/2013 19:12:10]
AdwCleaner[S1].txt - [3727 octets] - [24/02/2013 20:09:32]
AdwCleaner[S2].txt - [1586 octets] - [25/02/2013 17:23:55]
AdwCleaner[S3].txt - [1699 octets] - [25/02/2013 19:18:52]
########## EOF - C:\AdwCleaner[S3].txt - [1759 octets] ##########

movinghelp

Didn't appear when I opened explorer..

waddler_8

Sounds good.

There was something running & preventing the changes/deletions. We got rid of that with otm which allowed AdwCleaner to work.

If you run a search with AdwCleaner it should no longer find fbdownloader.