Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


do-search? Help please?

  • This topic is locked This topic is locked
2 replies to this topic

#1 katzenchow


  • Members
  • 1 posts
  • Local time:10:31 PM

Posted 21 November 2013 - 08:53 PM

Hello, I downloaded some videoplayer a while back and it gave me the "do-search" virus. 
I followed Step 1 on these instructions, as I have worked with adwCleaner on my previous laptop: http://malwaretips.com/blogs/do-search-removal/
The log is on the file (I used Notepad, I don't think it carries viruses?)
The warning at the top of the adw screen says "Pending. Please uncheck any elements you don't want to remove."
Are all these files safe to remove? I don't want to delete Sys32 on accident, haha
In case the file isn't working:
# AdwCleaner v3.012 - Report created 21/11/2013 at 17:31:32
# Updated 11/11/2013 by Xplode
# Operating System : Windows 8  (64 bits)
# Username : xAdministrator - ADMINISTRATOR
# Running from : C:\Users\xAdministrator\Downloads\adwcleaner.exe
# Option : Scan
***** [ Services ] *****
***** [ Files / Folders ] *****
File Found : C:\Users\xAdministrator\AppData\Roaming\Mozilla\Firefox\Profiles\mc7q7cs7.default\user.js
File Found : C:\windows\System32\Tasks\Desk 365 RunAsStdUser
Folder Found C:\Program Files (x86)\Common Files\337
Folder Found C:\ProgramData\boost_interprocess
Folder Found C:\ProgramData\eSafe
Folder Found C:\Users\xAdministrator\AppData\Local\Oxy
Folder Found C:\Users\xAdministrator\AppData\Local\SwvUpdater
Folder Found C:\Users\xAdministrator\AppData\Roaming\Oxy
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Found : HKCU\Software\Softonic
Key Found : [x64] HKCU\Software\Softonic
Key Found : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Key Found : HKLM\Software\Desksvc
Key Found : HKLM\Software\eSafeSecControl
Key Found : HKLM\Software\hdcode
Key Found : HKLM\Software\V9
Key Found : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\DeskSvc
Key Found : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
***** [ Browsers ] *****
-\\ Internet Explorer v10.0.9200.16537
-\\ Mozilla Firefox v25.0.1 (en-US)
[ File : C:\Users\xAdministrator\AppData\Roaming\Mozilla\Firefox\Profiles\mc7q7cs7.default\prefs.js ]
-\\ Google Chrome v31.0.1650.57
[ File : C:\Users\xAdministrator\AppData\Local\Google\Chrome\User Data\Default\preferences ]
AdwCleaner[R0].txt - [1988 octets] - [21/11/2013 17:31:32]
########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [2048 octets] ##########

Attached Files

BC AdBot (Login to Remove)


#2 TB-Psychotic


  • Malware Response Team
  • 6,349 posts
  • Gender:Male
  • Local time:07:31 AM

Posted 22 November 2013 - 03:47 AM

Hi there,
my name is Marius and I will assist you with your malware related problems.

Before we move on, please read the following points carefully.

  • First, read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.
  • Perform everything in the correct order. Sometimes one step requires the previous one.
  • If you have any problems while following my instructions, Stop there and tell me the exact nature of your problem.
  • Do not run any other scans without instruction or add/remove software unless I tell you to do so. This would change the output of our tools and could be confusing for me.
  • Post all logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.
  • If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.
  • Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.
  • My first language is not english. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.




Delete junk with adwCleaner

Please download AdwCleaner to your desktop.

  • Run adwcleaner.exe
  • Hit Scan and wait for the scan to finish.
  • Confirm the message but don´t uncheck anything.
  • Hit Clean
  • When the run is finished, it will open up a text file
  • Please post its contents within your next reply
  • You´ll find the log file at C:\AdwCleaner[S1].txt also




Delete junk with JRT

thisisujrt.gif Please download Junkware Removal Tool to your desktop.

  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.




ShortcutCleaner (by Grinler)

Please download Shortcutcleaner and save the file to your desktop.
Run it by double click, it will scan your computer. Wen finished, it makes a sc-cleaner.txt to your desktop.

Post the content of the file here.

Proud Member of UNITE & TB
My help is free, however, if you want to support my fight against malware, click here --> btn_donate_SM.gif <--(no worries, every little bit helps)

#3 TB-Psychotic


  • Malware Response Team
  • 6,349 posts
  • Gender:Male
  • Local time:07:31 AM

Posted 06 December 2013 - 06:55 AM

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days.

Please include a link to your topic in the Private Message. Thank you.
Proud Member of UNITE & TB
My help is free, however, if you want to support my fight against malware, click here --> btn_donate_SM.gif <--(no worries, every little bit helps)

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users