:Commands [createrestorepoint] :OTL SRV:64bit: - [2014/06/14 17:32:58 | 000,706,560 | ---- | M] () [Auto | Running] -- C:\Program Files\003\vxlsnyaiet64.exe -- (vxlsnyaiet64) SRV:64bit: - [2014/06/12 20:34:24 | 002,652,008 | ---- | M] (Search Module Ltd.) [Auto | Running] -- C:\Program Files\Common Files\Goobzo\GBUpdate\smu.exe -- (SMUpd) SRV - [2014/06/12 02:22:29 | 000,134,656 | ---- | M] (Shield Plus) [Auto | Running] -- C:\Users\kathy\AppData\Local\ShieldPlus\spprt\spsvc.exe -- (Service) SRV - [2014/05/23 00:31:06 | 002,497,856 | ---- | M] (Client Connect LTD) [Auto | Running] -- C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe -- (CltMngSvc) SRV - [2014/03/14 07:17:00 | 000,036,392 | ---- | M] (Just Develop It) [Auto | Running] -- C:\Program Files (x86)\MyPC Backup\BackupStack.exe -- (BackupStack) SRV - [2014/02/13 02:32:26 | 000,701,800 | ---- | M] (Crawler, LLC) [Auto | Running] -- C:\Program Files (x86)\PCTechHotline\PCTechHotlineSvc.exe -- (PCTechHotlineSvc) SRV - [2013/12/14 18:05:15 | 000,088,648 | ---- | M] (COMPANYVERS_NAME) [Auto | Running] -- C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zbarsvc.exe -- (CouponXplorer_5zService) DRV:64bit: - [2014/06/12 20:34:16 | 000,041,320 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Goobzo\GBUpdate\smw.sys -- (SMUpdd) DRV - [2014/05/22 00:12:40 | 000,058,728 | ---- | M] (YTDownloader) [Kernel | Auto | Running] -- C:\Program Files (x86)\YTDownloader\sbmntr.sys -- (sbmntr) DRV - [2014/04/28 01:46:34 | 000,052,072 | ---- | M] () [Kernel | Auto | Running] -- C:\Program Files (x86)\ShopperPro\JSDriver\1.36.1.172\jsdrv.sys -- (SPDRIVER_1.36.1.172) IE:64bit: - HKLM\..\SearchScopes\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}: "URL" = http://www-search.ne...q={searchTerms} IE - HKLM\..\SearchScopes\{5a1d0d31-749c-4186-a295-4106e6e7b26a}: "URL" = http://search.tb.ask...r={searchTerms} IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.trovi.com...7f5fe9f51&sspv= IE - HKCU\..\URLSearchHook: {9b138bf3-1d40-4e7e-84bb-2975198ad938} - No CLSID value found IE - HKCU\..\SearchScopes,DefaultScope = {7F4EFF06-7032-458e-AE16-1C1D8255C28A} IE - HKCU\..\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}: "URL" = http://www.trovi.com...rchTerms}&SSPV= IE - HKCU\..\SearchScopes\{5a1d0d31-749c-4186-a295-4106e6e7b26a}: "URL" = http://search.tb.ask...r={searchTerms} IE - HKCU\..\SearchScopes\{7F4EFF06-7032-458e-AE16-1C1D8255C28A}: "URL" = http://www-search.ne...q={searchTerms} FF - HKLM\Software\MozillaPlugins\@CouponXplorer_5z.com/Plugin: C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\NP5zStub.dll (Mindspark) O2:64bit: - BHO: (Object Browser) - {11111111-1111-1111-1111-110311281150} - C:\Program Files (x86)\Object Browser\Object Browser-bho64.dll (Object Browser) O2:64bit: - BHO: (iWebar) - {11111111-1111-1111-1111-110311551110} - C:\Program Files (x86)\iWebar\iWebar-bho64.dll (iWebar) O2:64bit: - BHO: (Plus-HD-9.1) - {11111111-1111-1111-1111-110511291116} - C:\Program Files (x86)\Plus-HD-9.1\Plus-HD-9.1-bho64.dll (Plus HD) O2:64bit: - BHO: (Shopper Pro) - {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} - C:\ProgramData\ShopperPro\ShopperPro64.dll (Goobzo Ltd.) O2 - BHO: (Toolbar BHO) - {0297a026-3011-46d3-ad62-bb9a7612aea7} - C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zbar.dll (Mindspark) O2 - BHO: (2rs3) - {10AD2C61-0898-4348-8600-14A342F22AC3} - C:\Program Files (x86)\SupraSavings\2rs3.dll () O2 - BHO: (Object Browser) - {11111111-1111-1111-1111-110311281150} - C:\Program Files (x86)\Object Browser\Object Browser-bho.dll (Object Browser) O2 - BHO: (iWebar) - {11111111-1111-1111-1111-110311551110} - C:\Program Files (x86)\iWebar\iWebar-bho.dll (iWebar) O2 - BHO: (Plus-HD-9.1) - {11111111-1111-1111-1111-110511291116} - C:\Program Files (x86)\Plus-HD-9.1\Plus-HD-9.1-bho.dll (Plus HD) O2 - BHO: (Search Assistant BHO) - {7d69ed06-0171-4379-9528-08df51092727} - C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zSrcAs.dll (Mindspark) O2 - BHO: (Shopper Pro) - {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} - C:\ProgramData\ShopperPro\ShopperPro.dll (Goobzo Ltd.) O2 - BHO: (buenosearch Helper Object) - {F1C81E40-2485-4DB6-8C9D-04BD596B281E} - C:\Program Files (x86)\buenosearch LTD\buenosearch\1.8.28.7\bh\buenosearch.dll (Montiera Technologies LTD) O3 - HKLM\..\Toolbar: (CouponXplorer) - {65c72339-fb1d-4155-84e1-9afacee02d6f} - C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zbar.dll (Mindspark) O3 - HKLM\..\Toolbar: (buenosearch Toolbar) - {828DC97A-2277-4E10-92A9-4907FA0922A9} - C:\Program Files (x86)\buenosearch LTD\buenosearch\1.8.28.7\buenosearchTlbr.dll (Montiera Technologies LTD) O3:64bit: - HKCU\..\Toolbar\WebBrowser: (CouponXplorer) - {65C72339-FB1D-4155-84E1-9AFACEE02D6F} - C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zbar.dll (Mindspark) O3 - HKCU\..\Toolbar\WebBrowser: (CouponXplorer) - {65C72339-FB1D-4155-84E1-9AFACEE02D6F} - C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zbar.dll (Mindspark) O4:64bit: - HKLM..\Run: [CouponXplorer Home Page Guard 64 bit] C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\AppIntegrator64.exe ( ) O4 - HKLM..\Run: [CouponXplorer EPM Support] C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zmedint.exe (Mindspark Interactive Network, Inc.) O4 - HKLM..\Run: [CouponXplorer Search Scope Monitor] C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zSrchMn.exe (Mindspark) O4 - HKLM..\Run: [CouponXplorer_5z Browser Plugin Loader] C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zbrmon.exe (VER_COMPANY_NAME) O4 - HKLM..\Run: [CouponXplorer_5z Browser Plugin Loader 64] C:\Program Files (x86)\CouponXplorer_5z\bar\1.bin\5zbrmon64.exe (VER_COMPANY_NAME) O4 - HKLM..\Run: [fst_us_96] File not found O4 - HKLM..\Run: [PCFixSpeed] C:\Program Files (x86)\PCFixSpeed\PCFixTray.exe (Crawler.com) O4 - HKLM..\Run: [PCTechHotline] C:\Program Files (x86)\PCTechHotline\PCTechHotline.exe (Crawler, LLC) O4 - HKLM..\Run: [Price Finder] C:\Program Files (x86)\Price Finder\PriceFinderHelper.exe (MindSpark Interactive Network) O4 - HKLM..\Run: [SPDriver] C:\Program Files (x86)\ShopperPro\JSDriver\1.36.1.172\jsdrv.exe () O4 - HKLM..\Run: [t4pc_en_5] "C:\Program Files (x86)\t4pc_en_5\t4pc_en_5.exe" File not found O4 - HKLM..\Run: [YTDownloader] C:\Program Files (x86)\YTDownloader\YTDownloader.exe (YTDownloader) O4 - HKCU..\Run: [SPDriver] C:\Program Files (x86)\ShopperPro\JSDriver\1.36.1.172\jsdrv.exe () O4 - HKCU..\Run: [YTDownloader] C:\Program Files (x86)\YTDownloader\YTDownloader.exe (YTDownloader) O4 - HKLM..\RunOnce: [upt4pc_en_5.exe] C:\Users\kathy\AppData\Local\t4pc_en_5\upt4pc_en_5.exe () O4 - Startup: C:\Users\kathy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk = C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe (MyPCBackup.com) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll) - C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll (Client Connect LTD) O20 - AppInit_DLLs: (c:\progra~2\searchprotect\searchprotect\bin\spvc32loader.dll) - c:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll (Client Connect LTD) [2014/06/16 15:28:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\buenosearch LTD [2014/06/16 15:28:08 | 000,000,000 | ---D | C] -- C:\Users\kathy\AppData\Roaming\BabSolution [2014/06/16 15:28:06 | 000,000,000 | ---D | C] -- C:\Users\kathy\AppData\Local\ShieldPlus [2014/06/16 09:16:32 | 000,000,000 | ---D | C] -- C:\Users\kathy\AppData\Roaming\PCFixSpeed [2014/06/16 09:11:34 | 000,000,000 | ---D | C] -- C:\Users\kathy\AppData\Roaming\PC Tech Hotline [2014/06/14 17:35:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Tech Hotline [2014/06/14 17:35:01 | 000,000,000 | ---D | C] -- C:\ProgramData\PCFixSpeed [2014/06/14 17:34:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Fix Speed [2014/06/14 17:34:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PCFixSpeed [2014/06/14 17:33:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SupraSavings [2014/06/14 17:32:58 | 000,000,000 | ---D | C] -- C:\Program Files\suprasavings [2014/06/14 15:58:23 | 000,000,000 | ---D | C] -- C:\Program Files\003 [2014/06/14 15:57:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iWebar [2014/06/14 15:57:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Object Browser [2014/06/14 15:57:08 | 000,000,000 | ---D | C] -- C:\Users\kathy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\YTDownloader [2014/06/14 15:56:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\YTDownloader [2014/06/14 15:56:58 | 000,000,000 | ---D | C] -- C:\ProgramData\SearchModule [2014/06/14 15:56:56 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Goobzo [2014/06/14 15:56:34 | 000,000,000 | ---D | C] -- C:\ProgramData\ShopperPro [2014/06/14 15:56:31 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\ShopperPro [2014/06/14 15:56:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ShopperPro [2014/06/13 13:35:00 | 000,000,000 | ---D | C] -- C:\Users\kathy\Documents\Optimizer Pro [2014/06/13 13:30:05 | 000,000,000 | ---D | C] -- C:\Users\kathy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup [2014/06/13 13:30:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MyPC Backup [2014/06/13 13:29:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Optimizer Pro [2014/06/13 13:29:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SearchProtect [2014/06/13 13:28:14 | 000,000,000 | ---D | C] -- C:\Users\kathy\AppData\Local\SearchProtect [2014/06/14 17:35:23 | 000,001,086 | ---- | M] () -- C:\Users\Public\Desktop\PC Tech Hotline.lnk [2014/06/14 17:35:00 | 000,000,982 | ---- | M] () -- C:\Users\Public\Desktop\Optimize Your PC.lnk [2014/06/14 15:57:08 | 000,001,968 | ---- | M] () -- C:\Users\kathy\Desktop\YTDownloader.lnk [2014/06/13 13:30:14 | 000,000,000 | ---- | M] () -- C:\END [2014/06/13 13:30:06 | 000,001,116 | ---- | M] () -- C:\Users\kathy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk [2014/06/13 13:30:06 | 000,001,106 | ---- | M] () -- C:\Users\kathy\Desktop\MyPC Backup.lnk [2014/06/14 17:35:22 | 000,001,086 | ---- | C] () -- C:\Users\Public\Desktop\PC Tech Hotline.lnk [2014/06/14 17:34:59 | 000,000,982 | ---- | C] () -- C:\Users\Public\Desktop\Optimize Your PC.lnk [2014/06/14 15:57:08 | 000,001,968 | ---- | C] () -- C:\Users\kathy\Desktop\YTDownloader.lnk [2014/06/13 13:30:06 | 000,001,116 | ---- | C] () -- C:\Users\kathy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk [2014/06/13 13:30:05 | 000,001,106 | ---- | C] () -- C:\Users\kathy\Desktop\MyPC Backup.lnk :Files C:\Program Files (x86)\Object Browser C:\Program Files (x86)\Plus-HD-9.1 C:\Users\kathy\AppData\Local\ShieldPlus C:\Users\kathy\AppData\Local\t4pc_en_5 C:\Program Files (x86)\SearchProtect C:\Program Files (x86)\YTDownloader C:\Program Files (x86)\ShopperPro C:\Program Files (x86)\PCTechHotline C:\Program Files (x86)\CouponXplorer_5z C:\Program Files\Common Files\Goobzo C:\Program Files\003 C:\Program Files (x86)\iWebar C:\Program Files (x86)\SupraSavings netsh advfirewall reset /c netsh advfirewall set allprofiles state on /c ipconfig /flushdns /c :Commands [emptytemp]