google chrome can't find how to remove apps that have attach

August 15, 2013 at 10:57:45
Specs: Windows 7
I accidentaly downloaded a programme called meta search while trying to download something else. It has attached itself to chrome and is now operating as my main search including lots of annoying adverts. I have uninstalled it in my main programme listing on the computer yet it is still there in chrome. I cannot seem to find a way of identifying what is running in chrome let alone stop them.

See More: google chrome cant find how to remove apps that have attach

Report •


#1
August 15, 2013 at 10:59:06
Hi mcato,

Reset chrome to default using the link mentioned below:

http://www.sevenforums.com/tutorial...

Thanks & Regards
Manshu S
#iworkfordell


Report •

#2
August 15, 2013 at 14:22:56
tried reset and at first it seemed to work but on opening it the next time it was back. Opening page had

http://i.search.metacrawler.com/?f=...

showing and a second tab with my search dial was opened automatically. I have uninstalled Chrome three times and it always comes back!


Report •

#3
August 15, 2013 at 14:39:42
Download and run this free program:
http://www.bleepingcomputer.com/dow...

After running Search use the Delete button.

Always pop back and let us know the outcome - thanks


Report •

Related Solutions

#4
August 15, 2013 at 15:16:28
again no luck I am afraid. did everything - it rebooted computer and the two pages are still there when google Chrome opens :-(

Report •

#5
August 15, 2013 at 16:36:58
Copy & Paste the contents of the AdwCleaner log, in your reply please.

message edited by Johnw


Report •

#6
August 15, 2013 at 16:40:49
Resolved Question
How to delete metacrawler search in google chrome?

http://in.answers.yahoo.com/questio...

How To Remove MetaCrawler Toolbar Malware And Infospace.com Viruses (Metacrawler.com Hijacker Virus)
http://botcrawl.com/how-to-remove-m...

message edited by Johnw


Report •

#7
August 16, 2013 at 00:12:25
Yahoo answers was absolutely no good. all it does is temporarily reset the browser but does not remove programmes. They then reset later. I have tried to remove them from explorer and even though I can disable them the 'remove' option does not work when you highlight these add-ons.
Botcrawl was more useful and I have deleted everything in Chrome using Dashboard but although they no longer come up in the address bar they still automatically open tabs when I open Chrome.
I have even done this clean up again and uninsytalled Chrome and re-installed but they are still there!

Report •

#8
August 16, 2013 at 00:27:29
Ok, refer my post #5

Report •

#9
August 16, 2013 at 00:55:36
last nights reports:

# AdwCleaner v2.306 - Logfile created 08/15/2013 at 22:55:23
# Updated 19/07/2013 by Xplode
# Operating system : Windows 7 Professional Service Pack 1 (32 bits)
# User : Administrator - ADMIN2-PC
# Boot Mode : Normal
# Running from : C:\Users\catom\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W68WKL9Q\AdwCleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

File Found : C:\Users\administrator\Desktop\MySearchDial.url
File Found : C:\Windows\Tasks\Dealply.job
Folder Found : C:\Program Files\DealPly
Folder Found : C:\Program Files\DealPlyLive
Folder Found : C:\ProgramData\DealPlyLive
Folder Found : C:\ProgramData\Tarma Installer
Folder Found : C:\Users\administrator\AppData\Local\DealPlyLive
Folder Found : C:\Users\administrator\AppData\Roaming\DealPly
Folder Found : C:\Users\administrator\AppData\Roaming\DriverCure
Folder Found : C:\Users\administrator\AppData\Roaming\Mysearchdial
Folder Found : C:\Users\catom\AppData\Roaming\DSite

***** [Registry] *****

Key Found : HKCU\Software\InstallCore
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007}
Key Found : HKCU\Software\mysearchdial
Key Found : HKLM\Software\AVG Secure Search
Key Found : HKLM\SOFTWARE\Classes\AppID\{38A066B0-DD5F-4226-AC4F-6A27C1BFB892}
Key Found : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Key Found : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Found : HKLM\SOFTWARE\Classes\AppID\PricePeep.DLL
Key Found : HKLM\SOFTWARE\Classes\CLSID\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007}
Key Found : HKLM\SOFTWARE\Classes\esrv.mysearchdialESrvc
Key Found : HKLM\SOFTWARE\Classes\esrv.mysearchdialESrvc.1
Key Found : HKLM\SOFTWARE\Classes\Interface\{1B97A696-5576-43AC-A73B-E1D2C78F21E8}
Key Found : HKLM\SOFTWARE\Classes\Interface\{75BF416E-4326-45B5-8A2D-AE32D05B930B}
Key Found : HKLM\SOFTWARE\Classes\PricePeep.PricePeepBho
Key Found : HKLM\SOFTWARE\Classes\PricePeep.PricePeepBho.1
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{3BF3DED5-0FC8-4207-AC09-AA7B5AF4E408}
Key Found : HKLM\Software\InstallCore
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{219046AE-358F-4CF1-B1FD-2B4DE83642A8}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007}

***** [Internet Browsers] *****

-\\ Internet Explorer v10.0.9200.16660

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://start.mysearchdial.com/?f=1&a=dnldmsd&cd=2XzuyEtN2Y1L1QzutDtDzytD0FyDzyzzzyyBzz0A0CzzzztDtN0D0Tzu0CyDzytAtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1Q1G1I1Q1H1B1Q&cr=779824246&ir=
[HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://start.mysearchdial.com/?f=2&a=dnldmsd&cd=2XzuyEtN2Y1L1QzutDtDzytD0FyDzyzzzyyBzz0A0CzzzztDtN0D0Tzu0CyDzytAtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1Q1G1I1Q1H1B1Q&cr=779824246&ir=
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://start.mysearchdial.com/?f=1&a=dnldmsd&cd=2XzuyEtN2Y1L1QzutDtDzytD0FyDzyzzzyyBzz0A0CzzzztDtN0D0Tzu0CyDzytAtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1Q1G1I1Q1H1B1Q&cr=779824246&ir=

*************************

AdwCleaner[R1].txt - [3361 octets] - [15/08/2013 22:55:23]

########## EOF - \AdwCleaner[R1].txt - [3421 octets] ##########


and


# AdwCleaner v2.306 - Logfile created 08/15/2013 at 22:56:25
# Updated 19/07/2013 by Xplode
# Operating system : Windows 7 Professional Service Pack 1 (32 bits)
# User : Administrator - ADMIN2-PC
# Boot Mode : Normal
# Running from : C:\Users\catom\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W68WKL9Q\AdwCleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

File Deleted : C:\Users\administrator\Desktop\MySearchDial.url
File Deleted : C:\Windows\Tasks\Dealply.job
Folder Deleted : C:\Program Files\DealPly
Folder Deleted : C:\Program Files\DealPlyLive
Folder Deleted : C:\ProgramData\DealPlyLive
Folder Deleted : C:\ProgramData\Tarma Installer
Folder Deleted : C:\Users\administrator\AppData\Local\DealPlyLive
Folder Deleted : C:\Users\administrator\AppData\Roaming\DealPly
Folder Deleted : C:\Users\administrator\AppData\Roaming\DriverCure
Folder Deleted : C:\Users\administrator\AppData\Roaming\Mysearchdial
Folder Deleted : C:\Users\catom\AppData\Roaming\DSite

***** [Registry] *****

Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007}
Key Deleted : HKCU\Software\mysearchdial
Key Deleted : HKLM\Software\AVG Secure Search
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{38A066B0-DD5F-4226-AC4F-6A27C1BFB892}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\PricePeep.DLL
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007}
Key Deleted : HKLM\SOFTWARE\Classes\esrv.mysearchdialESrvc
Key Deleted : HKLM\SOFTWARE\Classes\esrv.mysearchdialESrvc.1
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1B97A696-5576-43AC-A73B-E1D2C78F21E8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{75BF416E-4326-45B5-8A2D-AE32D05B930B}
Key Deleted : HKLM\SOFTWARE\Classes\PricePeep.PricePeepBho
Key Deleted : HKLM\SOFTWARE\Classes\PricePeep.PricePeepBho.1
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{3BF3DED5-0FC8-4207-AC09-AA7B5AF4E408}
Key Deleted : HKLM\Software\InstallCore
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{219046AE-358F-4CF1-B1FD-2B4DE83642A8}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007}

***** [Internet Browsers] *****

-\\ Internet Explorer v10.0.9200.16660

Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://start.mysearchdial.com/?f=1&a=dnldmsd&cd=2XzuyEtN2Y1L1QzutDtDzytD0FyDzyzzzyyBzz0A0CzzzztDtN0D0Tzu0CyDzytAtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1Q1G1I1Q1H1B1Q&cr=779824246&ir= --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://start.mysearchdial.com/?f=2&a=dnldmsd&cd=2XzuyEtN2Y1L1QzutDtDzytD0FyDzyzzzyyBzz0A0CzzzztDtN0D0Tzu0CyDzytAtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1Q1G1I1Q1H1B1Q&cr=779824246&ir= --> hxxp://www.google.com
Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://start.mysearchdial.com/?f=1&a=dnldmsd&cd=2XzuyEtN2Y1L1QzutDtDzytD0FyDzyzzzyyBzz0A0CzzzztDtN0D0Tzu0CyDzytAtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1Q1G1I1Q1H1B1Q&cr=779824246&ir= --> hxxp://www.google.com

*************************

AdwCleaner[R1].txt - [3488 octets] - [15/08/2013 22:55:23]
AdwCleaner[S1].txt - [3594 octets] - [15/08/2013 22:56:25]

########## EOF - \AdwCleaner[S1].txt - [3654 octets] ##########


Report •

#10
August 16, 2013 at 00:57:51
repeated it this morning and these are the reports:

# AdwCleaner v2.306 - Logfile created 08/16/2013 at 08:15:59
# Updated 19/07/2013 by Xplode
# Operating system : Windows 7 Professional Service Pack 1 (32 bits)
# User : Administrator - ADMIN2-PC
# Boot Mode : Normal
# Running from : C:\Users\catom\Downloads\AdwCleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****


***** [Registry] *****


***** [Internet Browsers] *****

-\\ Internet Explorer v10.0.9200.16660

[OK] Registry is clean.

*************************

AdwCleaner[R1].txt - [3488 octets] - [15/08/2013 22:55:23]
AdwCleaner[R2].txt - [587 octets] - [16/08/2013 08:15:59]
AdwCleaner[S1].txt - [3721 octets] - [15/08/2013 22:56:25]

########## EOF - \AdwCleaner[R2].txt - [706 octets] ##########


and


# AdwCleaner v2.306 - Logfile created 08/16/2013 at 08:16:55
# Updated 19/07/2013 by Xplode
# Operating system : Windows 7 Professional Service Pack 1 (32 bits)
# User : Administrator - ADMIN2-PC
# Boot Mode : Normal
# Running from : C:\Users\catom\Downloads\AdwCleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****


***** [Registry] *****


***** [Internet Browsers] *****

-\\ Internet Explorer v10.0.9200.16660

[OK] Registry is clean.

*************************

AdwCleaner[R1].txt - [3488 octets] - [15/08/2013 22:55:23]
AdwCleaner[R2].txt - [772 octets] - [16/08/2013 08:15:59]
AdwCleaner[S1].txt - [3721 octets] - [15/08/2013 22:56:25]
AdwCleaner[S2].txt - [706 octets] - [16/08/2013 08:16:55]

########## EOF - \AdwCleaner[S2].txt - [765 octets] ##########

thanks


Report •

#11
August 16, 2013 at 00:59:14
Thanks, now Run Junkware Removal Tool
http://www.softpedia.com/get/Securi...
http://www.softpedia.com/progScreen...
http://www.bleepingcomputer.com/dow...
http://thisisudax.blogspot.com.au/2...
Download Junkware Removal Tool to your desktop.
Warning! Once the scan is complete JRT will shut down your browser with NO warning.
Shut down your protection software now to avoid potential conflicts.
Temporarily disable your antivirus and any antispyware real time protection before performing a scan. Click this link to see a list of security programs that should be disabled and how to disable them. http://www.bleepingcomputer.com/for...
Run the tool by double-clicking it. If you are using Windows Vista or Windows 7/8, right-click JRT and select Run as Administrator
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Copy and Paste the contents of the JRT.txt log please.

Report •

#12
August 16, 2013 at 01:02:28
ok will do in a while as I have 'life' stuff to do!!!

Thanks very much.

Will post reply when I have carried this out.


Report •

#13
August 16, 2013 at 01:09:02
"ok will do in a while as I have 'life' stuff to do!!!"
Ditto, I have to leave in just over an hour, going to a singing commitment.

Let me know how it is running after each step. Just a matter of removing the problems bit by bit.

message edited by Johnw


Report •

Ask Question