Solved False PDF reader

[Broni]

You're very welcome

 

[PsychopathUltra]

Wait, there's still a problem; Yahoo is still the default search engine for Chrome and I don't know how to fix it.

 

[PsychopathUltra]

There's another problem, apparently MySearchDial got installed on Chrome when you told me to update WIndows.

 

[Broni]

Windows would never install anything like that.

Reset Chrome...
Click on "Customize and control Google Chrome":

Click "Settings" then "Show advanced settings" at the bottom of the screen.
Click "Reset browser settings" button.
Restart Chrome.

 

[PsychopathUltra]

Maybe I was wrong, I went to check my update history and the plugin I thought I installed is apparently still uninstalled. The update in question is "Microsoft Silverlight". Thank you for the advice, I'll try it and report back if this are still astray.

 

[PsychopathUltra]

Just tried your suggestion and while the Yahoo search is gone, MySearchDial remains in my search engine settings.

 

[Broni]

Reinstall Chrome...
If you want to save your bookmarks...
How to Backup Bookmarks in Google Chrome

• Close all Chrome windows and tabs.
• Go to the Start menu > Control Panel. (Windows 8 users: Learn how to access the Control Panel)
• Click Programs and Features.
• Double-click Google Chrome.
• Click Uninstall from the confirmation dialog. Delete your user profile information, like your browser preferences, bookmarks, and history, by selecting the "Also delete your browsing data" checkbox.

Install fresh copy.

 

[PsychopathUltra]

Just uninstalled and reinstalled, MySearchDial is gone. Should I do anything to Internet Explorer?

 

[PsychopathUltra]

Wait, it came back. Uninstalling did nothing:

By the way, I logged into my gmail account after reinstalling Chrome. Should I be worried?

 

[Broni]

Re-run AdwCleaner and JRT one more time.
Post both logs.

 

[PsychopathUltra]

# AdwCleaner v3.202 - Report created 23/04/2014 at 16:09:53
# Updated 23/04/2014 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : Psychopath - PSYCHOPATH-PC
# Running from : C:\Users\Psychopath\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MegaBrowse_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MegaBrowse_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\updateMegaBrowse_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\updateMegaBrowse_RASMANCS

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16545


-\\ Mozilla Firefox v3.6.28 (en-US)

[ File : C:\Users\Psychopath\AppData\Roaming\Mozilla\Firefox\Profiles\ljnfxmd0.default\prefs.js ]


-\\ Google Chrome v34.0.1847.116

[ File : C:\Users\Psychopath\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}
Deleted [Search Provider] : hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dnldstr_14_12_ff&cd=2XzuyEtN2Y1L1Qzu0DzzyDtD0EyCyE0A0AtDyD0C0DyCyC0DtN0D0Tzu0SzztCtCtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StCtC0CzzyCzy0F0BtG0B0E0D0FtGtBtAtBtAtG0EyDtC0EtGyB0CyDtC0A0CzzzyyB0D0B0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyDyCyD0A0ByB0CtGtCyC0AtCtG0ByEtC0CtGzyyDzytBtGtCyB0FzzyCzzyB0AyDtAtBtB2Q&cr=1650357376&ir=
Deleted [Search Provider] : hxxp://search.aol.com/aol/search?query={searchTerms}
Deleted [Startup_urls] : hxxp://start.mysearchdial.com/?f=1&a=dnldstr_14_12_ff&cd=2XzuyEtN2Y1L1Qzu0DzzyDtD0EyCyE0A0AtDyD0C0DyCyC0DtN0D0Tzu0SzztCtCtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StCtC0CzzyCzy0F0BtG0B0E0D0FtGtBtAtBtAtG0EyDtC0EtGyB0CyDtC0A0CzzzyyB0D0B0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyDyCyD0A0ByB0CtGtCyC0AtCtG0ByEtC0CtGzyyDzytBtGtCyB0FzzyCzzyB0AyDtAtBtB2Q&cr=1650357376&ir=
Deleted [Homepage] : hxxp://start.mysearchdial.com/?f=1&a=dnldstr_14_12_ff&cd=2XzuyEtN2Y1L1Qzu0DzzyDtD0EyCyE0A0AtDyD0C0DyCyC0DtN0D0Tzu0SzztCtCtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StCtC0CzzyCzy0F0BtG0B0E0D0FtGtBtAtBtAtG0EyDtC0EtGyB0CyDtC0A0CzzzyyB0D0B0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyDyCyD0A0ByB0CtGtCyC0AtCtG0ByEtC0CtGzyyDzytBtGtCyB0FzzyCzzyB0AyDtAtBtB2Q&cr=1650357376&ir=

*************************

AdwCleaner[R0].txt - [2586 octets] - [23/04/2014 16:09:05]
AdwCleaner[S0].txt - [2525 octets] - [23/04/2014 16:09:53]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2585 octets] ##########

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Professional x64
Ran by Psychopath on Wed 04/23/2014 at 16:14:30.04
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Wed 04/23/2014 at 16:17:58.26
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

[Broni]

Well, it looks like you did something to acquire some nasties.

How is Chrome now?

 

[PsychopathUltra]

Just the same as it was before I ran JWT and ADWcleaner. In fact, MySearchDial went from the bottom middle to the top.

 

[PsychopathUltra]

I ran ADW again to see if it would make a difference:

# AdwCleaner v3.202 - Report created 23/04/2014 at 16:45:58
# Updated 23/04/2014 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : Psychopath - PSYCHOPATH-PC
# Running from : C:\Users\Psychopath\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16545


-\\ Mozilla Firefox v3.6.28 (en-US)

[ File : C:\Users\Psychopath\AppData\Roaming\Mozilla\Firefox\Profiles\ljnfxmd0.default\prefs.js ]


-\\ Google Chrome v34.0.1847.116

[ File : C:\Users\Psychopath\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}
Deleted [Search Provider] : hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dnldstr_14_12_ff&cd=2XzuyEtN2Y1L1Qzu0DzzyDtD0EyCyE0A0AtDyD0C0DyCyC0DtN0D0Tzu0SzztCtCtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StCtC0CzzyCzy0F0BtG0B0E0D0FtGtBtAtBtAtG0EyDtC0EtGyB0CyDtC0A0CzzzyyB0D0B0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyDyCyD0A0ByB0CtGtCyC0AtCtG0ByEtC0CtGzyyDzytBtGtCyB0FzzyCzzyB0AyDtAtBtB2Q&cr=1650357376&ir=
Deleted [Search Provider] : hxxp://search.aol.com/aol/search?query={searchTerms}
Deleted [Startup_urls] : hxxp://start.mysearchdial.com/?f=1&a=dnldstr_14_12_ff&cd=2XzuyEtN2Y1L1Qzu0DzzyDtD0EyCyE0A0AtDyD0C0DyCyC0DtN0D0Tzu0SzztCtCtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StCtC0CzzyCzy0F0BtG0B0E0D0FtGtBtAtBtAtG0EyDtC0EtGyB0CyDtC0A0CzzzyyB0D0B0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyDyCyD0A0ByB0CtGtCyC0AtCtG0ByEtC0CtGzyyDzytBtGtCyB0FzzyCzzyB0AyDtAtBtB2Q&cr=1650357376&ir=
Deleted [Homepage] : hxxp://start.mysearchdial.com/?f=1&a=dnldstr_14_12_ff&cd=2XzuyEtN2Y1L1Qzu0DzzyDtD0EyCyE0A0AtDyD0C0DyCyC0DtN0D0Tzu0SzztCtCtN1L2XzutBtFtCzztFyBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StCtC0CzzyCzy0F0BtG0B0E0D0FtGtBtAtBtAtG0EyDtC0EtGyB0CyDtC0A0CzzzyyB0D0B0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEyDyCyD0A0ByB0CtGtCyC0AtCtG0ByEtC0CtGzyyDzytBtGtCyB0FzzyCzzyB0AyDtAtBtB2Q&cr=1650357376&ir=

*************************

AdwCleaner[R0].txt - [2586 octets] - [23/04/2014 16:09:05]
AdwCleaner[R1].txt - [2434 octets] - [23/04/2014 16:45:19]
AdwCleaner[S0].txt - [2665 octets] - [23/04/2014 16:09:53]
AdwCleaner[S1].txt - [2365 octets] - [23/04/2014 16:45:58]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [2425 octets] ##########

 

[Broni]

Reinstall Chrome one more time.
Make sure that....
Delete your user profile information, like your browser preferences, bookmarks, and history, by selecting the "Also delete your browsing data" checkbox.

 

[PsychopathUltra]

This is the third time I've done this.

Now what should I do?

 

[Broni]

Click uninstall and install fresh copy.

 

[PsychopathUltra]

Okay I've done it. My search engines list Google, Yahoo, Bing, AOL & Ask. It showed me the opening screen where it prompted me to log into my Gmail account, should I log in?

 

[Broni]

Go ahead if the issue is gone.

 

[PsychopathUltra]

I logged in and MySearchDial came back. All my settings and bookmarks came back too. Think that this is the culprit?

 

[Broni]

Update Malwarebytes run the scan and post new log.

 

[PsychopathUltra]

Alright, I'm running it now.

 

[PsychopathUltra]

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2014.04.23.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Psychopath :: PSYCHOPATH-PC [administrator]

4/23/2014 5:41:52 PM
mbam-log-2014-04-23 (17-41-52).txt

Scan type: Full scan (C:\|D:\|E:\|F:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 517082
Time elapsed: 38 minute(s), 43 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

 

[PsychopathUltra]

I think the reason I keep getting reinfected is because Google Sync saved MySearchDial to my Gmail account. This only happens whenever I log in and when I do all of my bookmarks come back as well.

 

[Broni]

I agree that's the problem.
I'm not familiar with Chrome syncing and I'm not sure how to clear your online data.
You may want to start new topic in Windows forum.