Mysearchdial

pandamonium

Hi, I seem to have inadvertently picked up mysearchdial as a homepage on my shiney new laptop :mad:
All I tried to do was download Skype
Any idea how I can get rid of it? I can find it as a program or anything, which a previous post suggested.
Oh and to make matters worse I'm using Windows 8 (or trying to!).

TIA

debitcardmayhem

Start with this http://www.bleepingcomputer.com/download/adwcleaner/ and post the logs so that someone like waddler_8 can look

pandamonium

i***** [Services] *****

***** [Files / Folders] *****
File Found : C:\Users\Jan\Desktop\MySearchDial.url
File Found : C:\windows\Tasks\MySearchDial.job
Folder Found : C:\Program Files (x86)\WebCake
Folder Found : C:\ProgramData\Babylon
Folder Found : C:\ProgramData\BrowserDefender
Folder Found : C:\ProgramData\Tarma Installer
Folder Found : C:\Users\Jan\AppData\Local\Babylon
Folder Found : C:\Users\Jan\AppData\Roaming\Babylon
Folder Found : C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
Folder Found : C:\Users\Jan\AppData\Roaming\Mysearchdial
Folder Found : C:\Users\Jan\AppData\Roaming\WebCake
***** [Registry] *****
Key Found : HKCU\Software\DataMngr
Key Found : HKCU\Software\DataMngr_Toolbar
Key Found : HKCU\Software\InstallCore
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKCU\Software\mysearchdial
Key Found : HKCU\Software\853d8d1b568ed14
Key Found : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Found : HKLM\SOFTWARE\Classes\esrv.mysearchdialESrvc
Key Found : HKLM\SOFTWARE\Classes\esrv.mysearchdialESrvc.1
Key Found : HKLM\SOFTWARE\Classes\Prod.cap
Key Found : HKLM\Software\DataMngr
Key Found : HKLM\Software\InstallCore
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
Key Found : HKLM\SOFTWARE\Wow6432Node\853d8d1b568ed14
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\fjoijdanhaiflhibkljeklcghcmmfffh
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{219046AE-358F-4CF1-B1FD-2B4DE83642A8}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C4ED781C-7394-4906-AAFF-D6AB64FF7C38}
Key Found : HKLM\SOFTWARE\Tarma Installer
Value Found : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Value Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [WebCake Desktop]
***** [Internet Browsers] *****
-\\ Internet Explorer v10.0.9200.16384
[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://start.mysearchdial.com/?f=1&a=irmsd72&cd=2XzuyEtN2Y1L1QzuyCtDtAyC0D0DyD0EtCtA0F0BtC0DtC0EtN0D0Tzu0SyDyBtCtN1L2XzutBtFtBtFyEtFzzyDyDtN1L1Czu1L1C1H1B1QyBtB&cr=1437044857&ir=
[HKCU\Software\Microsoft\Internet Explorer\Main - bProtector Start Page] = hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=CE682CD44498A90B&affID=119357&tsp=4954
[HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://start.mysearchdial.com/?f=2&a=irmsd72&cd=2XzuyEtN2Y1L1QzuyCtDtAyC0D0DyD0EtCtA0F0BtC0DtC0EtN0D0Tzu0SyDyBtCtN1L2XzutBtFtBtFyEtFzzyDyDtN1L1Czu1L1C1H1B1QyBtB&cr=1437044857&ir=
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://start.mysearchdial.com/?f=1&a=irmsd72&cd=2XzuyEtN2Y1L1QzuyCtDtAyC0D0DyD0EtCtA0F0BtC0DtC0EtN0D0Tzu0SyDyBtCtN1L2XzutBtFtBtFyEtFzzyDyDtN1L1Czu1L1C1H1B1QyBtB&cr=1437044857&ir=
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main - Start Page] = hxxp://start.mysearchdial.com/?f=1&a=irmsd72&cd=2XzuyEtN2Y1L1QzuyCtDtAyC0D0DyD0EtCtA0F0BtC0DtC0EtN0D0Tzu0SyDyBtCtN1L2XzutBtFtBtFyEtFzzyDyDtN1L1Czu1L1C1H1B1QyBtB&cr=1437044857&ir=
*************************
AdwCleaner[R1].txt - [4698 octets] - [29/07/2013 17:07:59]
AdwCleaner[S1].txt - [399 octets] - [25/07/2013 19:17:00]
########## EOF - C:\AdwCleaner[R1].txt - [4817 octets] ##########

waddler_8

Looks to have done the job.

pandamonium

It is still showing as mysearchdial when I open a new tab?
Do I need to reboot or something?

Ah, it's OK I think I have sorted it.

Thanks for all your help guys

waddler_8

Run Adwcleaner once more but choose the search button.

Post the new log.

pandamonium

***** [Services] *****


***** [Files / Folders] *****


***** [Registry] *****


***** [Internet Browsers] *****

-\\ Internet Explorer v10.0.9200.16537

[OK] Registry is clean.

-\\ Google Chrome v28.0.1500.72

File : C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [4872 octets] - [29/07/2013 17:07:59]
AdwCleaner[R2].txt - [4932 octets] - [29/07/2013 17:56:30]
AdwCleaner[R3].txt - [747 octets] - [29/07/2013 21:52:30]
AdwCleaner[S1].txt - [399 octets] - [25/07/2013 19:17:00]
AdwCleaner[S2].txt - [5061 octets] - [29/07/2013 18:00:39]
AdwCleaner[S3].txt - [854 octets] - [29/07/2013 21:06:04]
AdwCleaner[S4].txt - [913 octets] - [29/07/2013 21:23:43]

########## EOF - C:\AdwCleaner[R3].txt - [1043 octets] ##########


All clean
Thanks again guys

waddler_8

Everything ok now?

pandamonium

Yes, all seems well now, thank you. No idea where this thing came from, but I had it within an hour of turning the brand new machine on .

waddler_8

Downloaded any software? Things like the cnet installer will bundle this type of thing.

The CNET Download.com Installer is a tiny ad-supported stub installer or "download manager" that helps securely deliver your downloads from Download.com's servers. We also include offers for carefully screened software that complies with Download.com Software Policies as part of our Installer process.
Learn More - http://download.cnet.com/2701-20_4-1446.html?!!!!!sideBar;downloadLinks

It's pre-checked - You have to opt out. You'll notice it says "by clicking accept you agree to the terms of the end user license agreement..."

(click the thumbnails below to see)



If you select the advance install you then need to uncheck the boxes before proceeding.

debitcardmayhem

Grrrr :mad: downloadcrap.com