[shannibutterfly]

========== OTL ==========
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}\ not found.
Prefs.js: "99.241.215.227" removed from network.proxy.autoconfig_url
Prefs.js: 2 removed from network.proxy.type
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SearchProtection deleted successfully.
File E:\Documents and Settings\All Users\Application Data\Search Protection\_run.bat not found.
E:\WINDOWS\$NtUninstallKB40641$\2150964980\L folder moved successfully.
E:\WINDOWS\$NtUninstallKB40641$\2150964980\U folder moved successfully.
========== FILES ==========
File\Folder E:\WINDOWS\$NtUninstallKB40641$\2150964980\L not found.
File\Folder E:\WINDOWS\$NtUninstallKB40641$\2150964980\U not found.
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
E:\Documents and Settings\Chantal Lalonde\Desktop\cmd.bat deleted successfully.
E:\Documents and Settings\Chantal Lalonde\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========

OTL by OldTimer - Version 3.2.69.0 log created on 01072013_195905

[Advertisements]

Status: Deleted (events: 2)
08/01/2013 8:35:23 AM Deleted Trojan program HEUR:Trojan-Downloader.Win32.Generic H:\Downloads\Easy Tools Batch Watermark Creator v7.0.3 + Keygen\BatchWatermarkCreatorEn.exe High
08/01/2013 9:41:35 AM Deleted Trojan program HEUR:Trojan-Downloader.Win32.Generic H:\System Volume Information\_restore{702096C2-A404-41D1-922D-26A76C692B89}\RP510\A0110431.exe High

[shannibutterfly]

Status: Deleted (events: 2)
08/01/2013 8:35:23 AM Deleted Trojan program HEUR:Trojan-Downloader.Win32.Generic H:\Downloads\Easy Tools Batch Watermark Creator v7.0.3 + Keygen\BatchWatermarkCreatorEn.exe High
08/01/2013 9:41:35 AM Deleted Trojan program HEUR:Trojan-Downloader.Win32.Generic H:\System Volume Information\_restore{702096C2-A404-41D1-922D-26A76C692B89}\RP510\A0110431.exe High

[maliprog]

Hi shannibutterfly,

If you don't have any other problems I would finish this one. Your logs and system are clean now. I'm glad we fix up your computer.

Step 1

Please close all running programs and Run OTL

• Under the Custom Scans/Fixes box at the bottom, paste in the following
  
  

  :OTL
  
  :Commands
  [purity]
  [emptytemp]
  [resethosts]
  [clearallrestorepoints]
  [Reboot]

• Then click the Run Fix button at the top
• Let the program run unhindered, reboot the PC when it is done

Step 2

We need to clean up your PC from programs we used.

Please start OTL one more time and click CleanUp button. OTL will restart your system at the end.

In case that any of the software we used in this fix still remains on your system please delete it manually (Right click on it and select Delete).

General recommendations

Here are some recommendations you should follow to minimize infection risk in the future:

1. Something to read

To learn more about how to protect yourself while on the internet read our little guide How did I get infected in the first place ?

2. Make Backups of Important Files

Please read this article Home Computer Data Backup.

3. Regularly update your software

To eliminate design flaws and security vulnerabilities, all software needs to be updated to the latest version or the vendor’s patch installed.

You should download Update Checker from here. The program will automaticly check for newer version of software installed on your system.

[shannibutterfly]

Ok, I did everything. Thank you so much for everything, you don't know how much I appreciate this!
Did you know it says you are "not able to receive funds at this time" on paypal? I would of liked to buy ya a cup of coffee.
Well, thanks again!

[maliprog]

Hi shannibutterfly

Did you know it says you are "not able to receive funds at this time" on paypal? I would of liked to buy ya a cup of coffee.

Thank you for pointing this to me. I contacted PayPal and they sad that's now fixed. If you would like to danate please try PayPal one more time.

Goodbye and stay safe

[maliprog]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.