Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


I am infected with the safesear.ch virus, What do I do

  • Please log in to reply
4 replies to this topic

#1 mcjones34


  • Members
  • 2 posts
  • Local time:04:29 PM

Posted 12 July 2014 - 04:05 PM

I am infected with the safesear.ch virus and have tried multiple measures to get rid of it, all to no avail. Please HELP?

BC AdBot (Login to Remove)


#2 InadequateInfirmity


    I Gots Me A Certified Edumication

  • Banned
  • 5,180 posts
  • Gender:Male
  • Local time:03:29 PM

Posted 12 July 2014 - 04:20 PM

Please download Junkware Removal Tool and save it on your desktop.


  • Shut down your anti-virus, anti-spyware, and firewall software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista or Windows 7, right-click it and select Run as administrator.
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log is saved to your desktop and will automatically open.
  • Please attach the JRT log.

Please download AdwCleaner by Xplode onto your desktop.
  • Close all open programs and internet browsers.
  • Double click on adwcleaner.exe to run the tool.
  • Click on Scan button.
  • When the scan has finished click on Clean button.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the contents of that logfile with your next reply.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.

Please download MINITOOLBOX and run it.

Checkmark following boxes:

Flush DNS
Reset FF proxy Settings
Reset Ie Proxy Settings
Report IE Proxy Settings
Report FF Proxy Settings
List content of Hosts
List IP configuration
List Winsock Entries
List last 10 Event Viewer log
List Installed Programs
List Users, Partitions and Memory size
List Devices (problems only)

Click Go and post the result.     

#3 mcjones34

  • Topic Starter

  • Members
  • 2 posts
  • Local time:04:29 PM

Posted 12 July 2014 - 05:15 PM

Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8.1 Pro x64
Ran by Matthew on Sat 07/12/2014 at 17:50:47.94


~~~ Services


~~~ Registry Values


~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{67C334C0-408D-4E6D-B5A7-0ADD6AFFA252}


~~~ Files


~~~ Folders


~~~ Event Viewer Logs were cleared



Scan was completed on Sat 07/12/2014 at 17:56:10.78
End of JRT log



 AdwCleaner v3.215 - Report created 12/07/2014 at 17:56:43
# Updated 09/07/2014 by Xplode
# Operating System : Windows 8.1 Pro  (64 bits)
# Username : Matthew - MATTHEWLAPTOP
# Running from : C:\Users\Matthew\AppData\Local\Microsoft\Windows\INetCache\IE\8AKW8X15\adwcleaner_3.215.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\Users\Matthew\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff

***** [ Shortcuts ] *****

***** [ Registry ] *****

Value Deleted : HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel [Homepage]

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17126

-\\ Google Chrome v

[ File : C:\Users\Matthew\AppData\Local\Google\Chrome\User Data\Default\preferences ]

[ File : C:\Users\Matthew Jones\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Search Provider] : hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd0101aw&cd=2XzuyEtN2Y1L1Qzu0EyEtCtCyD0ByDzztC0C0DtBtAyDtCyEtN0D0Tzu0SyByDtCtN1L2XzutBtFtBtFtCyDtFtCyDzytBtN1L1CzutDzytDtCtG1T&cr=1506813546&ir=


AdwCleaner[R0].txt - [7001 octets] - [12/07/2014 11:42:08]
AdwCleaner[R1].txt - [1462 octets] - [12/07/2014 17:54:21]
AdwCleaner[S0].txt - [6227 octets] - [12/07/2014 11:42:45]
AdwCleaner[S1].txt - [1389 octets] - [12/07/2014 17:56:43]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1449 octets] ##########

#4 noknojon


  • Banned
  • 10,871 posts
  • Gender:Not Telling
  • Local time:06:29 AM

Posted 12 July 2014 - 05:35 PM

Can you access AdwCleaner[S0].txt - [6227 octets] - [12/07/2014 11:42:45] ??
A copy of all logfiles are also saved in the C:\AdwCleaner folder which was created when running the tool.

This includes the removed problems as nothing of value will show in the second Clean

#5 noknojon


  • Banned
  • 10,871 posts
  • Gender:Not Telling
  • Local time:06:29 AM

Posted 12 July 2014 - 05:42 PM

Use the below links to see how to clear out non-infections, but rather Browser Redirecting Hijackers



1. Go to Add/Remove Programs in Control Panel or Programs and Features if using Vista/Windows 7/8. From within Add/Remove Programs look for anything in the list above and select Remove.

2. Open your browser and disable (uncheck) all extensions. Make a list, then one by one, re-enable each extension to see if the pop-ups start appearing again with that particular extension. Once you identify the responsible extension...permanently remove it but let me know which one it was so I can update the list.
* How to Disable Extensions in Google Chrome - How to Uninstall Extensions in Google Chrome
* How To Disable Individual Plug-ins in Google Chrome <- try only if the above does not work
* How to Disable Extensions and Plugins in Firefox - How to Remove Extensions/Uninstall Plugins in Firefox
* How to Disable Extensions in Internet Explorer
* How to Disable Add-ons/Extensions in Internet Explorer, Firefox and Google Chrome
* How to Disable all add-ons in Firefox, Internet Explorer

3. If the above did not resolve the problem, then create a new browser user profile.
* How to Create a new browser user profile in Google Chrome
* How to Create a new browser user profile in Firefox
* How to Create a new browser user profile in Opera, Internet Explorer, Firefox, Chrome          

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users