Solved cant get rid of google chrome has crashed

October 19, 2014 at 08:46:08
Specs: Windows Vista
google chrome update was running - machine shut down - now get google chrome
has crashed no matter what - uninstalled software - deleted google from local machine registry
uninstalled and reinstalled chrome - cant get rid of message

See More: cant get rid of google chrome has crashed

Report •

✔ Best Answer
October 22, 2014 at 17:18:18
in the end the problem was because the new release of google had a conflict with my cam software. Uninstalling my cam software and installing a new release of cam software - solve the problew - thanks for your help - didnt think it was a virus problem

October 19, 2014 at 15:59:58
Lets see what we can find, here are the first 2 steps, there will be more.

Run both of these, in this order.

Step 1: Run AdwCleaner
Author's site
Close all open programs and internet browsers.
Double click on AdwCleaner.exe to run the tool.
Click on Clean.
Confirm each time with Ok.
Your computer will be rebooted automatically. A text file will open after the restart.
Please Copy & Paste the contents of that logfile with your next answer.
You can find the logfile at C:\AdwCleaner[S1].txt as well.

Step 2: Run Junkware Removal Tool
Download Junkware Removal Tool onto your Desktop. If your default download location is not the Desktop, drag it out of it's location onto the Desktop.
Warning! Once the scan is complete JRT will shut down your browser with NO warning.
Shut down your protection software now to avoid potential conflicts.
Temporarily disable your antivirus and any antispyware real time protection before performing a scan.
Click this link to see a list of security programs that should be disabled and how to disable them.
Run the tool by double-clicking it. If you are using Windows Vista or Windows 7/8, right-click JRT and select Run as Administrator.
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved onto your Desktop and will automatically open.
Copy and Paste the contents of the JRT.txt log please.

Report •

October 19, 2014 at 17:28:31
steps 1 and 2 did not solve problem - somewhere chrome is set waiting for a restore and an uninstall and reinstall of chrome does not reset it

message edited by karday

Report •

October 19, 2014 at 17:55:00
"steps 1 and 2 did not solve problem"
I didn't expect them to fix the problem, I'm looking for clues ( the logs )

Report •

Related Solutions

October 19, 2014 at 19:28:56
herere jrt adw follows

Junkware Removal Tool (JRT) by Thisisu
Version: 6.3.3 (10.14.2014:1)
OS: Windows Vista (TM) Home Premium x86
Ran by ken on Sun 10/19/2014 at 20:12:02.67

~~~ Services

~~~ Registry Values

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{27E13763-8E76-4B6A-B40D-C45BA4BAD893}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{8718F62B-A75D-4F52-AAF0-4F6159D8C0F2}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{514F0A7C-AAB3-4A2E-8343-B118CE92123F}

~~~ Files

~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\sparktrust"
Successfully deleted: [Folder] "C:\Users\ken\AppData\Roaming\sparktrust"
Successfully deleted: [Folder] "C:\Users\ken\appdata\locallow\weatherblink"
Successfully deleted: [Folder] "C:\Users\ken\Local Settings\Application Data\weatherblink"
Successfully deleted: [Folder] "C:\Program Files\video download converter"

~~~ FireFox

Successfully deleted: [Folder] C:\Users\ken\AppData\Roaming\mozilla\firefox\profiles\fkwzve7m.default\extensions\{7affbfae-c4e2-4915-8c0f-00fa3ec610a1}
Successfully deleted the following from C:\Users\ken\AppData\Roaming\mozilla\firefox\profiles\fkwzve7m.default\prefs.js

user_pref("aol_toolbar.aolmail.address", "");
user_pref("aol_toolbar.aolmail.count", "0");
user_pref("", "value");
user_pref("aol_toolbar.aolmail.imagelist.layout", "empty");
user_pref("aol_toolbar.aolmail.popup.autoclose", "true");
user_pref("aol_toolbar.aolmail.user", "");
user_pref("aol_toolbar.buttons.layout", "mapquest_40872;netflix_46519;techcrunch_47552;radio_46530;");
user_pref("", "{}");
user_pref("aol_toolbar.calendar.displaydate", "{}");
user_pref("aol_toolbar.calendar.timestamp", "1413763614495");
user_pref("aol_toolbar.curtain.congrats", "none");
user_pref("aol_toolbar.default.historybutton.num", "4");
user_pref("aol_toolbar.firsttime.showwindow", false);
user_pref("aol_toolbar.guid", "{09FDABCD-A966-51C1-46E9-7459798867B8}");
user_pref("", true);
user_pref("aol_toolbar.historybutton.enabled", true);
user_pref("aol_toolbar.homepageprotection.enabled", false);
user_pref("aol_toolbar.install.distroid", "aol");
user_pref("aol_toolbar.install.homepage", "hxxp://");
user_pref("aol_toolbar.install.lastTbVersion", "");
user_pref("aol_toolbar.install.lid", "hyplognew00000010");
user_pref("aol_toolbar.install.mtmhp", "hyplogusaolp00000015");
user_pref("aol_toolbar.install.ncid", "");
user_pref("aol_toolbar.install.newtab", "hxxp://");
user_pref("aol_toolbar.install.sethomepage", "0");
user_pref("aol_toolbar.install.setnewtab", "0");
user_pref("aol_toolbar.install.setsearch", "0");
user_pref("aol_toolbar.install.type", "new");
user_pref("aol_toolbar.metrics.activestampdate", "19");
user_pref("aol_toolbar.metrics.activestampmonth", "9");
user_pref("aol_toolbar.metrics.activestampyear", "2014");
user_pref("aol_toolbar.metrics.log", false);
user_pref("aol_toolbar.metrics.originalDate", "19");
user_pref("aol_toolbar.metrics.originalHours", "4");
user_pref("aol_toolbar.metrics.originalMinutes", "0");
user_pref("aol_toolbar.metrics.originalMonth", "10");
user_pref("aol_toolbar.metrics.originalSeconds", "0");
user_pref("aol_toolbar.metrics.originalYear", "2014");
user_pref("aol_toolbar.presethomepage", "");
user_pref("aol_toolbar.presetnewtab", "about:newtab");
user_pref("aol_toolbar.presetsearch", "Trovi search");
user_pref("aol_toolbar.relatednews.enabled", false);
user_pref("aol_toolbar.remote.config.js", "");
user_pref("aol_toolbar.remote.historyconfig.js", "");
user_pref("aol_toolbar.remote.publish.xml", "1413763613080");
user_pref("aol_toolbar.remote.searchterm.js", "");
user_pref("aol_toolbar.resetprompt.skip", false);
user_pref("", false);
user_pref("", true);
user_pref("", "19-10-2014");
user_pref("", "6BDFBE9D69C04A77B8FF1D49C0185A1A");
user_pref("", "19-10-2014");
user_pref("", "right");
user_pref("", false);
user_pref("", "web");
user_pref("", "TB50CL-ff");
user_pref("aol_toolbar.searchprotection.enabled", false);
user_pref("", false);
user_pref("aol_toolbar.toolbar.langlocale", "en-US");
user_pref("aol_toolbar.uninstallreset", "3");
user_pref("aol_toolbar.upgrade.showwindow", false);
user_pref("", "33_n");
user_pref("", "8");
user_pref("", "47");
user_pref("", "F");
user_pref("", "USNY0996");
user_pref("", "");
user_pref("", "0");
user_pref("aol_toolbar.widgets.layout", "aolmail,calendar,weather");
user_pref("aol_toolbar.widgets.log", false);
user_pref("aol_toolbar.widgets.timestamp", "1413763618830");
user_pref("aol_toolbar.widgets.version", "");
Emptied folder: C:\Users\ken\AppData\Roaming\mozilla\firefox\profiles\fkwzve7m.default\minidumps [2 files]

~~~ Chrome

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Google [Blacklisted Policy]

~~~ Event Viewer Logs were cleared

Scan was completed on Sun 10/19/2014 at 20:16:23.55
End of JRT log
# AdwCleaner v4.000 - Report created 19/10/2014 at 20:02:54
# DB v2014-10-19.11
# Updated 12/10/2014 by Xplode
# Operating System : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Username : ken - KEN-PC
# Running from : C:\Users\ken\Downloads\adwcleaner_4.000.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\AOL Toolbar
Folder Deleted : C:\Program Files\AOL Toolbar
Folder Deleted : C:\Users\ken\AppData\Local\AOL Toolbar
Folder Deleted : C:\Users\ken\AppData\Roaming\Mozilla\Firefox\Profiles\fkwzve7m.default\BringMeSports_1c
Folder Deleted : C:\Users\ken\AppData\Roaming\DigitalSites
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlvPlayer
Folder Deleted : C:\Users\ken\AppData\Roaming\Mozilla\Firefox\Profiles\fkwzve7m.default\mapsgalaxy_39
Folder Deleted : C:\Program Files\Common Files\Software Update Utility
Folder Deleted : C:\ProgramData\Viewpoint
Folder Deleted : C:\Program Files\Viewpoint
Folder Deleted : C:\Program Files\wse_astromenda
Folder Deleted : C:\Users\ken\AppData\Roaming\wse_astromenda
Folder Deleted : C:\Program Files\Enigma Software Group
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverRestore
Folder Deleted : C:\Program Files\TermTutor
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC
Folder Deleted : C:\Users\ken\AppData\Roaming\Mozilla\Firefox\Profiles\fkwzve7m.default\Extensions\{ad7ce998-a77b-4062-9ffb-1d0b7cb23183}
Folder Deleted : C:\Users\ken\AppData\Roaming\Mozilla\Firefox\Profiles\s6fu7yrm.default\Extensions\{ad7ce998-a77b-4062-9ffb-1d0b7cb23183}
Folder Deleted : C:\Users\ken\AppData\Roaming\Mozilla\Firefox\Profiles\s6fu7yrm.default\Extensions\staged\{ad7ce998-a77b-4062-9ffb-1d0b7cb23183}
Folder Deleted : C:\Users\ken\AppData\Roaming\Mozilla\Firefox\Profiles\fkwzve7m.default\Extensions\
Folder Deleted : C:\Users\ken\AppData\Roaming\Mozilla\Firefox\Profiles\fkwzve7m.default\Extensions\
Folder Deleted : C:\Program Files\Mozilla Firefox\Extensions\
File Deleted : C:\Users\ken\AppData\Roaming\Mozilla\Firefox\Profiles\fkwzve7m.default\Extensions\{424b0d11-e7fe-4a04-b7df-8f2c77f58aaf}.xpi
File Deleted : C:\Users\ken\AppData\Roaming\Mozilla\Firefox\Profiles\fkwzve7m.default\searchplugins\ask-web-search.xml
File Deleted : C:\Users\ken\AppData\Roaming\Mozilla\Firefox\Profiles\fkwzve7m.default\searchplugins\astromenda.xml
File Deleted : C:\Users\ken\AppData\Roaming\Mozilla\Firefox\Profiles\s6fu7yrm.default\searchplugins\astromenda.xml
File Deleted : C:\Users\ken\AppData\Roaming\Mozilla\Firefox\Profiles\fkwzve7m.default\searchplugins\trovi-search.xml
File Deleted : C:\Users\ken\AppData\Roaming\Mozilla\Firefox\Profiles\fkwzve7m.default\user.js
File Deleted : C:\Users\ken\AppData\Roaming\Mozilla\Firefox\Profiles\s6fu7yrm.default\user.js

***** [ Scheduled Tasks ] *****

Task Deleted : Digital Sites
Task Deleted : WSE_Astromenda

***** [ Shortcuts ] *****

Shortcut Disinfected : C:\Users\ken\Desktop\Search.lnk
Shortcut Disinfected : C:\Users\ken\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
Shortcut Disinfected : C:\Users\ken\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Search.lnk

***** [ Registry ] *****

Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [BRS]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\dnu.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl
Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl.1
Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary
Key Deleted : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary.1
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdate
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser.1
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController
Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Key Deleted : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{6C259840-5BA8-46E6-8ED1-EF3BA47D8BA1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E15A9BFD-D16D-496D-8222-44CADF316E70}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{92380354-381A-471F-BE2E-DD9ACD9777EA}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2E00D31D-D171-423D-836D-1A4D7EA7F1A9}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2E00D31D-D171-423D-836D-1A4D7EA7F1A9}
Key Deleted : HKCU\Software\BRS
Key Deleted : HKCU\Software\ClickConnect
Key Deleted : HKCU\Software\dsiteproducts
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\SecuredDownload
Key Deleted : HKCU\Software\SmartBar
Key Deleted : HKCU\Software\WSE_Astromenda
Key Deleted : HKCU\Software\DriverRestore
Key Deleted : HKLM\SOFTWARE\FlvPlayer
Key Deleted : HKLM\SOFTWARE\InstallCore
Key Deleted : HKLM\SOFTWARE\MetaStream
Key Deleted : HKLM\SOFTWARE\Viewpoint
Key Deleted : HKLM\SOFTWARE\EnigmaSoftwareGroup
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdUtility
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WSE_Astromenda
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SoftwareUpdUtility
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ViewpointMediaPlayer
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\WSE_Astromenda
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16584

-\\ Mozilla Firefox v33.0 (x86 en-US)

[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.aolmail.address", "");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.aolmail.count", "0");
[fkwzve7m.default] - Line Deleted : user_pref("", "value");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.aolmail.imagelist.layout", "empty");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.aolmail.popup.autoclose", "true");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.aolmail.user", "");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.buttons.layout", "mapquest_40872;netflix_46519;techcrunch_47552;radio_46530;");
[fkwzve7m.default] - Line Deleted : user_pref("", "{}");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.calendar.displaydate", "{}");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.calendar.timestamp", "1413763050742");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.curtain.congrats", "none");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.default.historybutton.num", "4");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.firsttime.showwindow", false);
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.guid", "{AEA63CAA-E846-A455-9A14-3418CC44E32C}");
[fkwzve7m.default] - Line Deleted : user_pref("", true);
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.historybutton.enabled", true);
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.homepageprotection.enabled", false);
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.install.distroid", "aol");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.install.homepage", "hxxp://");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.install.lastTbVersion", "");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.install.lid", "hyplognew00000010");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.install.mtmhp", "hyplogusaolp00000015");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.install.ncid", "");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.install.newtab", "hxxp://");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.install.sethomepage", "0");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.install.setnewtab", "0");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.install.setsearch", "0");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.install.type", "new");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.metrics.activestampdate", "19");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.metrics.activestampmonth", "9");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.metrics.activestampyear", "2014");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.metrics.log", false);
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.metrics.originalDate", "19");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.metrics.originalHours", "4");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.metrics.originalMinutes", "0");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.metrics.originalMonth", "10");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.metrics.originalSeconds", "0");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.metrics.originalYear", "2014");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.presethomepage", "");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.presetnewtab", "about:newtab");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.presetsearch", "Trovi search");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.relatednews.enabled", false);
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.remote.config.js", "");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.remote.historyconfig.js", "");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.remote.publish.xml", "1413762935911");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.remote.searchterm.js", "");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.resetprompt.skip", false);
[fkwzve7m.default] - Line Deleted : user_pref("", false);
[fkwzve7m.default] - Line Deleted : user_pref("", true);
[fkwzve7m.default] - Line Deleted : user_pref("", "19-10-2014");
[fkwzve7m.default] - Line Deleted : user_pref("", "6BDFBE9D69C04A77B8FF1D49C0185A1A");
[fkwzve7m.default] - Line Deleted : user_pref("", "19-10-2014");
[fkwzve7m.default] - Line Deleted : user_pref("", "right");
[fkwzve7m.default] - Line Deleted : user_pref("", false);
[fkwzve7m.default] - Line Deleted : user_pref("", false);
[fkwzve7m.default] - Line Deleted : user_pref("", "web");
[fkwzve7m.default] - Line Deleted : user_pref("", "TB50CL-ff");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.searchprotection.enabled", false);
[fkwzve7m.default] - Line Deleted : user_pref("", false);
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.toolbar.langlocale", "en-US");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.uninstallreset", "3");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.upgrade.showwindow", false);
[fkwzve7m.default] - Line Deleted : user_pref("", "29_n");
[fkwzve7m.default] - Line Deleted : user_pref("", "10");
[fkwzve7m.default] - Line Deleted : user_pref("", "50");
[fkwzve7m.default] - Line Deleted : user_pref("", "F");
[fkwzve7m.default] - Line Deleted : user_pref("", "");
[fkwzve7m.default] - Line Deleted : user_pref("", "USNY0996");
[fkwzve7m.default] - Line Deleted : user_pref("", "");
[fkwzve7m.default] - Line Deleted : user_pref("", "0");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.widgets.layout", "aolmail,calendar,weather");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.widgets.log", false);
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.widgets.timestamp", "1413762941795");
[fkwzve7m.default] - Line Deleted : user_pref("aol_toolbar.widgets.version", "");
[fkwzve7m.default] - Line Deleted : user_pref("extensions.astrmndasr.hmpgUrl", "hxxp://[...]
[fkwzve7m.default] - Line Deleted : user_pref("extensions.astrmndasr.newTabUrl", "hxxp://[...]
[fkwzve7m.default] - Line Deleted : user_pref("extensions.astrmndasr.prtnrId", "WSE_Astromenda");
[fkwzve7m.default] - Line Deleted : user_pref("extensions.astrmndasr.srchPrvdr", "Astromenda");
[fkwzve7m.default] - Line Deleted : user_pref("extensions.astrmndasr.tlbrSrchUrl", "hxxp://[...]
[fkwzve7m.default] - Line Deleted : user_pref("extensions.toolbar.mindspark._1cMembers_.BUTTON_STRUCTURE", "[{\"b\":221349798,\"c\":\"mindspark.magnify\",\"p\":\"L.0\"},{\"b\":221349799,\"c\":\"mindspark.entersearchterms\",\"p\":\"L.0.0[...]
[fkwzve7m.default] - Line Deleted : user_pref("extensions.toolbar.mindspark._1cMembers_.firstKnownVersion", "");
[fkwzve7m.default] - Line Deleted : user_pref("extensions.toolbar.mindspark._1cMembers_.homepage", "hxxp://^YL^xpi000^YYA^");
[fkwzve7m.default] - Line Deleted : user_pref("extensions.toolbar.mindspark._1cMembers_.hp.user.defined", true);
[fkwzve7m.default] - Line Deleted : user_pref("extensions.toolbar.mindspark._1cMembers_.initialized", true);
[fkwzve7m.default] - Line Deleted : user_pref("extensions.toolbar.mindspark._1cMembers_.installation.contextKey", "");
[fkwzve7m.default] - Line Deleted : user_pref("extensions.toolbar.mindspark._1cMembers_.installation.installDate", "2014101919");
[fkwzve7m.default] - Line Deleted : user_pref("extensions.toolbar.mindspark._1cMembers_.installation.partnerId", "^YL^xpi000^YYA^");
[fkwzve7m.default] - Line Deleted : user_pref("extensions.toolbar.mindspark._1cMembers_.installation.partnerSubId", "");
[fkwzve7m.default] - Line Deleted : user_pref("extensions.toolbar.mindspark._1cMembers_.installation.success", false);
[fkwzve7m.default] - Line Deleted : user_pref("extensions.toolbar.mindspark._1cMembers_.isCompliantUninstallImplementation", true);
[fkwzve7m.default] - Line Deleted : user_pref("extensions.toolbar.mindspark._1cMembers_.lastKnownVersion", "");
[fkwzve7m.default] - Line Deleted : user_pref("extensions.toolbar.mindspark._1cMembers_.options.defaultSearch", false);
[fkwzve7m.default] - Line Deleted : user_pref("extensions.toolbar.mindspark._1cMembers_.options.homePageEnabled", false);
[fkwzve7m.default] - Line Deleted : user_pref("extensions.toolbar.mindspark._1cMembers_.options.keywordEnabled", false);
[fkwzve7m.default] - Line Deleted : user_pref("extensions.toolbar.mindspark._1cMembers_.options.tabEnabled", false);
[fkwzve7m.default] - Line Deleted : user_pref("extensions.toolbar.mindspark._1cMembers_.partnerPixelFired", false);
[fkwzve7m.default] - Line Deleted : user_pref("extensions.toolbar.mindspark._1cMembers_.successUrl", "hxxp://");
[fkwzve7m.default] - Line Deleted : user_pref("extensions.toolbar.mindspark._1cMembers_.toolbarCollapsed", false);
[fkwzve7m.default] - Line Deleted : user_pref("extensions.toolbar.mindspark.lastInstalled", "");

-\\ Google Chrome v38.0.2125.104


AdwCleaner[R0].txt - [46958 octets] - [10/10/2014 13:29:32]
AdwCleaner[R1].txt - [30417 octets] - [19/10/2014 19:45:15]
AdwCleaner[R2].txt - [17508 octets] - [19/10/2014 20:00:03]
AdwCleaner[S0].txt - [47169 octets] - [10/10/2014 13:31:41]
AdwCleaner[S1].txt - [30673 octets] - [19/10/2014 19:50:58]
AdwCleaner[S2].txt - [17914 octets] - [19/10/2014 20:02:54]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [17975 octets] ##########

message edited by karday

Report •

October 19, 2014 at 20:22:36
Good one, we are on the right track.

Step 3: Run RogueKiller
User Guide
Official tutorial
If RogueKiller won't run, open IE & turn off SmartScreen Filter.
Download & SAVE to your Desktop. If your default download location is not the Desktop, drag it out of it's location onto the Desktop.
Quit all programs that you may have started.
Shutdown your antivirus to avoid any conflicts.
Please disconnect any USB or external drives from the computer before you run this scan!
For Vista or Windows 7/8, right-click and select "Run as Administrator to start"

For Windows XP, double-click to start.
Wait until Prescan has finished ...
Then Click on "Scan" button
Wait until the Status box shows "Scan Finished"
Click on "Delete"
Wait until the Status box shows "Deleting Finished"
Click on "Report" and Copy & Paste the content of the Notepad into your next reply.
The log should be found in RKreport[1].txt on your Desktop.
Exit/Close RogueKiller.
When completed make sure to re-enable your antivirus.

Report •

October 21, 2014 at 13:09:48
rogue did nothing but found a chrome uninstalle by google - it aborts too but geneates a log i am enclosing here - seems that anexecs of chome are looking for files in
programfiles\google\crashreports that dont exist. event logs are saying sam that
ptrogramfiles\google\crashreports dont exist
[1021/] Starting logs for version: 1.3.1
[1021/] GoogleCrashHandler could not be reached.
[1021/] Crash reporting is not available.
[1021/] Successfully re-launched elevated.
[1021/] Exiting with code: 0
[1021/] The last 4 log lines have not been uploaded to Safe Browsing.
[1021/] Starting logs for version: 1.3.1
[1021/] GoogleCrashHandler could not be reached.
[1021/] Crash reporting is not available.
[1021/] Sent request to download Recovery Component.
[1021/] Group Policies are not supported.
[1021/] Found report only folder: C:\Program Files\aws
[1021/] -- C:\Program Files\aws\WeatherBug
[1021/] Report only UwS detected: AWS
[1021/] Using Old version field from registry. Update in progress?
[1021/] Found Compatible Chrome version: 38.0.2125.104
[1021/] Recovery Component successfully downloaded.
[1021/] ChromeRecovery returned code: 0
[1021/] Using Old version field from registry. Update in progress?
[1021/] Found Compatible Chrome version: 38.0.2125.104
[1021/] Found C:\Program Files\Google\Chrome\Application\chrome.exe
[1021/] OnURLFetchUploadProgress(1375/1375).
[1021/] Exiting with code: 10
[1021/] The last 2 log lines have not been uploaded to Safe Browsing.

Report •

October 21, 2014 at 15:31:47
"rogue did nothing but found a chrome uninstalle by google"

Ok, we are dismantling the malware bit by bit.

Step 4: Download ComboFix onto your Desktop & then run. If your default download location is not the Desktop, drag it out of it's location onto the Desktop. Copy & Paste the contents of the log in your next post please. ComboFix's log should be located at C:\COMBOFIX.TXT.
A guide and tutorial on using ComboFix
Manually restoring the Internet connection
There are circumstances ComboFix will hang, crash or stall at various stages due to malware interference, failure to disable other real-time protection tools or the presence of CD Emulators (Daemon Tools, Alchohol 120%, Astroburn, AnyDVD) so that it does not complete successfully. Also, depending on how badly a system is infected, ComboFix may take longer to complete its routine than it normally does or fail to run properly. While that is not normal behavior, it is not unusual"
If you think it's frozen, look at the computer clock.
If it's running, Combofix is still working.
NOTE: Do not mouseclick combofix's window while it is running. That may cause it to stall.
NOTE: ComboFix will check to see if the Microsoft Windows Recovery Console is installed.
***It's strongly recommended to have the Recovery Console installed before doing any malware removal.***
**Please Note: If the Microsoft Windows Recovery Console is already installed, ComboFix will automatically proceed with its scan.
The Recovery Console provides a recovery/repair mode should a problem occur during a Combofix run.
Allow ComboFix to download the Recovery Console.
Accept the End-User License Agreement.
The Recovery Console will be installed.
You will then get this next prompt that asks if you want to continue the malware scan, select yes.
If after running Combofix you discover none of your programs will open up, and you recieve the following error: "Illegal operation attempted on a registry key that has been marked for deletion". Then the answer is to REBOOT the machine, and all will be corrected.
Can't Install an Antivirus - Windows Security Center still detects previous AV
We are almost ready to start ComboFix, but before we do so, we need to take some preventative measures so that there are no conflicts with other programs when running ComboFix. At this point you should do the following:
* Close all open Windows including this one.
* Close or disable all running Antivirus, Antispyware, and Firewall programs as they may interfere with the proper running of ComboFix. Instructions on disabling these type of programs can be found in this topic.
Once these two steps have been completed, double-click on the ComboFix icon found on your Desktop.
Please Note: Once you start ComboFix you should not click anywhere on the ComboFix window as it can cause the program to stall. In fact, when ComboFix is running, do not touch your computer at all. The scan could take a while, so please be patient.

Report •

October 22, 2014 at 17:18:18
✔ Best Answer
in the end the problem was because the new release of google had a conflict with my cam software. Uninstalling my cam software and installing a new release of cam software - solve the problew - thanks for your help - didnt think it was a virus problem

Report •

October 22, 2014 at 17:29:26
" Uninstalling my cam software"
Nice work.

"didnt think it was a virus problem"
No, but we had to make sure & your AdwCleaner & Junkware Removal Tool (JRT) logs, show that lots was going on behind the screens.

A lot of programs, now give you the choice to install toolbars & other during the install. Either uncheck these items during install, or use Custom install. No more click, click during an install, you have to read after each click.

I use Softpedia, down the bottom of the page, they make you aware what Ad-supported programs the author of the program has included.
Sample pages
First and foremost, extra attention needs to be paid during installation as ImgBurn offers to create desktop shortcuts to third-party apps, as well as install a browser toolbar onto the host computer, which are not required to ensure the smooth running of the app.
SS of above.
This is what ImgBurn tries to install.

Use Unchecky to help prevent these third party installs. Nothing is perfect, the badies are always ahead of the goodies, so be vigilant.
A reliable application that aims to protect your computer against third-party components often offered during software installations.

Report •

October 22, 2014 at 17:41:07
always am ty

Report •

Ask Question