Hey!
Today i got a notification from my browser, that my homepage was trying to be changed, but the changing was blocked. (on google chrome.) I removed the homepage from internet explorer, but it comes back every few seconds after removal. I scanned with ADWCleaner and it found about 8 Registry “pups/adware/malware” and it removed most, but 2 stayed upon reboot and keep coming back. What a pain. Heres the key names: HKCU/SOFTWARE/MICROSOFT/INTERNET-EXPLORER/SEARCHSCOPES/{6A180…} and a 64bit version.
Posting adw log, and others soon, but maybe the adw log will suffice. Thank you. The 17th log contains the two keys remaining the 16th contains all first found…
More logs…
All logs attached!
http://www.threatexpert.com/report.aspx?md5=41383df1143d830c7831b8b1adc919dd
That is AdwCleaners update scope 
Oh… sorry.
Why is my homepage is being changed though? Is that a new feature of adwc? It seems malicious since it is automatically changed back when set back to defaults.
Thanks.
What is the homepage changing to ?
According to Google’s Toolbar Manager, Bing. I never downloaded that software, i think it came with chrome. (I could just be an idiot and trusting some faulty program, but you probably saw it in the logs) Although in internet explorer, my homepage is msn. (I dont use IE so i have no clue if thats the default) I cant say for sure since ive never let my chrome page get changed, but i will the next time it pops up… The only reason i know or think IEs homepage is being changed is because some software (iolo system mechanic pro) says i have security vulnerabilities because my IE homepage is not default… and every-time the program changes it back, i get a notification from the Google Toolbar Notifcator… and the scan always comes up with the home page not set to default. Do you want me to let my homepage get changed on Chrome so you can tell a bit more whats going on?
EDIT: I used the clean up button on otl to remove adw cleaner, and the search page/home page issue is still coming back again and again… ive attached an image on where the item was found.
Did you use the uninstall on AdwCleaner to remove it ? I will ask about this
Tried re-downloading adw cleaner, and hitting the uninstall button, but the searchpage/homepage issue is still here…
Do you think its something different changing my default searchpage/homepage? I am not aware of anything I have that would do so, unless it was hidden malware.
If it is malware this is the first time I have seen it change the homepage to Bing which belongs to Microsoft
Yea, kinda odd.
Also, not sure if this is a windows update error, but every once in a while my computer makes the windows log off noise then the explorer.exe turns off for a second then everything is back to normal… only had this problem since ive had the homepage issue too… which was not too long after a windows update. Do you think the homepage thing is an update to windows gone wrong? (Win 7)
Did you take the optional Bing desktop/searchbar
No, I have not. Thats only happened twice, and i dont think theres any particular cause for it…(the log off noise.)
Sorry this is becoming so troubling! I was hoping it would be an easy otl fix, but it sadly wasnt.
Could you allow the change and then change it back to your normal one and see if that stops it
I choose “allow,” on the application but the problem was not resolved, and nothing happened, my search page still appears to be default, but i am using avasts! ad blocker so i dont know if its a faulty fake website… although i did find this: http://w x w.youtube.com/watch?v=tFrtNTdCM0I. This video states that the google notificator inside my computer could have been the issue all along! At the start, i did state that i had no idea where it came from, which seems to prove that videos point. Shall i delete the folders in c:programfiles, or should you remove it with otl? The file should be in the logs.
Yes delete that direct from programme files and let me know if that resolves it
Deleted that program from regedit, programdata, and all programfiles folders. (Anything under the name of Google not associated with chrome or updates)
Issue still occurs, but, I get a new message from Iolo System Mechanic Pro: ( Shown in the screenshot below )
Sorry again this is turning out to be such a pain…
Next, i think ill try to contact Microsoft about this, since the problem involves Bing.
EDIT: Clicking around on the screen brings up a download to a index.php? Is that part of this website, or am i perhaps clicking an ad hidden by avast? Maybe i should turn off ad blocker momentarily?
Under IE’s manage addons what is your default search provider and home page ?
I just found the installer for the google toolbar and im removing that… at the moment my computer is acting very sluggish and odd. Removing that didnt help me either.
IE will not start, whenever i open it it starts up for a second then it closes…
The installer seemed to have the same icon as other google applications, when put into the recycling bin… maybe i should delete everything Google? ( I cant really do a fresh install of chrome until i can use IE.)
Would it help if i got some new logs?
A full google uninstall will enable you to determine if it is related… Or restore the file you deleted
Just managed to open IE and got this message:
EDIT: Default search providers list also added.
EDIT 2: Going to try a full Google uninstall soon then… every time i try to click a link on the site now a download for a index.php file comes up, whether i am replying, modifying, or viewing the next page of the forum.