Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

part 2 - daughters computer - internet almost unusable

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

part 2 - daughters computer - internet almost unusable

Unread postby steve111 » March 11th, 2015, 11:35 pm

Please excuse the delay....Thanks for you help


There was nothing in
•TDSSKiller log
•E-Set.txt


this is the log from my last post:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015
Ran by Hannah at 2015-03-11 21:06:16 Run:3
Running from C:\Users\Hannah\Desktop\V
Loaded Profiles: Hannah (Available profiles: Hannah)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
2015-02-25 21:15 - 2014-10-05 10:50 - 00000000 ____D () C:\Program Files (x86)\HD-Quality-v3V04.10
2015-02-25 21:15 - 2014-10-01 15:33 - 00000000 ____D () C:\Program Files (x86)\HD-Quality-v3V01.10
Shopping Helper Smartbar Engine (HKU\.DEFAULT\...\{f8f25cd1-0c88-47f7-9ba0-18c1270df322}) (Version: 11.113.63.19229 - ReSoft Ltd.) <==== ATTENTION
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
AlternateDataStreams: C:\Users\Hannah\Downloads\chromeinstall-7u67 (1).exe:BDU
AlternateDataStreams: C:\Users\Hannah\Downloads\chromeinstall-7u67.exe:BDU
AlternateDataStreams: C:\Users\Hannah\Downloads\civics project.eml:OECustomProperty
AlternateDataStreams: C:\Users\Hannah\Downloads\DriverRestore (1).exe:BDU
AlternateDataStreams: C:\Users\Hannah\Downloads\DriverRestore.exe:BDU
AlternateDataStreams: C:\Users\Hannah\Downloads\EIE11_EN-US_WOL_WIN764 (1).EXE:BDU
AlternateDataStreams: C:\Users\Hannah\Downloads\EIE11_EN-US_WOL_WIN764.EXE:BDU
AlternateDataStreams: C:\Users\Hannah\Downloads\epson13150.exe:BDU
AlternateDataStreams: C:\Users\Hannah\Downloads\F-SecureOnlineScanner.exe:BDU
AlternateDataStreams: C:\Users\Hannah\Downloads\IE11-Windows6.1 (1).exe:BDU
AlternateDataStreams: C:\Users\Hannah\Downloads\IE11-Windows6.1 (2).exe:BDU
AlternateDataStreams: C:\Users\Hannah\Downloads\IE11-Windows6.1-x64-en-us.exe:BDU
AlternateDataStreams: C:\Users\Hannah\Downloads\IE11-Windows6.1-x86-en-us (1).exe:BDU
AlternateDataStreams: C:\Users\Hannah\Downloads\IE11-Windows6.1-x86-en-us (2).exe:BDU
AlternateDataStreams: C:\Users\Hannah\Downloads\IE11-Windows6.1-x86-en-us.exe:BDU
AlternateDataStreams: C:\Users\Hannah\Downloads\IE11-Windows6.1.exe:BDU
AlternateDataStreams: C:\Users\Hannah\Downloads\iTunes64Setup.exe:BDU
AlternateDataStreams: C:\Users\Hannah\Downloads\microsoft office outlook 2007.exe:BDU
C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar
C:\Users\Default\AppData\Local\Smartbar
[-HKEY_USERS\S-1-5-21-2093445773-1347140887-2671445877-1000\Software\Trolltech]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Record\{181480C8-90AC-3430-B39A-CD121E034A1A}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Record\{2009AF2F-5786-3067-8799-B97F7832FDD6}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Record\{425E7597-03A2-338D-B72A-0E51FFE77A7E}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Record\{8F54FA54-1DF8-3B20-890C-CDD95364BC95}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Record\{915BB7D5-082E-3B91-B1E0-45B5FDE01F24}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Record\{FB2E65F4-5687-33EF-9BBF-4E3C9C98D3B9}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\016A7206F164D5243BE66200904CD4AC]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0B394BFA95E9CAE4FBB27DB664DCBD0E]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0B51AA2BED003754EB928BEF1B2E8A42]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0B6A7206F164D5243BE662E09C4CD4AC]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\216A7206F164D5243BE66288984CD4AC]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E35213FD461DD045869F4E01B62B2BE]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\33592FD0CF5A7AA4A8F106EB69B9A0D7]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\433F92F177200FF478C2D32BB923656E]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CD231EF64D076744824027B43D7B1AD]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\59F397F664A6B044BA5150D20FA0AD67]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8B257988D95DB864CAF8EF451C5B3ECE]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9DDEC1131A9FA2348B0A0AEB73868888]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9DDEC1131A9FA2348B0A0AEB73D68A18]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9DDEC1131A9FA2348B0A0AEB73D6BA21]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9DDEC1131A9FA2348B0A81EB88D68A81]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A805D820868346044B5BDD92EB6CA6C3]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BBB8D37874E1A0946834CDB33A9FC4C5]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BBB8D37874E1A0946834CDB34A9FC4CD]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA86D8ADF7525524299E35592473F71A]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA86D8ADF7525524299E35592473F73A]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D40B7F324393F624DACA80C397004DA1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E13864C95DCE91247A4435FFDA762754]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E5ADE64D843807D4997A4AFC96B78EF1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E5ADE64D843807D4997A4AFC96B78EF3]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E5ADE64D843807D4997A4AFC96B78EF5]
[-HKEY_USERS\.DEFAULT\Software\Microsoft\Installer\Products\24BEB46CD52B4764BB550499BC271001]
[-HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Uninstall\{f8f25cd1-0c88-47f7-9ba0-18c1270df322}]
[-HKEY_USERS\.DEFAULT\Software\SmartbarBackup]
[-HKEY_USERS\S-1-5-18\Software\Microsoft\Installer\Products\24BEB46CD52B4764BB550499BC271001]
[-HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Uninstall\{f8f25cd1-0c88-47f7-9ba0-18c1270df322}]
[-HKEY_USERS\S-1-5-18\Software\SmartbarBackup]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{100EB1FD-D03E-47FD-81F3-EE91287F9465}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{100EB1FD-D03E-47FD-81F3-EE91287F9465}]
[-HKEY_USERS\.DEFAULT\Software\ShopperPro]
[-HKEY_USERS\S-1-5-21-2093445773-1347140887-2671445877-1000\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2093445773-1347140887-2671445877-1000\Software\ShopperPro]
[-HKEY_USERS\S-1-5-18\Software\ShopperPro]
Reg: Reg.exe delete "HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Search" /v "Default_Search_URL" /f
Reg: Reg.exe delete "HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Search" /v "Default_Search_URL"=
Reg: Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\Users\Hannah\AppData\Local\Smartbar\Common\" /f
Reg: Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\Users\Hannah\AppData\Local\Smartbar\Common\iconsWide\" /f
Reg: Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Common\icons\" /f
Reg: Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\" /f
Reg: Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\DistributionFiles\Profiles\" /f
Reg: Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\" /f
Reg: Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\" /f
Reg: Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\helperbar@helperbar.com\" /f
Reg: Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\" /f
Reg: Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\Resources\" /f
Reg: Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\DistributionFiles\Configs\" /f
Reg: Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\Configs\" /f
Reg: Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Common\ServicesPlugins\" /f
Reg: Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\pt\" /f
Reg: Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\fr\" /f
Reg: Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\ar\" /f
Reg: Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\ru\" /f
Reg: Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\de\" /f
Reg: Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\NativeMessagingHosts\sb.host" /v "" /f
Reg: Reg.exe delete "HKEY_USERS\S-1-5-21-2093445773-1347140887-2671445877-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION" /v "Smartbar.exe" /f
EmptyTemp:
*****************

HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value not found.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value not found.
"C:\Program Files (x86)\HD-Quality-v3V04.10" => File/Directory not found.
"C:\Program Files (x86)\HD-Quality-v3V01.10" => File/Directory not found.
Shopping Helper Smartbar Engine (HKU\.DEFAULT\...\{f8f25cd1-0c88-47f7-9ba0-18c1270df322}) (Version: 11.113.63.19229 - ReSoft Ltd.) <==== ATTENTION => Error: No automatic fix found for this entry.
"C:\ProgramData\TEMP" => ":373E1720" ADS not found.
"C:\Users\Hannah\Downloads\chromeinstall-7u67 (1).exe" => ":BDU" ADS not found.
"C:\Users\Hannah\Downloads\chromeinstall-7u67.exe" => ":BDU" ADS not found.
C:\Users\Hannah\Downloads\civics project.eml => ":OECustomProperty" ADS removed successfully.
"C:\Users\Hannah\Downloads\DriverRestore (1).exe" => ":BDU" ADS not found.
"C:\Users\Hannah\Downloads\DriverRestore.exe" => ":BDU" ADS not found.
"C:\Users\Hannah\Downloads\EIE11_EN-US_WOL_WIN764 (1).EXE" => ":BDU" ADS not found.
"C:\Users\Hannah\Downloads\EIE11_EN-US_WOL_WIN764.EXE" => ":BDU" ADS not found.
"C:\Users\Hannah\Downloads\epson13150.exe" => ":BDU" ADS not found.
"C:\Users\Hannah\Downloads\F-SecureOnlineScanner.exe" => ":BDU" ADS not found.
"C:\Users\Hannah\Downloads\IE11-Windows6.1 (1).exe" => ":BDU" ADS not found.
"C:\Users\Hannah\Downloads\IE11-Windows6.1 (2).exe" => ":BDU" ADS not found.
"C:\Users\Hannah\Downloads\IE11-Windows6.1-x64-en-us.exe" => ":BDU" ADS not found.
"C:\Users\Hannah\Downloads\IE11-Windows6.1-x86-en-us (1).exe" => ":BDU" ADS not found.
"C:\Users\Hannah\Downloads\IE11-Windows6.1-x86-en-us (2).exe" => ":BDU" ADS not found.
"C:\Users\Hannah\Downloads\IE11-Windows6.1-x86-en-us.exe" => ":BDU" ADS not found.
"C:\Users\Hannah\Downloads\IE11-Windows6.1.exe" => ":BDU" ADS not found.
"C:\Users\Hannah\Downloads\iTunes64Setup.exe" => ":BDU" ADS not found.
"C:\Users\Hannah\Downloads\microsoft office outlook 2007.exe" => ":BDU" ADS not found.
"C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar" => File/Directory not found.
"C:\Users\Default\AppData\Local\Smartbar" => File/Directory not found.
HKEY_USERS\S-1-5-21-2093445773-1347140887-2671445877-1000\Software\Trolltech => Failed to delete key at first attempt (Error: C0000121), see next line.
HKEY_USERS\S-1-5-21-2093445773-1347140887-2671445877-1000\Software\Trolltech => Key Deleted Successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B} => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC} => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B} => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC} => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Record\{181480C8-90AC-3430-B39A-CD121E034A1A} => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Record\{2009AF2F-5786-3067-8799-B97F7832FDD6} => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Record\{425E7597-03A2-338D-B72A-0E51FFE77A7E} => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Record\{8F54FA54-1DF8-3B20-890C-CDD95364BC95} => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Record\{915BB7D5-082E-3B91-B1E0-45B5FDE01F24} => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Record\{FB2E65F4-5687-33EF-9BBF-4E3C9C98D3B9} => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\016A7206F164D5243BE66200904CD4AC => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0B394BFA95E9CAE4FBB27DB664DCBD0E => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0B51AA2BED003754EB928BEF1B2E8A42 => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0B6A7206F164D5243BE662E09C4CD4AC => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\216A7206F164D5243BE66288984CD4AC => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E35213FD461DD045869F4E01B62B2BE => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\33592FD0CF5A7AA4A8F106EB69B9A0D7 => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\433F92F177200FF478C2D32BB923656E => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CD231EF64D076744824027B43D7B1AD => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\59F397F664A6B044BA5150D20FA0AD67 => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8B257988D95DB864CAF8EF451C5B3ECE => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9DDEC1131A9FA2348B0A0AEB73868888 => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9DDEC1131A9FA2348B0A0AEB73D68A18 => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9DDEC1131A9FA2348B0A0AEB73D6BA21 => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9DDEC1131A9FA2348B0A81EB88D68A81 => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A805D820868346044B5BDD92EB6CA6C3 => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BBB8D37874E1A0946834CDB33A9FC4C5 => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BBB8D37874E1A0946834CDB34A9FC4CD => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA86D8ADF7525524299E35592473F71A => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA86D8ADF7525524299E35592473F73A => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D40B7F324393F624DACA80C397004DA1 => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E13864C95DCE91247A4435FFDA762754 => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E5ADE64D843807D4997A4AFC96B78EF1 => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E5ADE64D843807D4997A4AFC96B78EF3 => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E5ADE64D843807D4997A4AFC96B78EF5 => Key not found.
HKEY_USERS\.DEFAULT\Software\Microsoft\Installer\Products\24BEB46CD52B4764BB550499BC271001 => Key not found.
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Uninstall\{f8f25cd1-0c88-47f7-9ba0-18c1270df322} => Key not found.
HKEY_USERS\.DEFAULT\Software\SmartbarBackup => Key not found.
HKEY_USERS\S-1-5-18\Software\Microsoft\Installer\Products\24BEB46CD52B4764BB550499BC271001 => Key not found.
HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Uninstall\{f8f25cd1-0c88-47f7-9ba0-18c1270df322} => Key not found.
HKEY_USERS\S-1-5-18\Software\SmartbarBackup => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{100EB1FD-D03E-47FD-81F3-EE91287F9465} => Key not found.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{100EB1FD-D03E-47FD-81F3-EE91287F9465} => Key not found.
HKEY_USERS\.DEFAULT\Software\ShopperPro => Key not found.
HKEY_USERS\S-1-5-21-2093445773-1347140887-2671445877-1000\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2093445773-1347140887-2671445877-1000\Software\ShopperPro => Key not found.
HKEY_USERS\S-1-5-18\Software\ShopperPro => Key not found.

========= Reg.exe delete "HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Search" /v "Default_Search_URL" /f =========

ERROR: The system was unable to find the specified registry key or value.


========= End of Reg: =========


========= Reg.exe delete "HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Search" /v "Default_Search_URL"= =========

Delete the registry value Default_Search_URL= (Yes/No)? ERROR: The system was unable to find the specified registry key or value.


========= End of Reg: =========


========= Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\Users\Hannah\AppData\Local\Smartbar\Common\" /f =========

Delete the registry value C:\Users\Hannah\AppData\Local\Smartbar\Common" /f (Yes/No)? ERROR: The system was unable to find the specified registry key or value.


========= End of Reg: =========


========= Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\Users\Hannah\AppData\Local\Smartbar\Common\iconsWide\" /f =========

Delete the registry value C:\Users\Hannah\AppData\Local\Smartbar\Common\iconsWide" /f (Yes/No)? ERROR: The system was unable to find the specified registry key or value.


========= End of Reg: =========


========= Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Common\icons\" /f =========

Delete the registry value C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Common\icons" /f (Yes/No)? ERROR: The system was unable to find the specified registry key or value.


========= End of Reg: =========


========= Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\" /f =========

Delete the registry value C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar" /f (Yes/No)? ERROR: The system was unable to find the specified registry key or value.


========= End of Reg: =========


========= Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\DistributionFiles\Profiles\" /f =========



========= End of Reg: =========


========= Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS\" /f =========

Delete the registry value C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS" /f (Yes/No)? ERROR: The system was unable to find the specified registry key or value.


========= End of Reg: =========


========= Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\" /f =========

Delete the registry value C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application" /f (Yes/No)? ERROR: The system was unable to find the specified registry key or value.


========= End of Reg: =========


========= Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\helperbar@helperbar.com\" /f =========

Delete the registry value C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\helperbar@helperbar.com" /f (Yes/No)? ERROR: The system was unable to find the specified registry key or value.


========= End of Reg: =========


========= Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images\" /f =========

Delete the registry value C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images" /f (Yes/No)? ERROR: The system was unable to find the specified registry key or value.


========= End of Reg: =========


========= Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\Resources\" /f =========

Delete the registry value C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\Resources" /f (Yes/No)? ERROR: The system was unable to find the specified registry key or value.


========= End of Reg: =========


========= Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\DistributionFiles\Configs\" /f =========

Delete the registry value C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\DistributionFiles\Configs" /f (Yes/No)? ERROR: The system was unable to find the specified registry key or value.


========= End of Reg: =========


========= Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\Configs\" /f =========

Delete the registry value C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\Configs" /f (Yes/No)? ERROR: The system was unable to find the specified registry key or value.


========= End of Reg: =========


========= Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Common\ServicesPlugins\" /f =========

Delete the registry value C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Common\ServicesPlugins" /f (Yes/No)? ERROR: The system was unable to find the specified registry key or value.


========= End of Reg: =========


========= Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\pt\" /f =========

Delete the registry value C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\pt" /f (Yes/No)? ERROR: The system was unable to find the specified registry key or value.


========= End of Reg: =========


========= Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\fr\" /f =========

Delete the registry value C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\fr" /f (Yes/No)? ERROR: The system was unable to find the specified registry key or value.


========= End of Reg: =========


========= Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\ar\" /f =========

Delete the registry value C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\ar" /f (Yes/No)? ERROR: The system was unable to find the specified registry key or value.


========= End of Reg: =========


========= Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\ru\" /f =========

Delete the registry value C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\ru" /f (Yes/No)? ERROR: The system was unable to find the specified registry key or value.


========= End of Reg: =========


========= Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders" /v "C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\de\" /f =========

Delete the registry value C:\windows\SysWOW64\config\systemprofile\AppData\Local\Smartbar\Application\de" /f (Yes/No)? ERROR: The system was unable to find the specified registry key or value.


========= End of Reg: =========


========= Reg.exe delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\NativeMessagingHosts\sb.host" /v "" /f =========

ERROR: The system was unable to find the specified registry key or value.


========= End of Reg: =========


========= Reg.exe delete "HKEY_USERS\S-1-5-21-2093445773-1347140887-2671445877-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION" /v "Smartbar.exe" /f =========

ERROR: The system was unable to find the specified registry key or value.


========= End of Reg: =========

EmptyTemp: => Removed 116.4 MB temporary data.


The system needed a reboot.

==== End of Fixlog 21:08:58 ====
steve111
Regular Member
 
Posts: 16
Joined: February 15th, 2011, 9:37 pm
Advertisement
Register to Remove

Re: part 2 - daughters computer - internet almost unusable

Unread postby MWR 3 day Mod » March 15th, 2015, 2:44 pm

Hi,

We are sorry to see your topic is over three days old and no one has yet been able to respond and offer help.

If you still require assistance, please post a link to your topic in our Waiting for help with malware removal? forum, and our staff will make an effort to assist you as promptly as possible. Only post a LINK to this topic, DO NOT post your DDS log!

Please do not reply to this topic.

If you haven't posted within two days in the "Waiting for help with malware removal?" forum, we will assume you have been able to get assistance in other ways and this topic will be closed.
MWR 3 day Mod
MRU Undergrad
MRU Undergrad
 
Posts: 2534
Joined: April 4th, 2008, 8:40 am

Re: part 2 - daughters computer - internet almost unusable

Unread postby NonSuch » March 17th, 2015, 5:39 pm

Due to a lack of activity within the proscribed time period, this topic is now closed.

This is the second consecutive topic we've closed due to your failure to respond. Although we understand a poster may have difficulty responding to a helper's posts and following the instructions therein in a timely manner, that is the way we and most free online help forums function. Online help forums are usually not the most suitable choice for those who must be away from their infected computers for a period of time that exceeds the posted parameters for receiving assistance. Therefore, we suggest you consider availing yourself of other more suitable means for resolving your computer's issues.
User avatar
NonSuch
Administrator
Administrator
 
Posts: 28747
Joined: February 23rd, 2005, 7:08 am
Location: California


  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 295 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware