jharpj

I am using Win 10. I have installed Adblock plus for Opera and for Internet Explorer but am unable to set either one to block "social share buttons."

After having posted this question I came back to see if there were any answers but was unable to locate the post so posted it again. Now I have it posted twice - sorry. The other post is located at this location: https://forums.malwarebytes.org/index.php?/topic/175096-social-share-button-sidebar/?view=getnewpost If I knew how to remove this post I would do so.

Is there some way to block these from appearing in certain websites? See image in attached file. Thanks

How can I block social share buttons from appearing?

I tend to agree that it's not malware or virus related. I should probably try MSN's help line again.

My default MSN home address is: http://my.msn.com/default.aspx This takes me to a screen that across the top has icons for home, mail, favorites, address book etc. Below that is my personal splash screen set up by me with news, sports, weather etc. The Loging.live.com address has taken the place of my default address. It has the correct icons across the top but below that is a place for me to sign in and when I do it takes me to the http://my.msn.com/default.aspx screen. Before you were involved I phoned MSN help tech about it and they helped me change the default addreess back to the correct one but the correction only lasted for a few days. I wouldn't be surprised if this is something screwy with MSN but because it acts like a redirect I tried malwarebytes.

It's like a redirect virus.

Sometimes when I start my msn mail this opens instead of my personal splash screen. http://login.live.com/login.srf?wa=wsignin1.0&rpsnv=46&ct=1406142231&rver=5.5.4177.0&lc=1033&id=254014&wreply=http:%2f%2fmy.msn.com%2fdefault.aspx

The www.login.live.com problem is back. Would it be possible to reopen the topic so I don't have to start all over from the begining? jharpj

it looks like everything is done including I fixed my wifes machinge with MS fixit downloaded from http://windows.microsoft.com/en-us/windows/troubleshoot-problems-installing-updates#1TC=windows-7 Thank you very much. JHarpj

My computer appears to be cleaned up and I thank you for that. The Microsoft updates that keep tiring to install and configure every time I start my machine seems to have been corrected also but is still a problem on my wife's machine. Is that something you can help me with?

Okay, it worked. The offencive program is gone from my programs folder.

Is it possible to obtain this file without having to purchase Winzip?

You said: download and unzip ffix.zip (ffix.reg) (attached) Attached where? Also the font on this window has gone goofy.

Following your instructions gave me delfix.txt and not what you said I should get.

SystemLook 30.07.11 by jpshortstuff Log created at 06:31 on 18/07/2014 by JOANS Administrator - Elevation successful ========== Regfind ========== Searching for "SearchMe" [HKEY_CURRENT_USER\Software\AppDataLow\Software\SearchMe] [HKEY_CURRENT_USER\Software\SearchMe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\FEE772BFF22B1F141A963FD212C7C551] "ProductName"="SearchMe Toolbar v9.4" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\FEE772BFF22B1F141A963FD212C7C551\SourceList] "PackageName"="searchmeToolbar.msi" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files (x86)\SearchMe Toolbar\"="1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files (x86)\SearchMe Toolbar\Res\"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files (x86)\SearchMe Toolbar\Res\Lang\"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files (x86)\SearchMe Toolbar\IE\9.4\"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files (x86)\SearchMe Toolbar\IE\"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\01C1DECE28259174B9FF82AE667BD73F] "FEE772BFF22B1F141A963FD212C7C551"="C:\Program Files (x86)\SearchMe Toolbar\IE\9.4\searchmeToolbarIE.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1DE96749331F0A54491614C6016399A2] "FEE772BFF22B1F141A963FD212C7C551"="C:\Program Files (x86)\SearchMe Toolbar\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\23B4B261A2ECC1943BE70631F436E48A] "FEE772BFF22B1F141A963FD212C7C551"="C:\Program Files (x86)\SearchMe Toolbar\Res\Lang\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\36D39ACFAE179694195AC19D87CF7456] "FEE772BFF22B1F141A963FD212C7C551"="C:\Program Files (x86)\SearchMe Toolbar\Res\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5C0A356ADC7E45458397FC4B5CE0C31] "FEE772BFF22B1F141A963FD212C7C551"="C:\Program Files (x86)\SearchMe Toolbar\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F4C489B2505932F418D295384267BFBB] "FEE772BFF22B1F141A963FD212C7C551"="C:\Program Files (x86)\SearchMe Toolbar\WidgiHelper.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\FEE772BFF22B1F141A963FD212C7C551\InstallProperties] "InstallLocation"="C:\Program Files (x86)\SearchMe Toolbar\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\FEE772BFF22B1F141A963FD212C7C551\InstallProperties] "DisplayName"="SearchMe Toolbar v9.4" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{FB277EEF-B22F-41F1-A169-F32D217C5C15}] "InstallLocation"="C:\Program Files (x86)\SearchMe Toolbar\" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{FB277EEF-B22F-41F1-A169-F32D217C5C15}] "DisplayName"="SearchMe Toolbar v9.4" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\SearchMe] [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\SearchMe] "serverURL"="http://searchme.mybrowserbar.com/" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\SearchMe] "partnerName"="SearchMe" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\SearchMe] "partnerNameSafe"="searchme" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\SearchMe] "installDir"="C:\Program Files (x86)\SearchMe Toolbar\" [HKEY_USERS\S-1-5-21-2183701590-1873992799-1918826727-1000\Software\AppDataLow\Software\SearchMe] [HKEY_USERS\S-1-5-21-2183701590-1873992799-1918826727-1000\Software\SearchMe] -= EOF =-

You said: :RegfindSearchMeClick the Look button to start the scan. Question - Did you intend to type a space between Me and Click?

MrC, I have never seen the seachme toolbar show up in any of my browsers but when my msn was redirected to login.live.com a few times I went into control panel/programs and found that it had recently been installed and that I couldn't remove it. That’s when I posted a message to malwarebytes looking for help. The redirect problem hasn't appeared again since about the time you started helping me. and - The Microsoft updates that keep tiring to install and configure every time I start my machine seems to have been corrected but is still a problem on my wife's machine. Does that sound like a malware problem or something else? Jharpj

I see no evidence that it is affecting anything.

Yes, I ran MBAM and it says no malicious items were found even though I still can't remove the searchme toolbar and the widnows updates still wont install configure.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.4 (04.06.2014:1) OS: Windows 7 Home Premium x64 Ran by JOANS on Wed 07/16/2014 at 12:36:31.28 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on Wed 07/16/2014 at 12:49:20.19 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

# AdwCleaner v3.215 - Report created 16/07/2014 at 11:58:07 # Updated 09/07/2014 by Xplode # Operating System : Windows 7 Home Premium Service Pack 1 (64 bits) # Username : JOANS - JOANS-PC # Running from : C:\Users\JOANS\Desktop\mbam2\AdwCleaner.exe # Option : Clean ***** [ Services ] ***** ***** [ Files / Folders ] ***** Folder Deleted : C:\Program Files (x86)\Application Updater Folder Deleted : C:\Program Files (x86)\GreenTree Applications Folder Deleted : C:\Program Files (x86)\Common Files\Spigot Folder Deleted : C:\Users\JOANS\AppData\Local\Slick Savings Folder Deleted : C:\Users\JOANS\AppData\LocalLow\SearchMe Folder Deleted : C:\Users\JOANS\AppData\Roaming\Slick Savings File Deleted : C:\Users\JOANS\AppData\LocalLow\SkwConfig.bin File Deleted : C:\Windows\Tasks\driverupdate startup.job File Deleted : C:\Windows\System32\Tasks\driverupdate startup ***** [ Shortcuts ] ***** ***** [ Registry ] ***** Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bpegkgagfojjbcpkihigfmkojdmmimdf Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ehgldbbpchgpcfagfpfjgoomddhccfgh Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\updatewhilokii_rasapi32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\updatewhilokii_rasmancs Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2318C2B1-4965-11D4-9B18-009027A5CD4F} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2318C2B1-4965-11D4-9B18-009027A5CD4F} Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{2318C2B1-4965-11D4-9B18-009027A5CD4F}] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{2318C2B1-4965-11D4-9B18-009027A5CD4F}] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217} Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC} Value Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{2318C2B1-4965-11D4-9B18-009027A5CD4F}] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Key Deleted : HKCU\Software\Search Settings Key Deleted : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0} Key Deleted : HKLM\Software\Application Updater Key Deleted : HKLM\Software\Search Settings Key Deleted : [x64] HKLM\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar ***** [ Browsers ] ***** -\\ Internet Explorer v10.0.9200.16921 -\\ Mozilla Firefox v [ File : C:\Users\JOANS\AppData\Roaming\Mozilla\Firefox\Profiles\2f47wrei.default\prefs.js ] Line Deleted : user_pref("extensions.fvd_single.surfcanyon.ramp.start_time", "1394629518963"); [ File : C:\Users\JOANS\AppData\Roaming\Mozilla\Firefox\Profiles\wxv5jwew.default\prefs.js ] ************************* AdwCleaner[R1].txt - [3990 octets] - [16/07/2014 11:50:30] AdwCleaner[s1].txt - [3799 octets] - [16/07/2014 11:58:07] ########## EOF - C:\AdwCleaner\AdwCleaner[s1].txt - [3859 octets] ##########

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 14-07-2014 Ran by JOANS at 2014-07-16 11:36:42 Run:1 Running from C:\Users\JOANS\Desktop\mbam Boot Mode: Normal ============================================== Content of fixlist: ***************** HKLM-x32\...\Run: [] => [X] ShellIconOverlayIdentifiers: GDriveSharedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => No File SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = Toolbar: HKCU - No Name - {41564952-412D-5637-4300-7A786E7484D7} - No File Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File FF SearchPlugin: C:\Users\JOANS\AppData\Roaming\Mozilla\Firefox\Profiles\2f47wrei.default\searchplugins\yahoo_ff.xml FF HKLM-x32\...\Firefox\Extensions: [fmdownloader@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com FF Extension: Freemake Video Downloader Plugin - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com [2013-05-16] FF HKLM-x32\...\Firefox\Extensions: [ytfmdownloader@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com FF Extension: Freemake Youtube Download Button - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com [2013-05-16] U0 SR; U2 srservice; C:\Users\JOANS\msndata.dat C:\Users\JOANS\AppData\Local\Temp\exthelper.exe C:\Users\JOANS\AppData\Local\Temp\LMkRstPt.exe C:\Users\JOANS\AppData\Local\Temp\oi_{4896BBB9-47CF-472D-BA00-D316EEC0E91C}.exe C:\Users\JOANS\AppData\Local\Temp\UNINSTALL.EXE C:\Users\JOANS\AppData\Local\Temp\vlc-2.1.2-win32.exe Task: {3685C3E6-EE16-4680-9110-A0651E9F4226} - \DigitalSite No Task File <==== ATTENTION Task: {B9A98E11-9F93-4560-84D4-CEE06D647E2B} - \Scheduled Update for Ask Toolbar No Task File <==== ATTENTION HKU\.DEFAULT\Software\Classes\.exe: exefile => "%1" %* <===== ATTENTION! HKU\.DEFAULT\Software\Classes\exefile: "%1" %* <===== ATTENTION! HKU\S-1-5-19\Software\Classes\.exe: exefile => "%1" %* <===== ATTENTION! HKU\S-1-5-19\Software\Classes\exefile: "%1" %* <===== ATTENTION! HKU\S-1-5-20\Software\Classes\.exe: exefile => "%1" %* <===== ATTENTION! HKU\S-1-5-20\Software\Classes\exefile: "%1" %* <===== ATTENTION! HKU\S-1-5-21-2183701590-1873992799-1918826727-1000\Software\Classes\.exe: exefile => "%1" %* <===== ATTENTION! HKU\S-1-5-21-2183701590-1873992799-1918826727-1000\Software\Classes\exefile: "%1" %* <===== ATTENTION! ***************** HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully. 'HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\GDriveSharedOverlay' => Key deleted successfully. 'HKLM\Software\Classes\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}'=> Key not found. 'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}' => Key deleted successfully. 'HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}'=> Key not found. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{41564952-412D-5637-4300-7A786E7484D7} => value deleted successfully. 'HKCR\CLSID\{41564952-412D-5637-4300-7A786E7484D7}'=> Key not found. HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} => value deleted successfully. 'HKCR\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}'=> Key not found. 'HKCR\PROTOCOLS\Filter\text/xml' => Key deleted successfully. 'HKCR\CLSID\{807553E5-5146-11D5-A672-00B0D022E945}'=> Key not found. C:\Users\JOANS\AppData\Roaming\Mozilla\Firefox\Profiles\2f47wrei.default\searchplugins\yahoo_ff.xml => Moved successfully. HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\fmdownloader@gmail.com => value deleted successfully. C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com => Moved successfully. HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\ytfmdownloader@gmail.com => value deleted successfully. C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com => Moved successfully. SR => Service deleted successfully. srservice => Service deleted successfully. C:\Users\JOANS\msndata.dat => Moved successfully. C:\Users\JOANS\AppData\Local\Temp\exthelper.exe => Moved successfully. C:\Users\JOANS\AppData\Local\Temp\LMkRstPt.exe => Moved successfully. C:\Users\JOANS\AppData\Local\Temp\oi_{4896BBB9-47CF-472D-BA00-D316EEC0E91C}.exe => Moved successfully. C:\Users\JOANS\AppData\Local\Temp\UNINSTALL.EXE => Moved successfully. C:\Users\JOANS\AppData\Local\Temp\vlc-2.1.2-win32.exe => Moved successfully. 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3685C3E6-EE16-4680-9110-A0651E9F4226}' => Key deleted successfully. 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3685C3E6-EE16-4680-9110-A0651E9F4226}' => Key deleted successfully. 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DigitalSite' => Key deleted successfully. 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B9A98E11-9F93-4560-84D4-CEE06D647E2B}' => Key deleted successfully. 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B9A98E11-9F93-4560-84D4-CEE06D647E2B}' => Key deleted successfully. 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar' => Key deleted successfully. 'HKU\.DEFAULT\Software\Classes\exefile' => Key deleted successfully. 'HKU\.DEFAULT\Software\Classes\.exe' => Key deleted successfully. 'HKU\.DEFAULT\Software\Classes\exefile'=> Key not found. 'HKU\S-1-5-19\Software\Classes\exefile' => Key deleted successfully. 'HKU\S-1-5-19\Software\Classes\.exe' => Key deleted successfully. 'HKU\S-1-5-19\Software\Classes\exefile'=> Key not found. 'HKU\S-1-5-20\Software\Classes\exefile' => Key deleted successfully. 'HKU\S-1-5-20\Software\Classes\.exe' => Key deleted successfully. 'HKU\S-1-5-20\Software\Classes\exefile'=> Key not found. 'HKU\S-1-5-21-2183701590-1873992799-1918826727-1000\Software\Classes\exefile' => Key deleted successfully. 'HKU\S-1-5-21-2183701590-1873992799-1918826727-1000\Software\Classes\.exe' => Key deleted successfully. 'HKU\S-1-5-21-2183701590-1873992799-1918826727-1000\Software\Classes\exefile'=> Key not found. ==== End of Fixlog ====

Yes, both are in the same folder only when I downloaded fixlist.txt from your website it arrived in my computer with the name changed to fixlist(1).txt. Something else thats going on that both my computer and my wifes compurter are downloading and attempting to configure nine windows updates which fail every time. This goes on every time the machine is started.

Yes I click Fix and get a little window that says . . . No fixlog.txt found. There is of course the one you had me download from this websit.