Need help with Husband's laptop!

[Corrine]

Using Microsoft Edge on Windows 10 (which doesn't have ad-blocker extensions yet), I compared AOL.com with MSN.com.  The AOL website had a lot more graphics than MSN.com as well as advertisements, which certainly take time to load.  Since Internet Explorer is his default browser, I suggest you consider adding Adlock Plus for IE:  Adblock Plus.

Let's see if Adware Cleaner sees anything else.  Please download Adware Cleaner by Xplode.    Please save it to your desktop!

• Close all open programs and internet browsers.
  
• Double-click AdwCleaner.exe to run the tool. 
  Note:  Windows Vista, Windows 7/8 users right-click and select Run As Administrator.
  
• Click the Scan button.
  
• AdwCleaner will begin.  Be patient as the scan may take some time to complete.
  
• After the scan has finished, click the Report button.  A logfile (AdwCleaner[R0].txt) will open in Notepad for review.
  
• Copy and paste the contents of that logfile in your next reply.
  
• A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.

[Casi]

# AdwCleaner v5.113 - Logfile created 27/04/2016 at 12:06:23
# Updated 24/04/2016 by Xplode
# Database : 2016-04-24.3 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (X64)
# Username : BB - BB-PC
# Running from : C:\Users\BB\Downloads\adwcleaner_5.113.exe
# Option : Scan
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

Folder Found : C:\Users\BB\AppData\LocalLow\HPAppData

***** [ Files ] *****

File Found : C:\Users\BB\AppData\LocalLow\Microsoft\Internet Explorer\Services\Search_ask.com.xml

***** [ DLL ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Search\ask.com
Key Found : HKLM\SOFTWARE\Classes\Record\{425E7597-03A2-338D-B72A-0E51FFE77A7E}
Key Found : HKLM\SOFTWARE\Classes\Record\{915BB7D5-082E-3B91-B1E0-45B5FDE01F24}
Key Found : HKLM\SOFTWARE\Classes\Record\{2009AF2F-5786-3067-8799-B97F7832FDD6}
Key Found : HKLM\SOFTWARE\Classes\Record\{FB2E65F4-5687-33EF-9BBF-4E3C9C98D3B9}
Key Found : HKLM\SOFTWARE\Classes\protector_dll.Protector
Key Found : HKLM\SOFTWARE\Classes\protector_dll.Protector.1
Key Found : HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho
Key Found : HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho.1
Key Found : HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib
Key Found : HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1
Key Found : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Key Found : HKCU\Software\Reg\Clean
Key Found : HKLM\SOFTWARE\Reg\Clean
Key Found : HKU\S-1-5-21-3938814260-852461896-905972704-1000\Software\Reg\Clean
Key Found : HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3938814260-852461896-905972704-1000\Software\AskPartnerNetwork
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{35E9167E-0CF1-4A68-ABF3-7AE495F91469}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{35E9167E-0CF1-4A68-ABF3-7AE495F91469}
Key Found : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\apnwidgets.ask.com
Key Found : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\ask.com
Key Found : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\apnwidgets.ask.com
Key Found : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\app.mam.conduit.com
Key Found : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com
Key Found : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\fastcontent.conduit.com
Key Found : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\search.aol.com
Key Found : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.ask.com

***** [ Web browsers ] *****


*************************

C:\AdwCleaner\AdwCleaner[R0].txt - [9186 bytes] - [24/08/2014 17:45:52]
C:\AdwCleaner\AdwCleaner[S0].txt - [8669 bytes] - [24/08/2014 17:55:07]
C:\AdwCleaner\AdwCleaner[S1].txt - [3340 bytes] - [27/04/2016 12:00:19]
C:\AdwCleaner\AdwCleaner[S2].txt - [3253 bytes] - [27/04/2016 12:06:23]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [3326 bytes] ##########

[Corrine]

I'm glad I asked you to run that -- I almost didn't!  Please do the following:

Double-click AdwCleaner.exe to run the tool again.

• Click the Scan button.
  
• AdwCleaner will begin to scan your computer like it did before.
  Note:  Windows Vista, Windows 7/8 users right-click and select Run As Administrator.
  
• After the scan has finished,
  
• This time click on the Clean button.
  
• Press OK when asked to close all programs and follow the onscreen prompts.
  
• Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
  
• After rebooting, a logfile report (AdwCleaner[CX].txt) will open automatically (where the largest value of X represents the most recent report).
  
• Copy and paste the contents of that logfile in your next reply.
  
• A copy of that logfile will also be saved in the C:\AdwCleaner folder.

Next, since it often finds additional items please download Junkware Removal Tool to your desktop.

• Disable your protection software now to avoid potential conflicts.
  
• Run the tool by double-clicking it.  If you are using Windows Vista or Seven, right-mouse click it and select "Run as Administrator".
  
• The tool will open and start scanning your system.
  
• Please be patient as this can take a while to complete depending on your system's specifications.
  
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  
• Post the contents of JRT.txt into your next message.
  

[Casi]

# AdwCleaner v5.114 - Logfile created 27/04/2016 at 18:58:25
# Updated 27/04/2016 by Xplode
# Database : 2016-04-27.1 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (X64)
# Username : BB - BB-PC
# Running from : C:\Users\BB\Downloads\adwcleaner_5.114 (1).exe
# Option : Clean
# Support : http://toolslib.net/forum

***** [ Services ] *****


***** [ Folders ] *****

[-] Folder Deleted : C:\Users\BB\AppData\LocalLow\HPAppData

***** [ Files ] *****

[-] File Deleted : C:\Users\BB\AppData\LocalLow\Microsoft\Internet Explorer\Services\Search_ask.com.xml

***** [ DLLs ] *****


***** [ WMI ] *****


***** [ Shortcuts ] *****


***** [ Scheduled tasks ] *****


***** [ Registry ] *****

[-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Search\ask.com
[-] Key Deleted : HKLM\SOFTWARE\Classes\Record\{425E7597-03A2-338D-B72A-0E51FFE77A7E}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Record\{915BB7D5-082E-3B91-B1E0-45B5FDE01F24}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Record\{2009AF2F-5786-3067-8799-B97F7832FDD6}
[-] Key Deleted : HKLM\SOFTWARE\Classes\Record\{FB2E65F4-5687-33EF-9BBF-4E3C9C98D3B9}
[-] Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.Protector
[-] Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.Protector.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho
[-] Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.ProtectorBho.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib
[-] Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1
[-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
[-] Key Deleted : HKCU\Software\Reg\Clean
[-] Key Deleted : HKLM\SOFTWARE\Reg\Clean
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3938814260-852461896-905972704-1000\Software\AskPartnerNetwork
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
[-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{35E9167E-0CF1-4A68-ABF3-7AE495F91469}
[-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{35E9167E-0CF1-4A68-ABF3-7AE495F91469}
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\apnwidgets.ask.com
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\ask.com
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\apnwidgets.ask.com
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\app.mam.conduit.com
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\fastcontent.conduit.com
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\search.aol.com
[-] Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.ask.com

***** [ Web browsers ] *****


*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [3239 bytes] - [27/04/2016 18:58:25]
C:\AdwCleaner\AdwCleaner[R0].txt - [9186 bytes] - [24/08/2014 17:45:52]
C:\AdwCleaner\AdwCleaner[S0].txt - [8669 bytes] - [24/08/2014 17:55:07]
C:\AdwCleaner\AdwCleaner[S1].txt - [3340 bytes] - [27/04/2016 12:00:19]
C:\AdwCleaner\AdwCleaner[S2].txt - [3413 bytes] - [27/04/2016 12:06:23]
C:\AdwCleaner\AdwCleaner[S3].txt - [3515 bytes] - [27/04/2016 18:55:07]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [3677 bytes] ##########

[Casi]

Did it work? 

I couldn't find it;  it didn't open up after the re-boot but I found it under C drive.  There were some other files there from 8/24/14.  How can that be?  So maybe when you or even Raven may have helped me in the past the Adware cleaner tool was there ????

Confused.

Also, I decided to add  the  Adblock Plus to my desk top but it downloaded but then walked me thru the steps to delete itself???  I am going to try it on this one now. 

Thanks

[Casi]

I may have confused you.....what I mean by "did it work".....I did copy and post what I think it the report which I posted above.  Did it work, meaning does the report show that I cleaned it?

Okay, now about the Adblock.  I downloaded and saved to both computers

....I can find it in the downloads.  Do I have to "run" it or anything or does it just do its own thing.  How do I know it is working?

Thanks

[Corrine]

Yes, AdwCleaner worked.  Yes, those are apparently old logs.  Nothing to worry about.  You can move on to the Junkware Removal Tool.

As to Adblock Plus, go to the downloaded .exe file to install it on IE.

[Casi]

I did the download for the Adblock.  I found it in my download file today and today I think I got it installed, but where is it now.  I don't see it in programs.  Does it just work on its own?  It is showing up in my list when I go to Control Panel. 

[Corrine]

Hi, Casi.

With IE open, click Tools.  Under "Add-on Types", Toolbars and Extensions will show "Ad-block Plus for IE Browser Helper Object" as enabled if it is correctly installed.

[Casi]

With IE open, click Tools.  Under "Add-on Types", Toolbars and Extensions will show "Ad-block Plus for IE Browser Helper Object" as enabled if it is correctly installed

I did and it is there, enabled.  So that is it and it is doing it's thing?  So I am protected?

Thanks

[Digerati]

So I am protected?

If I may chime in here - not sure it is a matter of being "protected". Your security programs, security settings and your self-discipline (to include keeping Windows updated and avoid being "click-happy" on unsolicited downloads, links and attachments) is what is keeping you protected. AdBlockPlus is helping to keep you from being annoyed by too many ads and such on sites you visit. Yes, some of those ads could contain malicious code, but assuming you only visit legitimate sites and don't visit the seedy side of the Internet, malicious code in ads is not very likely. And even if they did contain malicious code and managed to sneak by your security programs, again if you avoid clicking on those unsolicited ads (no matter how inviting, enticing and professional looking they may be) you remain "protected".