bloody blekko, help me please

have this annoying blekko thing poppong up when i open up IE, have run hijackthis, super anti spyware, malwarebytes, advance system care, can't get rid of it am i using the right programs or what can i do , any help would be nice thanks

Hi, have you tried uninstalling it from Add/Remove programs?

tried that but noyhing there, i was reading bout it and says it disguises itself in other programs, i downloaded a program and had to add that toolbar from blekko, added it thinking i could delete it, but to won't delete, also remove the program that blekko came with,i deleted that too, and it's still popping up when i open IE.

Let's try an ESET OnlineScan

• Hold down Control and click on the following link to open ESET OnlineScan in a new window.
  ESET OnlineScan
• Click the button.
• For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
  • Click on to download the ESET Smart Installer. Save it to your desktop.
  • Double click on the icon on your desktop.
• Check
• Click the button.
• Accept any security warnings from your browser.
• Check
• Check Remove found threats and Scan potentially unwanted applications (If given the option, choose "Quarantine" instead of delete.)
• Push the Start button.
• ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
• When the scan completes, push
• Push , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
• Push the button.
• Push

Please download AdwCleaner by Xplode to your desktop.

• Make sure all programs are closed
• Doubleclick adwcleaner.exe
• Click Delete
• Press OK when prompted
• Restart your computer when asked
• Copy and paste the contents of the text files that opens after your computer restarts to a reply to this thread. (The log is also saved to C:\AdwCleaner[S1].txt)

Please include the following in your reply
ESET log
ADWCleaner log
Any questions/comments you may have

Blekko is an unwanted search engine.
what browser(s) do you use?

Check the Hosts file..
MiniToolBox
Please download MiniToolBox, save it to your desktop and run it.Checkmark the following checkboxes:

• Flush DNS
• Report IE Proxy Settings
• Reset IE Proxy Settings
• Report FF Proxy Settings
• Reset FF Proxy Settings
• List content of Hosts
• List IP configuration
• List Winsock Entries
• List last 10 Event Viewer log
• List Installed Programs
• List Users, Partitions and Memory size.

Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run. Note: When using "Reset FF Proxy Settings" option Firefox should be closed.

Blekko is an unwanted search engine.
what browser(s) do you use?

Yeah, I thought it would show up in Add/Remove programs. Strange that it doesn't, especially seeing as the actual Blekko search engine seems to be clean.

hello slightless, have done these thing have pasted them below, hope you can find something, cheers

eset log

C:\ProgramData\Tarma Installer\{C049526F-B3EB-4151-9B11-B11F00F53A96}\_Setupx.dll a variant of Win32/Adware.Yontoo.B application cleaned by deleting - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0\3a9c5000-32d3e53a a variant of Java/Exploit.CVE-2009-2843.B trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10\653a8b4a-2c4fcb8b a variant of Java/Exploit.CVE-2009-2843.B trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10\78d6980a-4612a9f6 Java/TrojanDownloader.Agent.NBM trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11\3d726d4b-101c1d48 a variant of Java/Agent.BR trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11\555250b-2df7a99a multiple threats deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12\1dd6a40c-468a2432 multiple threats deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12\2933710c-6a7150ed Java/Exploit.CVE-2009-3867.AL trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14\2550ebce-6150ab69 a variant of Java/Agent.BR trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14\691e0a8e-4ddc9de7 probably a variant of Java/Agent.BR trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15\472bdecf-1452e14f a variant of Java/Agent.BR trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15\5f583a0f-7a8bfc69 probably a variant of Java/Agent.BR trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17\48173611-7541a4c2 multiple threats deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2\29a77082-4c9b851d Java/Exploit.CVE-2009-3867.AL trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\7bb99554-5081c987 Java/TrojanDownloader.Agent.NBL trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\7bb99554-6dad7dd5 probably a variant of Win32/Agent.DYXWUMY trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23\160ba957-77375709 multiple threats deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\20f951d8-65efbc5b Java/Exploit.CVE-2009-3867.AL trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\3ad8b099-78f47616 multiple threats deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27\48c654db-3604491c a variant of Java/Exploit.CVE-2009-2843.B trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\28\68a9cc5c-4399328e multiple threats deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29\7adbb65d-32f89937 multiple threats deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29\7adbb65d-5a8f9be6 Java/TrojanDownloader.Agent.NBK trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\30\3a25b1e-60e36f60 multiple threats deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\31\3e8b9a5f-6471d927 a variant of Java/TrojanDownloader.Agent.NBA trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\31\743fee9f-5b70e639 multiple threats deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\32\19322960-396c616d a variant of Java/Agent.BR trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33\30feb821-1a28c30e Java/TrojanDownloader.Agent.NBK trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\34\187b0ca2-4fb98021 a variant of Java/Exploit.CVE-2009-2843.B trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\34\3289f822-241558b3 a variant of Java/Agent.BR trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\34\5fc5a262-7f3bfdd8 a variant of Java/Agent.BR trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35\41e8aee3-24c51d78 a variant of Java/Exploit.CVE-2009-2843.B trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\37\170f8765-5a4a3f4d a variant of Java/Exploit.CVE-2009-2843.B trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39\47236f27-48c969d0 probably a variant of Java/Agent.BR trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39\6ccf05e7-68f69b44 probably a variant of Java/Agent.BR trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\4\5541aec4-5c49f230 Java/TrojanDownloader.Agent.NBM trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43\556445eb-2c0f7492 Java/TrojanDownloader.Agent.NBL trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43\6cbe7fab-40f3e7ed a variant of Java/Exploit.CVE-2009-2843.B trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43\752509ab-7fc27643 a variant of Java/Exploit.CVE-2009-2843.B trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\44\4ba1196c-50ae1d0e a variant of Java/Agent.BR trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\44\5473416c-1333867b Java/TrojanDownloader.Agent.NBK trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45\1d04f0ad-7b699690 probably a variant of Java/Exploit.CVE-2012-0507.BJ trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45\257a302d-129598d9 Java/Exploit.CVE-2009-3867.AL trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47\3e36666f-215b906d Java/Exploit.CVE-2009-3867.AL trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\48\4084a7b0-44bc9c35 multiple threats deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49\1eff1eb1-260276f3 probably a variant of Win32/Agent.DYXWUMY trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5\3ae03185-69d14643 probably a variant of Java/Agent.BR trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5\6a183b45-23999d2c a variant of Java/Exploit.CVE-2009-2843.B trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\51\10bc3e73-79696d19 Java/Exploit.CVE-2009-3867.AL trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\51\425fc2f3-4bc701b1 Java/Exploit.CVE-2009-3867.AL trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\31bba1f4-4a14368d Java/TrojanDownloader.Agent.NBL trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\640f9e74-1d15de81 a variant of Java/Agent.BR trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\e649f74-5730478f multiple threats deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54\4aefc2f6-1c63a400 a variant of Java/Agent.BR trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\55\77372737-1f063918 Java/Exploit.CVE-2009-3867.AL trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58\1f62c23a-648ffa65 Java/TrojanDownloader.Agent.NBM trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58\22cd13a-442002bf multiple threats deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58\d552d7a-7d6ccd5d a variant of Java/Exploit.CVE-2009-2843.B trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58\fa8f07a-6b4d15c7 probably a variant of Win32/Agent.DYXWUMY trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59\1baeccbb-25f0441a Java/Exploit.CVE-2009-3867.AL trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59\4f31467b-1ad38a05 multiple threats deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\60\385f87c-51513424 Java/Exploit.CVE-2009-3867.AL trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\61\6cb64d7d-1497c9c5 probably a variant of Java/Agent.BR trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\42e55947-51a10529 a variant of Java/Agent.BR trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\5450ce47-20d52f02 probably a variant of Java/Agent.BR trojan deleted - quarantined
C:\Users\geri\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8\64a5a908-51754c0f probably a variant of Java/Agent.BR trojan deleted - quarantined




AdwCleaner log


# AdwCleaner v2.009 - Logfile created 11/27/2012 at 16:34:12
# Updated 24/11/2012 by Xplode
# Operating system : Windows Vista ™ Home Premium Service Pack 2 (32 bits)
# User : geri - GERI-PC
# Boot Mode : Normal
# Running from : C:\Users\geri\Desktop\AdwCleaner.exe
# Option [Delete]



blekko still loads when i opened IE, i am lost

Hi, please follow boopme's instructions for running MiniToolbox.

Is your homepage set to blekko, or is there actually something popping up?

seem to be around 6 o clock every evening when i open IE, that bloody blekko opens instead, sometimes google opens and sometimes msn opens, will do that next task cheers

MiniToolBox by Farbar Version: 25-11-2012
Ran by geri (administrator) on 27-11-2012 at 19:08:05
Running from "C:\Users\geri\Desktop"
Windows Vista ™ Home Premium Service Pack 2 (X86)
Boot Mode: Normal
***************************************************************************

========================= Flush DNS: ===================================

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.
No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================


"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================

::1 localhost

127.0.0.1 localhost

========================= IP Configuration: ================================

Atheros AR5007EG Wireless Network Adapter = Wireless Network Connection (Connected)
Realtek PCIe FE Family Controller = Local Area Connection (Media disconnected)


# ----------------------------------
# IPv4 Configuration
# ----------------------------------
pushd interface ipv4

reset
set global icmpredirects=enabled


popd
# End of IPv4 configuration



Windows IP Configuration

Host Name . . . . . . . . . . . . : geri-PC
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : home

Wireless LAN adapter Wireless Network Connection:

Connection-specific DNS Suffix . : home
Description . . . . . . . . . . . : Atheros AR5007EG Wireless Network Adapter
Physical Address. . . . . . . . . : 00-24-D2-57-FC-AC
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::59f3:9998:b908:dc78%12(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.1.64(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : 27 November 2012 16:36:51
Lease Expires . . . . . . . . . . : 28 November 2012 18:56:11
Default Gateway . . . . . . . . . : 192.168.1.254
DHCP Server . . . . . . . . . . . : 192.168.1.254
DHCPv6 IAID . . . . . . . . . . . : 201336018
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-12-BE-9F-88-00-1E-33-B2-D0-85
DNS Servers . . . . . . . . . . . : 192.168.1.254
NetBIOS over Tcpip. . . . . . . . : Enabled

Ethernet adapter Local Area Connection:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek PCIe FE Family Controller
Physical Address. . . . . . . . . : 00-1E-33-B2-D0-85
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 6:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : isatap.{EE06F5B7-6A9A-406F-A9EF-2C2B87A132DC}
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Tunnel adapter Local Area Connection* 11:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 02-00-54-55-4E-01
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
IPv6 Address. . . . . . . . . . . : 2001:0:5ef5:79fb:8ef:345b:3f57:febf(Preferred)
Link-local IPv6 Address . . . . . : fe80::8ef:345b:3f57:febf%13(Preferred)
Default Gateway . . . . . . . . . : ::
NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter Local Area Connection* 12:

Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : isatap.home
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Server: BThomehub.home
Address: 192.168.1.254

Name: google.com
Addresses: 2a00:1450:4009:809::100e
173.194.41.164
173.194.41.168
173.194.41.165
173.194.41.160
173.194.41.167
173.194.41.162
173.194.41.174
173.194.41.166
173.194.41.163
173.194.41.169
173.194.41.161



Pinging google.com [173.194.41.167] with 32 bytes of data:

Reply from 173.194.41.167: bytes=32 time=26ms TTL=52

Reply from 173.194.41.167: bytes=32 time=26ms TTL=52



Ping statistics for 173.194.41.167:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 26ms, Maximum = 26ms, Average = 26ms

Server: BThomehub.home
Address: 192.168.1.254

Name: yahoo.com
Addresses: 72.30.38.140
98.138.253.109
98.139.183.24



Pinging yahoo.com [98.138.253.109] with 32 bytes of data:

Reply from 98.138.253.109: bytes=32 time=172ms TTL=44

Reply from 98.138.253.109: bytes=32 time=184ms TTL=44



Ping statistics for 98.138.253.109:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 172ms, Maximum = 184ms, Average = 178ms



Pinging 127.0.0.1 with 32 bytes of data:

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128



Ping statistics for 127.0.0.1:

Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 0ms, Average = 0ms

===========================================================================
Interface List
12 ...00 24 d2 57 fc ac ...... Atheros AR5007EG Wireless Network Adapter
10 ...00 1e 33 b2 d0 85 ...... Realtek PCIe FE Family Controller
1 ........................... Software Loopback Interface 1
11 ...00 00 00 00 00 00 00 e0 isatap.{EE06F5B7-6A9A-406F-A9EF-2C2B87A132DC}
13 ...02 00 54 55 4e 01 ...... Teredo Tunneling Pseudo-Interface
15 ...00 00 00 00 00 00 00 e0 isatap.home
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.1.254 192.168.1.64 25
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.1.0 255.255.255.0 On-link 192.168.1.64 281
192.168.1.64 255.255.255.255 On-link 192.168.1.64 281
192.168.1.255 255.255.255.255 On-link 192.168.1.64 281
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 192.168.1.64 281
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 192.168.1.64 281
===========================================================================
Persistent Routes:
None

IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
13 18 ::/0 On-link
1 306 ::1/128 On-link
13 18 2001::/32 On-link
13 266 2001:0:5ef5:79fb:8ef:345b:3f57:febf/128
On-link
12 281 fe80::/64 On-link
13 266 fe80::/64 On-link
13 266 fe80::8ef:345b:3f57:febf/128
On-link
12 281 fe80::59f3:9998:b908:dc78/128
On-link
1 306 ff00::/8 On-link
13 266 ff00::/8 On-link
12 281 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
========================= Winsock entries =====================================

Catalog5 01 C:\Windows\system32\NLAapi.dll [48128] (Microsoft Corporation)
Catalog5 02 C:\Windows\system32\napinsp.dll [50176] (Microsoft Corporation)
Catalog5 03 C:\Windows\system32\pnrpnsp.dll [62464] (Microsoft Corporation)
Catalog5 04 C:\Windows\system32\pnrpnsp.dll [62464] (Microsoft Corporation)
Catalog5 05 C:\Windows\System32\mswsock.dll [223232] (Microsoft Corporation)
Catalog5 06 C:\Windows\System32\winrnr.dll [19968] (Microsoft Corporation)
Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Catalog9 01 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 02 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 03 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 04 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 05 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 06 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 07 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 08 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 09 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 10 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 11 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 12 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 13 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 14 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 15 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 16 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 17 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 18 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 19 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 20 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 21 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 22 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 23 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)
Catalog9 24 C:\Windows\system32\mswsock.dll [223232] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:
==================
Error: (11/27/2012 04:37:03 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2012 02:03:50 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2012 09:28:33 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 82774

Error: (11/27/2012 09:28:33 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 82774

Error: (11/27/2012 09:28:33 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (11/27/2012 09:28:32 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 81698

Error: (11/27/2012 09:28:32 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 81698

Error: (11/27/2012 09:28:32 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (11/27/2012 09:28:30 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 80559

Error: (11/27/2012 09:28:30 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 80559


System errors:
=============

Microsoft Office Sessions:
=========================
Error: (11/27/2012 04:37:03 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2012 02:03:50 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/27/2012 09:28:33 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 82774

Error: (11/27/2012 09:28:33 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 82774

Error: (11/27/2012 09:28:33 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (11/27/2012 09:28:32 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 81698

Error: (11/27/2012 09:28:32 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 81698

Error: (11/27/2012 09:28:32 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (11/27/2012 09:28:30 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 80559

Error: (11/27/2012 09:28:30 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 80559


CodeIntegrity Errors:
===================================
Date: 2012-11-26 21:43:27.675
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys because the set of per-page image hashes could not be found on the system.

Date: 2012-11-26 21:43:27.238
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys because the set of per-page image hashes could not be found on the system.

Date: 2012-11-26 21:43:26.754
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys because the set of per-page image hashes could not be found on the system.

Date: 2012-11-26 21:43:26.255
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys because the set of per-page image hashes could not be found on the system.

Date: 2012-11-26 21:43:25.615
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\avgidsdriverx.sys because the set of per-page image hashes could not be found on the system.

Date: 2012-11-26 21:43:25.116
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\avgidsdriverx.sys because the set of per-page image hashes could not be found on the system.

Date: 2012-11-26 21:43:24.617
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\avgidsdriverx.sys because the set of per-page image hashes could not be found on the system.

Date: 2012-11-26 21:43:24.071
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\avgidsdriverx.sys because the set of per-page image hashes could not be found on the system.

Date: 2012-11-25 21:19:47.007
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys because the set of per-page image hashes could not be found on the system.

Date: 2012-11-25 21:19:46.539
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\avgidshx.sys because the set of per-page image hashes could not be found on the system.


=========================== Installed Programs ============================

3ivx MPEG-4 5.0.2 (remove only) (Version: 5.0.2)
888poker
Acrobat.com (Version: 2.0.0)
Acrobat.com (Version: 2.0.0.0)
AdFender (Version: 1.60)
Adobe Flash Player 10 Plugin (Version: 10.0.45.2)
Adobe Flash Player 11 ActiveX (Version: 11.4.402.287)
Adobe Reader 9.5.2 (Version: 9.5.2)
Advanced SystemCare 3 (Version: 3.3.4)
Apple Application Support (Version: 2.1.6)
Apple Mobile Device Support (Version: 4.0.0.97)
Apple Software Update (Version: 2.1.3.127)
Atheros Driver Installation Program (Version: 5.2)
Atheros Wi-Fi Protected Setup Library
µTorrent (Version: 2.2.1)
AVG 2013 (Version: 13.0.2629)
AVG 2013 (Version: 13.0.2793)
AVG 2013 (Version: 2013.0.2793)
Bonjour (Version: 3.0.0.10)
BT Desktop Help
BTHomeHub
CD/DVD Drive Acoustic Silencer (Version: 2.02.03)
Cisco EAP-FAST Module (Version: 2.1.6)
Cisco LEAP Module (Version: 1.0.12)
Cisco PEAP Module (Version: 1.0.13)
ConvertXtoDVD 4.0.12.327 (Version: 4.0.12.327)
coverXP (remove only)
D3DX10 (Version: 15.4.2368.0902)
DVD MovieFactory for TOSHIBA (Version: 5.51)
EPSON Attach To Email (Version: 1.01.0000)
EPSON File Manager (Version: 1.3.0.0)
EPSON Printer Software
ESET Online Scanner v3
ESPR265_270 User's Guide
Google Chrome (Version: 23.0.1271.64)
Google Toolbar for Internet Explorer (Version: 1.0.0)
Google Toolbar for Internet Explorer (Version: 7.4.3230.2052)
Google Update Helper (Version: 1.3.21.123)
GoToAssist Corporate (Version: 9.0.0.599)
GoToAssist Corporate (Version: 9.0.570)
HiJackThis (Version: 1.0.0)
InstantPhotoSketch Pro 2.0
Intel® Graphics Media Accelerator Driver
Intel® Matrix Storage Manager
inTuneMP3 (Version: 1.5.0)
iTunes (Version: 10.5.2.11)
Java Auto Updater (Version: 2.0.2.4)
Java™ 6 Update 21 (Version: 6.0.210)
Junk Mail filter update (Version: 15.4.3502.0922)
Malwarebytes Anti-Malware version 1.65.1.1000 (Version: 1.65.1.1000)
Media Player Codec Pack 4.2.0 (Version: 4.2.0)
Messenger Companion (Version: 15.4.3502.0922)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6012.5000)
Microsoft Silverlight (Version: 5.1.10411.0)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft XML Parser (Version: 8.20.8730.4)
Mozilla Firefox (3.6.24) (Version: 3.6.24 (en-GB))
MSVCRT (Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB941833) (Version: 4.20.9849.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
myphotobook 3.6 (Version: 3.6)
OpenOffice.org Installer 1.0 (Version: 1.0.9221)
Realtek 8169 8168 8101E 8102E Ethernet Driver (Version: 1.00.0000)
Realtek High Definition Audio Driver (Version: 6.0.1.5599)
Realtek USB 2.0 Card Reader (Version: )
Revo Uninstaller Pro 2.5.9 (Version: 2.5.9)
Segoe UI (Version: 15.4.2271.0615)
Spybot - Search & Destroy (Version: 1.6.2)
SUPERAntiSpyware (Version: 4.38.1004)
Synaptics Pointing Device Driver (Version: 11.2.4.0)
TOSHIBA Assist (Version: 2.01.08)
TOSHIBA ConfigFree (Version: 7.2.20)
TOSHIBA Disc Creator (Version: 2.0.1.3)
TOSHIBA DVD PLAYER (Version: 1.31.14)
TOSHIBA Extended Tiles for Windows Mobility Center (Version: 1.01.00)
TOSHIBA Hardware Setup (Version: 2.00.08)
TOSHIBA Manuals (Version: 7.40)
Toshiba Online Product Information (Version: 1.00.0012)
TOSHIBA Recovery Disc Creator (Version: 2.0.0.1b)
TOSHIBA Software Modem (Version: 2.1.77 (SM2177ALD04))
TOSHIBA Supervisor Password (Version: 2.00.04)
Toshiba TEMPRO (Version: 1.1)
TOSHIBA Value Added Package (Version: 1.1.24)
TRDCReminder (Version: 1.00.0015)
TRORDCLauncher (Version: 1.0.0.1)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
VLC media player 1.0.1 (Version: 1.0.1)
Windows Live Communications Platform (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3555.0308)
Windows Live Family Safety (Version: 15.4.3555.0308)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (Version: 15.4.3502.0922)
Windows Live Mail (Version: 15.4.3502.0922)
Windows Live Messenger (Version: 15.4.3538.0513)
Windows Live Messenger Companion Core (Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Photo Common (Version: 15.4.3502.0922)
Windows Live PIMT Platform (Version: 15.4.3508.1109)
Windows Live SOXE (Version: 15.4.3502.0922)
Windows Live SOXE Definitions (Version: 15.4.3502.0922)
Windows Live UX Platform (Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)
Windows Live Writer (Version: 15.4.3502.0922)
Windows Live Writer Resources (Version: 15.4.3502.0922)
Windows Media Encoder 9 Series
Windows Media Encoder 9 Series (Version: 9.00.3374)
WinRAR archiver
WinSCP 4.3.4 (Version: 4.3.4)
Yahoo! Detect

========================= Memory info: ===================================

Percentage of memory in use: 54%
Total physical RAM: 1915.25 MB
Available physical RAM: 869.25 MB
Total Pagefile: 4077.79 MB
Available Pagefile: 2593.09 MB
Total Virtual: 2047.88 MB
Available Virtual: 1950.23 MB

========================= Partitions: =====================================

1 Drive c: (Vista) (Fixed) (Total:55.74 GB) (Free:20.84 GB) NTFS
2 Drive e: (Data) (Fixed) (Total:54.58 GB) (Free:50.11 GB) NTFS

========================= Users: ========================================

User accounts for \\GERI-PC

Administrator geri Guest


**** End of log ****

Hi, check your home page settings.

Open internet explorer, click the settings button -> general

Look under home page and see what is set.

http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

this is what its at now, sometimes its google

Hi, try these instructions for removal. http://help.blekko.com/index.php/how-do-i-uninstall-search-bar/