Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Possible malware infection [Solved]

Started by mygrneyedangel , Mar 25 2014 12:10 PM

  • This topic is locked This topic is locked

#1
mygrneyedangel
Posted 25 March 2014 - 12:10 PM

mygrneyedangel

    Member

  • Member
  • PipPip
  • 67 posts

Noticed that my system is running slow and that it keeps sayin that my flash player is down. My web browser seems to be hijacked. Keeps changing my home page and search engine. Suspect it may be from facebook ads.

 

 

 

 

OTL logfile created on: 3/25/2014 12:50:16 PM - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\owner\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
2.99 Gb Total Physical Memory | 0.98 Gb Available Physical Memory | 32.62% Memory free
6.18 Gb Paging File | 3.96 Gb Available in Paging File | 64.03% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 220.29 Gb Total Space | 115.77 Gb Free Space | 52.55% Space Free | Partition Type: NTFS
Drive D: | 10.00 Gb Total Space | 4.14 Gb Free Space | 41.38% Space Free | Partition Type: NTFS
 
Computer Name: OWNER-PC | User Name: owner | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2014/03/25 12:49:09 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\owner\Desktop\OTL.exe
PRC - [2014/03/19 15:54:10 | 003,584,184 | ---- | M] (ShowMyPC) -- C:\Users\owner\AppData\Local\Temp\ShowMyPC\smpc3160\SMPCSetup.exe
PRC - [2014/03/13 11:35:24 | 004,233,744 | ---- | M] (iolo technologies, LLC) -- C:\Program Files\iolo\System Mechanic\SystemGuardAlerter.exe
PRC - [2014/03/13 11:07:08 | 004,492,776 | ---- | M] (iolo technologies, LLC) -- C:\Program Files\iolo\Common\Lib\ioloServiceManager.exe
PRC - [2014/03/12 14:03:26 | 001,863,560 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
PRC - [2014/03/12 13:03:08 | 000,841,096 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\Macromed\Flash\FlashUtil32_12_0_0_77_ActiveX.exe
PRC - [2014/02/06 21:18:44 | 000,021,536 | ---- | M] (Smartbar) -- C:\Users\owner\AppData\Local\Smartbar\Application\SnapDo.exe
PRC - [2014/02/06 21:17:28 | 000,012,832 | ---- | M] () -- C:\Users\owner\AppData\Local\Smartbar\Application\Lrcnta.exe
PRC - [2014/02/06 19:22:58 | 003,767,096 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2014/02/06 19:22:58 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2014/01/23 18:12:52 | 000,091,936 | ---- | M] (PureLeads) -- C:\Program Files\PureLeads\PureLeadsSvc.exe
PRC - [2014/01/23 18:12:52 | 000,083,232 | ---- | M] (PureLeads) -- C:\Program Files\PureLeads\PureLeadsTray.exe
PRC - [2014/01/23 18:12:50 | 003,690,784 | ---- | M] (Sendori) -- C:\Program Files\PureLeads\plsapp.exe
PRC - [2014/01/23 18:12:50 | 000,024,352 | ---- | M] (sendori) -- C:\Program Files\PureLeads\PureLeads.Service.exe
PRC - [2013/12/18 13:42:32 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2013/06/26 19:23:04 | 000,207,528 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
PRC - [2013/06/26 19:23:00 | 000,523,944 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
PRC - [2012/09/17 06:39:30 | 000,171,600 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
PRC - [2009/04/11 01:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008/01/20 21:23:32 | 001,008,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MSASCui.exe
PRC - [2008/01/01 22:44:32 | 000,102,400 | ---- | M] (IDT, Inc.) -- C:\Windows\System32\stacsv.exe
PRC - [2007/04/17 00:05:52 | 000,021,504 | ---- | M] (UPEK Inc.) -- C:\Program Files\Fingerprint Reader Suite\upeksvr.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2014/03/24 14:05:38 | 008,013,664 | ---- | M] () -- C:\Windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll
MOD - [2014/03/24 14:05:38 | 000,118,784 | ---- | M] () -- C:\Windows\assembly\GAC\Microsoft.VisualStudio.OLE.Interop\7.1.40304.0__b03f5f7f11d50a3a\Microsoft.VisualStudio.OLE.Interop.dll
MOD - [2014/03/24 14:05:34 | 000,146,464 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\Interop.SHDocVw\1.1.0.0__84542ff99aed6a4d\Interop.SHDocVw.dll
MOD - [2014/03/12 14:03:25 | 016,276,872 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_12_0_0_77.dll
MOD - [2014/02/16 10:39:38 | 003,578,992 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2014/02/13 04:39:01 | 000,447,488 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\8b9ad2e65926aab95d1f1518accb51f5\UIAutomationClient.ni.dll
MOD - [2014/02/13 04:37:47 | 000,220,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\9f3c96d8466cab4684312622d13781b7\CustomMarshalers.ni.dll
MOD - [2014/02/13 04:36:32 | 000,187,904 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\b01fbd25bd6023d6b2d960d7bda323af\UIAutomationTypes.ni.dll
MOD - [2014/02/13 04:36:22 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\e3ab5ab0fbb86c36425e6902e54a547b\System.Runtime.Remoting.ni.dll
MOD - [2014/02/13 04:36:18 | 011,909,120 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\2183861863b3c98036f0d75f303d2a65\System.Web.ni.dll
MOD - [2014/02/13 04:36:07 | 001,840,640 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\890433199e7e462f76600e3aa64e435e\System.Web.Services.ni.dll
MOD - [2014/02/13 04:36:00 | 000,978,944 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\d17ceca243fabda73eefb21d9bd072df\System.Configuration.ni.dll
MOD - [2014/02/13 04:34:34 | 005,462,016 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\f87e71868aedbc6c4e8fe7160d17c4ab\System.Xml.ni.dll
MOD - [2014/02/13 04:34:17 | 012,434,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d2b605fc7deda872727d1ed37710420e\System.Windows.Forms.ni.dll
MOD - [2014/02/13 04:34:08 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\8e6265a54260bddfc05951e764f5bc48\System.Drawing.ni.dll
MOD - [2014/02/13 04:33:10 | 003,325,440 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\d981bccab40fbbdc1d35bf2a58c947b7\WindowsBase.ni.dll
MOD - [2014/02/13 04:33:07 | 007,977,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\957628d9dd7b3bf370a56dca7835a997\System.ni.dll
MOD - [2014/02/13 04:32:56 | 011,497,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\694a37a84dee2cd2609a1dfab27c0433\mscorlib.ni.dll
MOD - [2014/02/06 21:19:26 | 000,052,256 | ---- | M] () -- C:\Users\owner\AppData\Local\Smartbar\Application\srut.dll
MOD - [2014/02/06 21:19:22 | 000,020,512 | ---- | M] () -- C:\Users\owner\AppData\Local\Smartbar\Application\srsbs.dll
MOD - [2014/02/06 21:19:16 | 000,014,880 | ---- | M] () -- C:\Users\owner\AppData\Local\Smartbar\Application\srpdm.dll
MOD - [2014/02/06 21:19:14 | 000,247,328 | ---- | M] () -- C:\Users\owner\AppData\Local\Smartbar\Application\srns.dll
MOD - [2014/02/06 21:19:12 | 000,037,408 | ---- | M] () -- C:\Users\owner\AppData\Local\Smartbar\Application\srbu.dll
MOD - [2014/02/06 21:19:10 | 000,063,520 | ---- | M] () -- C:\Users\owner\AppData\Local\Smartbar\Application\srau.dll
MOD - [2014/02/06 21:19:08 | 000,058,400 | ---- | M] () -- C:\Users\owner\AppData\Local\Smartbar\Application\spbl.dll
MOD - [2014/02/06 21:19:08 | 000,054,304 | ---- | M] () -- C:\Users\owner\AppData\Local\Smartbar\Application\sppsm.dll
MOD - [2014/02/06 21:19:00 | 000,025,632 | ---- | M] () -- C:\Users\owner\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll
MOD - [2014/02/06 21:18:58 | 000,152,608 | ---- | M] () -- C:\Users\owner\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll
MOD - [2014/02/06 21:18:58 | 000,053,280 | ---- | M] () -- C:\Users\owner\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll
MOD - [2014/02/06 21:18:54 | 000,017,440 | ---- | M] () -- C:\Users\owner\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll
MOD - [2014/02/06 21:18:50 | 000,166,432 | ---- | M] () -- C:\Users\owner\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll
MOD - [2014/02/06 21:18:48 | 000,059,424 | ---- | M] () -- C:\Users\owner\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll
MOD - [2014/02/06 21:18:46 | 002,310,688 | ---- | M] () -- C:\Users\owner\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll
MOD - [2014/02/06 21:18:46 | 000,033,824 | ---- | M] () -- C:\Users\owner\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll
MOD - [2014/02/06 21:18:46 | 000,014,368 | ---- | M] () -- C:\Users\owner\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll
MOD - [2014/02/06 21:18:44 | 000,728,096 | ---- | M] () -- C:\Users\owner\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll
MOD - [2014/02/06 21:18:44 | 000,082,464 | ---- | M] () -- C:\Users\owner\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll
MOD - [2014/02/06 21:18:38 | 000,193,056 | ---- | M] () -- C:\Users\owner\AppData\Local\Smartbar\Application\sgmu.dll
MOD - [2014/02/06 21:18:38 | 000,013,344 | ---- | M] () -- C:\Users\owner\AppData\Local\Smartbar\Application\siem.dll
MOD - [2014/02/06 21:18:36 | 000,014,368 | ---- | M] () -- C:\Users\owner\AppData\Local\Smartbar\Application\sgml.dll
MOD - [2014/02/06 21:17:28 | 000,048,160 | ---- | M] () -- C:\Users\owner\AppData\Local\Smartbar\Application\MACTrackBarLib.dll
MOD - [2014/02/06 21:17:28 | 000,020,512 | ---- | M] () -- C:\Users\owner\AppData\Local\Smartbar\Application\lrcnt.dll
MOD - [2014/02/06 21:17:28 | 000,012,832 | ---- | M] () -- C:\Users\owner\AppData\Local\Smartbar\Application\Lrcnta.exe
MOD - [2014/02/06 21:15:12 | 000,061,440 | ---- | M] () -- C:\Users\owner\AppData\Local\Smartbar\Application\AxInterop.WMPLib.dll
MOD - [2014/01/07 14:31:57 | 019,336,120 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
MOD - [2013/11/21 14:24:12 | 000,068,696 | ---- | M] () -- C:\Program Files\ShowMyPCService\screenhooks.dll
MOD - [2013/05/08 04:00:25 | 000,474,112 | ---- | M] () -- C:\Program Files\Search Results Toolbar\Datamngr\apcrtldr.dll
MOD - [2009/03/29 23:42:11 | 000,069,120 | ---- | M] () -- C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
MOD - [2008/12/18 04:55:28 | 000,054,784 | ---- | M] () -- C:\Windows\System32\bcmwlrmt.dll
 
 
========== Services (SafeList) ==========
 
SRV - [2014/03/13 11:07:08 | 004,492,776 | ---- | M] (iolo technologies, LLC) [Auto | Running] -- C:\Program Files\iolo\Common\Lib\ioloServiceManager.exe -- (ioloSystemService)
SRV - [2014/03/12 14:03:27 | 000,257,928 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014/02/16 10:39:39 | 000,118,896 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2014/02/06 19:22:58 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2014/01/23 18:12:52 | 000,091,936 | ---- | M] (PureLeads) [Auto | Running] -- C:\Program Files\PureLeads\PureLeadsSvc.exe -- (PlsvcV1)
SRV - [2014/01/23 18:12:50 | 003,690,784 | ---- | M] (Sendori) [Auto | Running] -- C:\Program Files\PureLeads\plsapp.exe -- (plsapp)
SRV - [2014/01/23 18:12:50 | 000,024,352 | ---- | M] (sendori) [Auto | Running] -- C:\Program Files\PureLeads\PureLeads.Service.exe -- (PlsvcV2)
SRV - [2013/12/18 13:42:32 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2013/11/21 14:24:02 | 000,815,704 | ---- | M] (GlavSoft LLC.) [Auto | Stopped] -- C:\Program Files\ShowMyPCService\tvnserver.exe -- (tvnserver)
SRV - [2013/08/14 16:19:24 | 000,039,056 | ---- | M] () [Disabled | Stopped] -- C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe -- (RealNetworks Downloader Resolver Service)
SRV - [2013/06/26 19:23:04 | 000,207,528 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2013/06/26 19:23:00 | 000,523,944 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2012/09/17 06:39:30 | 000,171,600 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor11.0)
SRV - [2010/03/18 11:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon)
SRV - [2008/09/23 23:09:52 | 000,155,648 | ---- | M] (Stardock Corporation) [Disabled | Stopped] -- C:\Program Files\Dell\DellDock\DockLogin.exe -- (DockLoginService)
SRV - [2008/01/20 21:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2008/01/01 22:44:32 | 000,102,400 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\System32\stacsv.exe -- (STacSV)
SRV - [2008/01/01 22:44:26 | 000,073,728 | ---- | M] (Andrea Electronics Corporation) [Disabled | Stopped] -- C:\Windows\System32\AEstSrv.exe -- (AESTFilters)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | Auto | Stopped] -- System32\Drivers\Ca1528av.sys -- (Ca1528av)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\Bulk1528.sys -- (Bulk1528)
DRV - [2014/02/06 19:23:03 | 000,775,952 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2014/02/06 19:23:03 | 000,410,784 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2014/02/06 19:23:03 | 000,067,824 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2014/02/06 19:23:03 | 000,057,672 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2014/02/06 19:23:02 | 000,054,832 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2014/01/10 15:24:33 | 000,026,136 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswKbd.sys -- (aswKbd)
DRV - [2014/01/07 14:31:59 | 000,180,248 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswVmm.sys -- (aswVmm)
DRV - [2014/01/07 14:31:59 | 000,049,944 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswRvrt.sys -- (aswRvrt)
DRV - [2013/12/03 10:54:50 | 000,068,464 | ---- | M] (Raxco Software, Inc.) [File_System | Auto | Running] -- C:\Windows\System32\drivers\PDFsFilter.sys -- (PDFsFilter)
DRV - [2013/12/03 10:54:48 | 000,026,248 | ---- | M] (EldoS Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\ElRawDsk.sys -- (ElRawDisk)
DRV - [2013/06/26 19:23:04 | 000,020,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Sftvollh.sys -- (Sftvol)
DRV - [2013/06/26 19:23:00 | 000,197,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Sftplaylh.sys -- (Sftplay)
DRV - [2013/06/26 19:23:00 | 000,024,232 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\Sftredirlh.sys -- (Sftredir)
DRV - [2013/06/26 19:22:58 | 000,583,848 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Sftfslh.sys -- (Sftfs)
DRV - [2011/08/15 14:51:40 | 000,054,144 | ---- | M] (Fengtao Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\dvdfab.sys -- (dvdfab)
DRV - [2008/12/18 04:55:10 | 000,018,424 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\bcm42rly.sys -- (BCM42RLY)
DRV - [2008/04/22 01:11:54 | 000,111,616 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\IntcHdmi.sys -- (IntcHdmiAddService)
DRV - [2008/01/20 21:23:25 | 000,220,672 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\e1e6032.sys -- (e1express)
DRV - [2008/01/01 22:44:40 | 000,330,240 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\stwrt.sys -- (STHDA)
DRV - [2007/12/03 00:59:06 | 000,007,424 | ---- | M] (EyePower Games Pte. Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\OEM02Vfx.sys -- (OEM02Vfx)
DRV - [2007/12/03 00:58:50 | 000,235,648 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\OEM02Dev.sys -- (OEM02Dev)
DRV - [2007/06/22 17:59:24 | 000,479,232 | ---- | M] (eMPIA Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\emBDA.sys -- (USB28xxBGA)
DRV - [2007/02/28 06:25:46 | 000,037,376 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2007/02/28 06:25:44 | 000,043,520 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2007/02/28 06:25:44 | 000,032,256 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2007/02/06 16:38:02 | 000,028,288 | ---- | M] (eMPIA Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\emOEM.sys -- (USB28xxOEM)
DRV - [2006/11/10 15:05:00 | 000,018,688 | ---- | M] (Arcsoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\afc.sys -- (Afc)
DRV - [2006/11/02 02:36:43 | 002,028,032 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (R300)
DRV - [2001/09/13 21:35:58 | 000,027,519 | ---- | M] (Linksys) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\USB100M.SYS -- (USB-100)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1
IE - HKLM\..\SearchScopes,DefaultScope = {006ee092-9658-4fd6-bd8e-a21a348e59f5}
IE - HKLM\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://feed.snapdo.c...&q={searchTerms}
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://feed.snapdo.c...&q={searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://feed.snapdo.c...&q={searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://search.conduit.com/?ctid=CT [Binary data over 200 bytes]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?...42&ocid=U142DHP
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?...42&ocid=U142DHP
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.snapdo.c...&q={searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.snapdo.c...&q={searchTerms}
IE - HKCU\..\SearchScopes,DefaultScope = {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
IE - HKCU\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://feed.snapdo.c...&q={searchTerms}
IE - HKCU\..\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}: "URL" = http://search.condui...archTerms}=
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" =
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.selectedEngine: "Web Search"
FF - prefs.js..browser.startup.homepage: "http://feed.snapdo.c..._3isIrK7VTqkGRK"
FF - prefs.js..extensions.enabledAddons: wrc%40avast.com:9.0.2013.75
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:27.0.1
FF - prefs.js..keyword.URL: "http://feed.snapdo.c...8kqRcfeoxih63="
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw_1207148.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8051.1204: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@oberon-media.com/ONCAdapter: C:\Program Files\Common Files\Oberon Media\NCAdapter\1.0.0.14\npapicomadapter.dll (Oberon-Media )
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=16.0.3.51: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.3: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.3: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.3: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=16.0.3.51: C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@realnetworks.com/npdlplugin;version=1: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\owner\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\AVAST Software\Avast\WebRep\FF [2014/02/06 19:23:24 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [2014/02/03 16:14:03 | 000,000,000 | ---D | M]
 
[2012/02/01 16:16:37 | 000,000,000 | ---D | M] (No name found) -- C:\Users\owner\AppData\Roaming\Mozilla\Extensions
[2014/03/24 16:06:16 | 000,000,000 | ---D | M] (No name found) -- C:\Users\owner\AppData\Roaming\Mozilla\Firefox\Profiles\140ox05w.default-1393965298370\extensions
[2014/02/16 10:39:33 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2014/02/16 10:39:39 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2014/02/06 19:23:24 | 000,000,000 | ---D | M] (avast! Online Security) -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF
 
========== Chrome  ==========
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR - homepage: http://www.msn.com/?...42&ocid=U142DHP
CHR - Extension: Google Docs = C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Google Drive = C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\
CHR - Extension: YouTube = C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Google Search = C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: Webexp Enhanced = C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\dffkkngemcheealimpeioaeilpcpopfl\1.1_0\
CHR - Extension: avast! Online Security = C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\9.0.2013.75_0\
CHR - Extension: RealDownloader = C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.3_0\
CHR - Extension: iLivid New Tabs = C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbajpeofkjjeiamcglnmldoboonfkiol\5.0.0.7254_0\
CHR - Extension: WhiteSmoke New = C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\
CHR - Extension: MediaPlayerEnhance = C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\crossrider
CHR - Extension: MediaPlayerEnhance = C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\
CHR - Extension: Google Wallet = C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\
CHR - Extension: Gmail = C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2006/09/18 16:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (ArcadeFrontier Addon) - {6C8DB2EC-499B-4897-A784-0E3186C97E9D} - C:\Users\owner\AppData\Local\ArcadeFrontier\ArcadeFrontier.dll ()
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (no name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No CLSID value found.
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (avast! Online Security) - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [PureLeads Tray] C:\Program Files\PureLeads\PureLeadsTray.exe (PureLeads)
O4 - HKLM..\Run: [tvncontrol] C:\Program Files\ShowMyPCService\tvnserver.exe (GlavSoft LLC.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [Browser Infrastructure Helper] C:\Users\owner\AppData\Local\Smartbar\Application\SnapDo.exe (Smartbar)
O4 - HKLM..\RunOnce: [SpUninstallCleanUp] REG delete HKEY_LOCAL_MACHINE\Software\SearchProtect /f File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: disableCAD = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1
O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - Reg Error: Value error. File not found
O9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - Reg Error: Value error. File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\plsapp.dll (Sendori)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\plsapp.dll (Sendori)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\plsapp.dll (Sendori)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\plsapp.dll (Sendori)
O10 - Protocol_Catalog9\Catalog_Entries\000000000033 - C:\Windows\System32\plsapp.dll (Sendori)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9F283D49-F73F-494F-9C7F-B3468800B59F}: DhcpNameServer = 192.168.0.1
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: GinaDLL - (vrlogon.dll) - C:\Windows\System32\vrlogon.dll (UPEK Inc.)
O20 - Winlogon\Notify\psfus: DllName - (C:\Windows\system32\psqlpwd.dll) - C:\Windows\System32\psqlpwd.dll (UPEK Inc.)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 16:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{0f417dcb-4d4f-11e3-921e-0023ae1aea80}\Shell - "" = AutoRun
O33 - MountPoints2\{0f417dcb-4d4f-11e3-921e-0023ae1aea80}\Shell\AutoRun\command - "" = F:\autorun.exe
O33 - MountPoints2\{10bbdcef-6a91-11e3-8981-b5f0848fc86e}\Shell - "" = AutoRun
O33 - MountPoints2\{10bbdcef-6a91-11e3-8981-b5f0848fc86e}\Shell\AutoRun\command - "" = F:\menu.exe
O34 - HKLM BootExecute: (o)
O34 - HKLM BootExecute: ("쀀ឩҰ")
O34 - HKLM BootExecute: (3)
O34 - HKLM BootExecute: ("Tracks files that are managed by Elements Organizer")
O34 - HKLM BootExecute: ("쀀ឩҰ")
O34 - HKLM BootExecute: (0)
O34 - HKLM BootExecute: ("SOFTWARE\Mozilla\Mozilla Firefox 26.0\extensions")
O34 - HKLM BootExecute: (뚐ᙔ끘፭뤐Ȫ.)
O34 - HKLM BootExecute: ("㍼ፄĀ")
O34 - HKLM BootExecute: (Ā)
O34 - HKLM BootExecute: ("")
O34 - HKLM BootExecute: ()
O34 - HKLM BootExecute: (鴬ᡝ)
O34 - HKLM BootExecute: (Ѐ뼔൨Ā)
O34 - HKLM BootExecute: (ؕ)
O34 - HKLM BootExecute: (229)
O34 - HKLM BootExecute: ("먁ڦҰ")
O34 - HKLM BootExecute: (ù)
O34 - HKLM BootExecute: (COMPONENTS\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-crypt32-dll.resources_31bf3856ad364e35_en-us_5d347fe5c94357c3\f256!crypt32.dll.mui\f3e9c6f667cbf5a94577044def2f9c858ffe3d79f98384f24c48692b201a7884)
O34 - HKLM BootExecute: ("iolobtdfg C:\Windows\system32")
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O36 - AppCertDlls: x86 - (C:\Program Files\Search Results Toolbar\Datamngr\apcrtldr.dll) - C:\Program Files\Search Results Toolbar\Datamngr\apcrtldr.dll ()
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2014/03/25 12:47:35 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\owner\Desktop\OTL.exe
[2014/03/25 11:39:07 | 000,000,000 | ---D | C] -- C:\Program Files\ShowMyPCService
[2014/03/24 14:05:31 | 000,000,000 | ---D | C] -- C:\Users\owner\AppData\Local\LPT
[2014/03/24 14:05:27 | 000,000,000 | ---D | C] -- C:\Users\owner\AppData\Local\Smartbar
[2014/03/24 14:03:57 | 000,000,000 | ---D | C] -- C:\Users\owner\AppData\Local\Downloaded Installations
[2014/03/24 12:52:50 | 000,026,248 | ---- | C] (EldoS Corporation) -- C:\Windows\System32\drivers\ElRawDsk.sys
[2014/03/04 16:21:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2014/03/04 15:35:04 | 000,000,000 | ---D | C] -- C:\Users\owner\Desktop\Old Firefox Data
[2014/02/27 12:42:08 | 000,000,000 | ---D | C] -- C:\Users\owner\AppData\Roaming\LegacyInteractive
[2014/02/27 12:41:21 | 000,000,000 | ---D | C] -- C:\Users\owner\AppData\Roaming\Oberon Media
[2014/02/27 12:41:14 | 000,000,000 | ---D | C] -- C:\Users\owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games of the Month
[2014/02/27 12:41:05 | 000,000,000 | ---D | C] -- C:\Program Files\Oberon Media SIDR
[2014/02/27 12:40:59 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Oberon Media
[2014/02/27 12:36:27 | 000,354,592 | ---- | C] (Sendori) -- C:\Windows\System32\plsapp.dll
[2014/02/27 12:36:24 | 000,000,000 | ---D | C] -- C:\ProgramData\PureLeads
[2014/02/27 12:36:21 | 000,000,000 | ---D | C] -- C:\Program Files\PureLeads
[2014/02/27 12:36:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Oberon Media
[2014/02/27 12:36:08 | 000,000,000 | ---D | C] -- C:\Users\owner\AppData\Roaming\OpenCandy
[2014/02/27 12:35:41 | 000,000,000 | ---D | C] -- C:\Users\owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ArcadeFrontier
[2014/02/27 12:35:39 | 000,000,000 | ---D | C] -- C:\Users\owner\AppData\Local\ArcadeFrontier
 
========== Files - Modified Within 30 Days ==========
 
[2014/03/25 12:53:34 | 000,000,268 | ---- | M] () -- C:\Windows\tasks\ArcadeFrontier.job
[2014/03/25 12:49:09 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\owner\Desktop\OTL.exe
[2014/03/25 12:39:28 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2014/03/25 12:39:28 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2014/03/25 12:28:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/03/25 12:03:17 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014/03/25 10:39:32 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014/03/24 14:22:41 | 000,656,642 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2014/03/24 14:22:41 | 000,124,946 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2014/03/24 14:15:57 | 001,584,568 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2014/03/24 12:44:53 | 000,001,947 | ---- | M] () -- C:\Users\owner\Desktop\System Mechanic.lnk
[2014/03/13 11:25:20 | 000,041,616 | ---- | M] (iolo technologies, LLC) -- C:\Windows\System32\iolobtdfg.exe
[2014/03/13 11:25:10 | 000,023,568 | ---- | M] (iolo technologies, LLC) -- C:\Windows\System32\smrgdf.exe
[2014/03/13 11:08:38 | 002,097,984 | ---- | M] (iolo technologies, LLC) -- C:\Windows\System32\Incinerator32.dll
[2014/03/10 14:54:31 | 000,001,076 | ---- | M] () -- C:\Users\owner\Documents\-.facebook.com
[2014/03/04 16:26:24 | 000,009,504 | ---- | M] () -- C:\Users\owner\Documents\cc_20140304_152615.reg
[2014/03/04 16:21:40 | 000,000,840 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2014/02/27 12:41:14 | 000,002,227 | ---- | M] () -- C:\Users\owner\Desktop\Criminal Minds.lnk
[2014/02/27 12:41:00 | 000,001,172 | ---- | M] () -- C:\Users\owner\Desktop\Games of the Month.lnk
[2014/02/27 12:35:11 | 000,000,000 | ---- | M] () -- C:\END
 
========== Files Created - No Company Name ==========
 
[2014/03/10 14:54:31 | 000,001,076 | ---- | C] () -- C:\Users\owner\Documents\-.facebook.com
[2014/03/04 16:26:17 | 000,009,504 | ---- | C] () -- C:\Users\owner\Documents\cc_20140304_152615.reg
[2014/03/04 15:47:23 | 000,000,830 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014/02/27 12:41:14 | 000,002,227 | ---- | C] () -- C:\Users\owner\Desktop\Criminal Minds.lnk
[2014/02/27 12:41:00 | 000,001,172 | ---- | C] () -- C:\Users\owner\Desktop\Games of the Month.lnk
[2014/02/27 12:35:39 | 000,000,268 | ---- | C] () -- C:\Windows\tasks\ArcadeFrontier.job
[2014/01/07 14:32:20 | 000,180,248 | ---- | C] () -- C:\Windows\System32\drivers\aswVmm.sys
[2014/01/07 14:32:20 | 000,049,944 | ---- | C] () -- C:\Windows\System32\drivers\aswRvrt.sys
[2013/12/26 15:05:40 | 000,000,175 | ---- | C] () -- C:\Windows\System32\drivers\aswVmm.sys.sum
[2013/12/26 15:05:40 | 000,000,175 | ---- | C] () -- C:\Windows\System32\drivers\aswSP.sys.sum
[2013/12/26 15:05:40 | 000,000,175 | ---- | C] () -- C:\Windows\System32\drivers\aswSnx.sys.sum
[2013/07/19 07:17:41 | 000,000,000 | ---- | C] () -- C:\Users\owner\AppData\Roaming\SharedSettings.ccs
[2013/07/16 23:58:03 | 000,074,703 | ---- | C] () -- C:\Windows\System32\mfc45.dat
[2012/07/07 16:40:33 | 000,611,158 | ---- | C] () -- C:\Users\owner\DVDFab 8 Qt.lnk
[2012/04/04 13:14:35 | 000,006,013 | ---- | C] () -- C:\Windows\hplj1010.ini
[2012/01/17 11:29:12 | 000,000,212 | ---- | C] () -- C:\Users\owner\AppData\Roaming\wklnhst.dat
[2011/12/12 15:43:55 | 000,781,312 | -HS- | C] () -- C:\Users\owner\ehthumbs_vista.db
[2011/11/14 14:05:16 | 000,000,552 | ---- | C] () -- C:\Users\owner\AppData\Local\d3d8caps.dat
[2011/08/13 08:18:43 | 000,006,648 | ---- | C] () -- C:\Users\owner\AppData\Local\d3d9caps.dat
[2011/02/19 14:23:01 | 000,106,496 | ---- | C] () -- C:\Users\owner\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
 
========== ZeroAccess Check ==========
 
[2006/11/02 07:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012/06/08 12:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009/04/11 01:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/04/11 01:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
========== LOP Check ==========
 
[2013/06/26 22:20:54 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\ARA
[2014/01/02 17:30:55 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\AVAST Software
[2014/02/18 18:40:35 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\BitTorrent
[2012/02/06 11:40:53 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011/08/17 23:21:55 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\com.hwp.HWPLauncher
[2013/09/17 21:46:12 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\DVDFab9
[2014/01/05 13:26:23 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\freegames111
[2014/02/17 15:57:22 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl
[2013/11/13 16:47:33 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\ImgBurn
[2014/02/17 15:41:12 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\IminentToolbar
[2013/07/10 15:50:33 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\Instant Housecall
[2014/02/24 20:06:26 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\iolo
[2014/01/10 16:09:40 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\ioloGovernor
[2014/02/27 12:42:08 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\LegacyInteractive
[2014/02/03 16:29:23 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\LibreOffice
[2013/12/26 11:53:03 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\newnext.me
[2014/02/27 12:41:22 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\Oberon Media
[2014/03/24 14:03:53 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\OpenCandy
[2011/08/15 22:37:55 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\PCDr
[2013/11/14 13:05:03 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\QBOSSCD
[2014/02/13 04:26:31 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\SoftGrid Client
[2012/01/17 11:29:13 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\Template
[2012/02/02 16:18:25 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\TP
 
========== Purity Check ==========
 
 
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 376 bytes -> C:\ProgramData\TEMP:214562D2
@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:373E1720

< End of report >

 


  • 0

Advertisements

#2
Essexboy
Posted 25 March 2014 - 12:40 PM

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts

Hi there, I would recommend that you uninstall Sendori via control panel

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

  • Under the Custom Scans/Fixes box at the bottom, paste in the following
    OTL_Fix.GIF
:Commands
[CREATERESTOREPOINT]

:OTL
IE - HKLM\..\SearchScopes,DefaultScope = {006ee092-9658-4fd6-bd8e-a21a348e59f5}
IE - HKLM\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://feed.snapdo.c...&q={searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://feed.snapdo.c...&q={searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://feed.snapdo.c...&q={searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://search.conduit.com/?ctid=CT [Binary data over 200 bytes]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.snapdo.c...&q={searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.snapdo.c...&q={searchTerms}
IE - HKCU\..\SearchScopes,DefaultScope = {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
IE - HKCU\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://feed.snapdo.c...&q={searchTerms}
IE - HKCU\..\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}: "URL" = http://search.condui...archTerms}=
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.selectedEngine: "Web Search"
FF - prefs.js..browser.startup.homepage: "http://feed.snapdo.c..._3isIrK7VTqkGRK"
FF - prefs.js..keyword.URL: "http://feed.snapdo.c...8kqRcfeoxih63="
O2 - BHO: (ArcadeFrontier Addon) - {6C8DB2EC-499B-4897-A784-0E3186C97E9D} - C:\Users\owner\AppData\Local\ArcadeFrontier\ArcadeFrontier.dll ()
O2 - BHO: (no name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No CLSID value found.
O4 - HKLM..\Run: [tvncontrol] C:\Program Files\ShowMyPCService\tvnserver.exe (GlavSoft LLC.)
O4 - HKCU..\Run: [Browser Infrastructure Helper] C:\Users\owner\AppData\Local\Smartbar\Application\SnapDo.exe (Smartbar)
O4 - HKLM..\RunOnce: [SpUninstallCleanUp] REG delete HKEY_LOCAL_MACHINE\Software\SearchProtect /f File not found
O36 - AppCertDlls: x86 - (C:\Program Files\Search Results Toolbar\Datamngr\apcrtldr.dll) - C:\Program Files\Search Results Toolbar\Datamngr\apcrtldr.dll ()
[2014/03/25 11:39:07 | 000,000,000 | ---D | C] -- C:\Program Files\ShowMyPCService
[2014/03/24 14:05:31 | 000,000,000 | ---D | C] -- C:\Users\owner\AppData\Local\LPT
[2014/03/24 14:05:27 | 000,000,000 | ---D | C] -- C:\Users\owner\AppData\Local\Smartbar
[2014/02/27 12:36:08 | 000,000,000 | ---D | C] -- C:\Users\owner\AppData\Roaming\OpenCandy
[2014/02/27 12:35:41 | 000,000,000 | ---D | C] -- C:\Users\owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ArcadeFrontier
[2014/02/27 12:35:39 | 000,000,000 | ---D | C] -- C:\Users\owner\AppData\Local\ArcadeFrontier
[2014/03/25 12:53:34 | 000,000,268 | ---- | M] () -- C:\Windows\tasks\ArcadeFrontier.job
[2014/01/05 13:26:23 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\freegames111
[2014/02/17 15:57:22 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl
[2014/02/17 15:41:12 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\IminentToolbar

:Files
C:\Users\owner\AppData\Local\Temp\ShowMyPC
C:\Users\owner\AppData\Local\Smartbar
C:\Program Files\Search Results Toolbar
C:\Users\owner\AppData\Local\ArcadeFrontier
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbajpeofkjjeiamcglnmldoboonfkiol
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi

:Commands
[resethosts]
[emptytemp]
[Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

THEN

 

Please download AdwCleaner by Xplode onto your desktop.


  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click on Scan.
  • After the scan is complete click on "Clean"
  • Confirm each time with Ok.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the content of that logfile with your next answer.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.

 

 

 


  • 0

#3
mygrneyedangel
Posted 26 March 2014 - 11:00 AM

mygrneyedangel

    Member

  • Topic Starter
  • Member
  • PipPip
  • 67 posts

Ran programs you send attaching log files. also couldn't find Sendori in programs list to remove.

 

All processes killed
========== COMMANDS ==========
Restore point Set: OTL Restore Point
========== OTL ==========
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{006ee092-9658-4fd6-bd8e-a21a348e59f5}\ not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Search Bar| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Search Page| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Secondary Start Pages| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Search\\Default_Search_URL| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Search\\SearchAssistant| /E : value set successfully!
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{006ee092-9658-4fd6-bd8e-a21a348e59f5}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}\ not found.
Prefs.js: "Web Search" removed from browser.search.defaultenginename
Prefs.js: "Web Search" removed from browser.search.selectedEngine
Prefs.js: "http://feed.snapdo.c..._3isIrK7VTqkGRK" removed from browser.startup.homepage
Prefs.js: "http://feed.snapdo.c...8kqRcfeoxih63=" removed from keyword.URL
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6C8DB2EC-499B-4897-A784-0E3186C97E9D}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6C8DB2EC-499B-4897-A784-0E3186C97E9D}\ deleted successfully.
C:\Users\owner\AppData\Local\ArcadeFrontier\ArcadeFrontier.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\tvncontrol deleted successfully.
C:\Program Files\ShowMyPCService\tvnserver.exe moved successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Browser Infrastructure Helper deleted successfully.
C:\Users\owner\AppData\Local\Smartbar\Application\SnapDo.exe moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SpUninstallCleanUp not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls\\x86 deleted successfully.
C:\Program Files\Search Results Toolbar\Datamngr\apcrtldr.dll moved successfully.
C:\Program Files\ShowMyPCService folder moved successfully.
C:\Users\owner\AppData\Local\LPT\Resources folder moved successfully.
C:\Users\owner\AppData\Local\LPT\Configs folder moved successfully.
C:\Users\owner\AppData\Local\LPT folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\DistributionFiles\RollBack\Profiles folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\DistributionFiles\RollBack folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\DistributionFiles\Profiles folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\DistributionFiles\Configs folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\DistributionFiles folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\Common\ServicesPlugins folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\Common\iconsWide folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\Common\icons folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\Common\Configs folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\Common folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\Application\tr folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\Application\ru folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\Application\pt folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\Application\nl folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\Application\it folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\Application\[email protected]\components folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\Application\[email protected]\chrome\PublisherImages folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\Application\[email protected]\chrome\images folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\Application\[email protected]\chrome folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\Application\[email protected] folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\Application\he folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\Application\fr folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\Application\es folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\Application\de folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\Application\Configs folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\Application\ar folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\CSS folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar\Application folder moved successfully.
C:\Users\owner\AppData\Local\Smartbar folder moved successfully.
C:\Users\owner\AppData\Roaming\OpenCandy\D8FA532BE84647C1A2B73BD283924A9B folder moved successfully.
C:\Users\owner\AppData\Roaming\OpenCandy\0A7FB37682DF46F4BD42F6207E2D3C9A folder moved successfully.
C:\Users\owner\AppData\Roaming\OpenCandy folder moved successfully.
C:\Users\owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ArcadeFrontier folder moved successfully.
C:\Users\owner\AppData\Local\ArcadeFrontier folder moved successfully.
C:\Windows\Tasks\ArcadeFrontier.job moved successfully.
C:\Users\owner\AppData\Roaming\freegames111 folder moved successfully.
C:\Users\owner\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl folder moved successfully.
C:\Users\owner\AppData\Roaming\IminentToolbar folder moved successfully.
========== FILES ==========
C:\Users\owner\AppData\Local\Temp\ShowMyPC\smpc3160 folder moved successfully.
C:\Users\owner\AppData\Local\Temp\ShowMyPC folder moved successfully.
File\Folder C:\Users\owner\AppData\Local\Smartbar not found.
C:\Program Files\Search Results Toolbar\Datamngr folder moved successfully.
C:\Program Files\Search Results Toolbar folder moved successfully.
File\Folder C:\Users\owner\AppData\Local\ArcadeFrontier not found.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbajpeofkjjeiamcglnmldoboonfkiol\5.0.0.7254_0\lib folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbajpeofkjjeiamcglnmldoboonfkiol\5.0.0.7254_0\config\skin\images folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbajpeofkjjeiamcglnmldoboonfkiol\5.0.0.7254_0\config\skin\css folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbajpeofkjjeiamcglnmldoboonfkiol\5.0.0.7254_0\config\skin folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbajpeofkjjeiamcglnmldoboonfkiol\5.0.0.7254_0\config folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbajpeofkjjeiamcglnmldoboonfkiol\5.0.0.7254_0 folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbajpeofkjjeiamcglnmldoboonfkiol folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\_locales\en folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\_locales folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\sl folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\lib\jquery.alerts\images folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\lib\jquery.alerts folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\lib folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\core folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\WEATHER\js folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\WEATHER\css folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\WEATHER folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\TWITTER\resources folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\TWITTER\js folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\TWITTER\img folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\TWITTER folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\SEARCH\view\style\rsx folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\SEARCH\view\style folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\SEARCH\view\script folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\SEARCH\view folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\SEARCH\resources folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\SEARCH\js folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\SEARCH\Css folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\SEARCH\buildSettings folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\SEARCH folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\RADIO_PLAYER\js\resources folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\RADIO_PLAYER\js folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\RADIO_PLAYER\css\custom-theme folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\RADIO_PLAYER\css folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\RADIO_PLAYER folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\PRICE_GONG\menu_dlg folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\PRICE_GONG\images folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\PRICE_GONG\css\custom-theme folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\PRICE_GONG\css folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\PRICE_GONG\agreement folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\PRICE_GONG folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\Optimizer\js folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\Optimizer folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\NOTIFICATION\js folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\NOTIFICATION\images\light folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\NOTIFICATION\images\dark folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\NOTIFICATION\images folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\NOTIFICATION\css folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\NOTIFICATION folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\MULTI_RSS\js\resources folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\MULTI_RSS\js folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\MULTI_RSS\img folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\MULTI_RSS\css folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\MULTI_RSS folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\HIGHLIGHTER\js folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\HIGHLIGHTER\css folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\HIGHLIGHTER folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\EMAIL_NOTIFIER\js\plugins folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\EMAIL_NOTIFIER\js folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\EMAIL_NOTIFIER\css folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\EMAIL_NOTIFIER folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\APPLICATION_BUTTON\resources folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\APPLICATION_BUTTON\Js folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa\APPLICATION_BUTTON folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\wa folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\ui\menu\js folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\ui\menu\img folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\ui\menu\css folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\ui\menu folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\ui\gf\js folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\ui\gf\img folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\ui\gf\css folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\ui\gf folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\ui\gadgetFrame folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\ui\dlg\ftd\images folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\ui\dlg\ftd folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\ui\dlg folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\ui folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\sp\spsd\images folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\sp\spsd folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\sp\spbd\images folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\sp\spbd folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\sp\js folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\sp folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\options\js\resources folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\options\js folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\options\images folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\options\css folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\options folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\msd folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\api folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\ac\res folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\ac\img folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\ac\css folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\ac folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\aboutBox\js folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\aboutBox\images folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al\aboutBox folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb\al folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\tb folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\Search\plugins folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\Search\NewTabPages\js folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\Search\NewTabPages\img folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\Search\NewTabPages\html folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\Search\NewTabPages\css folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\Search\NewTabPages\API folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\Search\NewTabPages folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\Search\html folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\Search folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\plugins folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\js\toolbarAPI folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\js\tabs\back folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\js\tabs folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\js\options folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\js\lib folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0\js folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi\10.16.4.12_0 folder moved successfully.
C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi folder moved successfully.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 57472 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: owner
->Temp folder emptied: 18863490 bytes
->Temporary Internet Files folder emptied: 17844377 bytes
->Java cache emptied: 1087861 bytes
->FireFox cache emptied: 19022253 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 72667 bytes
 
User: Public
 
User: TEMP
 
User: wangzhisong
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 42003764 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 94.00 mb
 
 
OTL by OldTimer - Version 3.2.69.0 log created on 03262014_111540

Files\Folders moved on Reboot...
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.
File\Folder C:\Windows\temp\fb_2204.lck not found!
File move failed. C:\Windows\temp\plsapp.log scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...
 

 

# AdwCleaner v3.022 - Report created 26/03/2014 at 11:51:57
# Updated 13/03/2014 by Xplode
# Operating System : Windows Vista ™ Home Premium Service Pack 2 (32 bits)
# Username : owner - OWNER-PC
# Running from : C:\Users\owner\Downloads\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Browser Manager
Folder Deleted : C:\ProgramData\Tarma Installer
Folder Deleted : C:\ProgramData\wincert
Folder Deleted : C:\Program Files\HiDefMedia
Folder Deleted : C:\Program Files\Mobogenie
Folder Deleted : C:\Program Files\OApps
Folder Deleted : C:\Program Files\Optimizer Pro
Folder Deleted : C:\Program Files\WebexpEnhancedV1
Folder Deleted : C:\Windows\system32\SearchProtect
Folder Deleted : C:\Users\owner\AppData\Local\genienext
Folder Deleted : C:\Users\owner\AppData\Local\Mobogenie
Folder Deleted : C:\Users\owner\AppData\Local\SwvUpdater
Folder Deleted : C:\Users\owner\AppData\Roaming\newnext.me
Folder Deleted : C:\Users\owner\Documents\Optimizer Pro
File Deleted : C:\END
File Deleted : C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
File Deleted : C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pflphaooapbgpeakohlggbpidpppgdff_0.localstorage
File Deleted : C:\Windows\Tasks\AmiUpdXp.job
File Deleted : C:\Windows\System32\Tasks\AmiUpdXp

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\jbajpeofkjjeiamcglnmldoboonfkiol
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4ED35167-2D1D-4FB7-92B1-A6529D8AA0E8}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4ED35167-2D1D-4FB7-92B1-A6529D8AA0E8}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\WLXQuickTimeShellExt.DLL
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.bho
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate
Key Deleted : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform
Key Deleted : HKLM\SOFTWARE\Classes\PCProxy.DataContainer
Key Deleted : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard
Key Deleted : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard.1
Key Deleted : HKLM\SOFTWARE\Classes\Updater.AmiUpd
Key Deleted : HKLM\SOFTWARE\Classes\Updater.AmiUpd.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{9DC8FA51-B596-4F77-802C-5B295919C205}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3E28F712-0D6C-4EE3-AC8C-8F060F5D7C33}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6CE321DA-DC11-45C6-A0FC-4E8A7D978ABC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6EEBC7FF-67DA-4B90-9251-C2C5696E4B48}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{74137531-80F7-406F-9543-7D11385FA8C8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{832599B2-55BF-4437-8F3E-030CF5AEB262}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9B7B034B-944A-4261-B487-862F642F7615}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B1A429DB-FB06-4645-B7C0-0CC405EAD3CD}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DD67706E-819E-4EBD-BF8D-6D6147CC7A49}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F62A4AF9-58B4-4FEC-89CC-D717A547D8E8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{70B469C4-47B1-48BD-8149-D2749E4B8832}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{878B8524-AED5-4870-9A96-A515440DAC75}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{878B8524-AED5-4870-9A96-A515440DAC75}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{878B8524-AED5-4870-9A96-A515440DAC75}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{377E5D4D-77E5-476A-8716-7E70A9272DA0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{878B8524-AED5-4870-9A96-A515440DAC75}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{52030FE1-7C14-44BB-BDDB-790F699FBF2C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{35FC7BE1-F856-4E8A-AA1C-F0704AB5D1A1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\ilivid
Key Deleted : HKCU\Software\SmartBar
Key Deleted : HKCU\Software\smartbarbackup
Key Deleted : HKCU\Software\smartbarlog
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKCU\Software\AppDataLow\Software\BitTorrentBar2
Key Deleted : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\DomaIQ
Key Deleted : HKLM\Software\Freeze.com
Key Deleted : HKLM\Software\Iminent
Key Deleted : HKLM\Software\Tarma Installer
Key Deleted : HKLM\Software\BitTorrentBar2
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16540

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]

-\\ Mozilla Firefox v27.0.1 (en-US)

[ File : C:\Users\owner\AppData\Roaming\Mozilla\Firefox\Profiles\140ox05w.default-1393965298370\prefs.js ]

Line Deleted : user_pref("browser.startup.homepage", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fQbYPFkTjj8jzRyB0rQvzyej3yvtCjyXXnQmapE7w2VxWlZES3JXbaVRy7_VOl4_Bern0I8mudbCutWssip9IIAHM1gW5IfytjY8CDeih1fCB8Gv4xi[...]
Line Deleted : user_pref("extensions.helperbar.BackPageActive", true);
Line Deleted : user_pref("extensions.helperbar.DockingPositionDown", false);
Line Deleted : user_pref("extensions.helperbar.LastHiddenTime", 23261485);
Line Deleted : user_pref("extensions.helperbar.SmartbarDisabled", true);
Line Deleted : user_pref("extensions.helperbar.SmartbarStateMinimaized", false);
Line Deleted : user_pref("extensions.helperbar.Visibility", true);
Line Deleted : user_pref("extensions.helperbar.backPageCapacity", 3);
Line Deleted : user_pref("extensions.helperbar.backPageCounter", 0);
Line Deleted : user_pref("extensions.helperbar.backPageDay", 24);
Line Deleted : user_pref("extensions.helperbar.backPageLastEvent", "1395515211703");
Line Deleted : user_pref("extensions.helperbar.backPageMinInterval", 15);
Line Deleted : user_pref("extensions.helperbar.barcodeid", "127028");
Line Deleted : user_pref("extensions.helperbar.countryiso", "us");
Line Deleted : user_pref("extensions.helperbar.downloadprovider", "snapdoocybch");
Line Deleted : user_pref("extensions.helperbar.externalJsFiles", "{\"d\":\"[{\\\"ExcludeDomains\\\":[\\\"snap.do\\\",\\\"snapdo.com\\\"],\\\"hxxpInjection\\\":\\\"hxxp:\\\\\\/\\\\\\/www.superfish.com\\\\\\/ws\\\\\\/[...]
Line Deleted : user_pref("extensions.helperbar.fromautoupdate", "false");
Line Deleted : user_pref("extensions.helperbar.installationid", "ac2f821a-c374-920c-3fb9-a194d4996f0b");
Line Deleted : user_pref("extensions.helperbar.installdate", "24/03/2014");
Line Deleted : user_pref("extensions.helperbar.keepAliveLastevent", "1395688003");
Line Deleted : user_pref("extensions.helperbar.lastExternalJsUpdate", "1395689145529");
Line Deleted : user_pref("extensions.helperbar.publisher", "snapdoocyb");
Line Deleted : user_pref("keyword.URL", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fQbYPFkTjj8jzRyB0rQvzyej3yvtCjyXXnQmapE7w2VxWlZES3JXbaVRy7_VOl4_Bern0I8mudbCutWssip9IIAHM1gW5IfytjY8CDeih1fCB8Gv4xTgTi8dcs_1XESa[...]

-\\ Google Chrome v

[ File : C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted : urls_to_restore_on_startup

*************************

AdwCleaner[R0].txt - [11844 octets] - [26/03/2014 11:49:39]
AdwCleaner[S0].txt - [11616 octets] - [26/03/2014 11:51:57]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [11677 octets] ##########
 


  • 0

#4
Essexboy
Posted 26 March 2014 - 12:29 PM

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
How is the computer behaving now ?

Please download Malwarebytes Anti-Malware to your desktop
Install the progamme and select update
Once it has updated select Settings > Detection and Protection
Tick Scan for rootkits

MBAMsettings.JPG

Go back to the Dashboard and select Scan Now

MBAMScan.JPG

If threats are detected, click the Apply Actions button, MBAM will ask for a reboot.

MBAMReboot.JPG

MBAMLog.JPG

On completion of the scan (or after the reboot) select View Detailed Log
Select Export > Select text file and save to the desktop
Attach/Post that log
  • 0

#5
mygrneyedangel
Posted 26 March 2014 - 02:18 PM

mygrneyedangel

    Member

  • Topic Starter
  • Member
  • PipPip
  • 67 posts

Running a little better. Still won't bring up some games on facebook that I play. Attaching scan log.

 

 

 

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 3/26/2014
Scan Time: 2:53:08 PM
Logfile: scan log malware.txt
Administrator: Yes

Version: 2.00.0.1000
Malware Database: v2014.03.26.06
Rootkit Database: v2014.03.25.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Chameleon: Disabled

OS: Windows Vista Service Pack 2
CPU: x86
File System: NTFS
User: owner

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 232402
Time Elapsed: 11 min, 7 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Shuriken: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 2
PUP.Optional.MediaPlayerEnhance.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\MediaPlayerEnhance, , [4e8c8483fc7f70c66b5daab3d82a33cd],
PUP.Optional.PlusHD.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\Plus-HD-1.3, , [538753b4601bd462c3b7d382e81a04fc],

Registry Values: 0
(No malicious items detected)

Registry Data: 1
PUM.Hijack.StartMenu, HKU\S-1-5-21-3567570486-1457399869-1852187231-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\ADVANCED|Start_ShowSearch, 0, Good: (1), Bad: (0),,[eeecd136007b8caa28585da519eb8a76]

Folders: 13
PUP.Optional.WeatherAlerts, C:\Users\owner\AppData\Local\WeatherAlerts, , [8b4fa364eb902214d277ef606999d12f],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\userCode, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\icons, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\icons\actions, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\api, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\popupResource, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.ReMarkable.A, C:\Program Files\Re-Markable, , [5e7c8582cbb01f1754ff82d271919868],

Files: 85
PUP.Optional.ArcadeFrontier.A, C:\Users\owner\Downloads\ArcadeFrontierGames(1).exe, , [ac2e9e69483366d0196ff75924dde719],
PUP.Optional.ArcadeFrontier.A, C:\Users\owner\Downloads\ArcadeFrontierGames.exe, , [25b53ccb63185cdab8d0460adc258a76],
PUP.Optional.Smart, C:\Users\owner\Downloads\java.exe, , [ae2c6a9dcbb0e551c8d719e64ab6b54b],
PUP.Optional.RocketFuel.A, C:\Users\owner\Downloads\MediaPlayerClassic_RocketFuelInstaller.exe, , [5189d730ed8efe385a97e9f7b44f55ab],
PUP.Optional.OptimumInstaller.A, C:\Users\owner\Downloads\Player-Firefox.exe, , [b9217493daa16dc98a5b440034cd31cf],
PUP.Optional.Bandoo, C:\Users\owner\Downloads\iLividSetup-r390-n-bf.exe, , [dbfff90eccaff4428b4e1fe19c65d62a],
PUP.Optional.Softonic.A, C:\Users\owner\Downloads\SoftonicDownloader_for_dvd-shrink.exe, , [43977e8908735cdac079d0473bc68a76],
PUP.Optional.ToolBarInstaller.A, C:\Users\owner\Downloads\SportsSetup.exe, , [15c5ec1b512a7cbaa2948ab054ad926e],
PUP.Optional.InstallBrain.A, C:\Users\owner\Downloads\CodecPerformerSetup.exe, , [7466e027eb90191d35e842f7a75afc04],
PUP.Optional.SmartBar, C:\Windows\Installer\4239fb.msi, , [c01ae91ec1ba3501a074cb63659b7789],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\background.html, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\chromeCoreFilesIndex.txt, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\crossriderManifest.json, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\manifest.json, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\popup.html, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\manifest.xml, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins.json, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\102_dealply_m.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\103_intext_5_m.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\104_jollywallet_m.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\13_CrossriderAppUtils.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\14_CrossriderUtils.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\155_ibario_pops_m.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\177_crossriderDashboard.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\17_jQuery.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\182_openUrl.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\183_tabsWrapper.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\184_noproblemppc_m.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\190_pops_5_m.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\191_ciuvo_m.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\19_CHAppAPIWrapper.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\1_base.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\207_dbWrapper.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\21_debug.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\22_resources.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\230_revizer_ws_dynamic_b2b_2_m.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\233_revizer_p_dynamic_b2b_2_m.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\28_initializer.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\47_resources_background.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\4_jquery_1_7_1.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\64_appApiMessage.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\72_appApiValidation.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\78_CrossriderInfo.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\80_CHPopupAppAPI.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\91_monetizationLoader.js.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\93_superfish_no_coupons_m.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\97_resourceApiWrapper.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\userCode\background.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\userCode\extension.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\icons\icon128.png, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\icons\icon16.png, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\icons\icon48.png, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\icons\actions\1.png, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\background.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\main.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\platformVersion.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\api\chrome.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\api\cookie.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\api\message.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\api\monitor.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\api\pageAction.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\api\pageActionBG.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\app_api.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\bg_app_api.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\consts.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\cookie_store.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\crossriderAPI.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\delegate.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\events.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\extensionDataStore.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\installer.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\logFile.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\logging.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\onBGDocumentLoad.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\reports.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\storageWrapper.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\updateManager.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\util.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\xhr.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\popupResource\newPopup.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.CrossRider.A, C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\popupResource\popup.js, , [c51573945724cb6bd5873818f80a9868],
PUP.Optional.ReMarkable.A, C:\Program Files\Re-Markable\01.db, , [5e7c8582cbb01f1754ff82d271919868],
PUP.Optional.ReMarkable.A, C:\Program Files\Re-Markable\150.crx, , [5e7c8582cbb01f1754ff82d271919868],
PUP.Optional.ReMarkable.A, C:\Program Files\Re-Markable\150.dat, , [5e7c8582cbb01f1754ff82d271919868],
PUP.Optional.ReMarkable.A, C:\Program Files\Re-Markable\150.xpi, , [5e7c8582cbb01f1754ff82d271919868],

Physical Sectors: 0
(No malicious items detected)


(end)


  • 0

#6
Essexboy
Posted 26 March 2014 - 02:53 PM

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts

Did you delete those items ?  If so try the games on facebook and let me know what error you get


  • 0

#7
mygrneyedangel
Posted 27 March 2014 - 09:26 AM

mygrneyedangel

    Member

  • Topic Starter
  • Member
  • PipPip
  • 67 posts

Yes I did delete them. It doesn't give me a message just doesn't load the page.


  • 0

#8
Essexboy
Posted 27 March 2014 - 09:29 AM

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Could you run a fresh OTL scan please and ensure all users is selected
  • 0

#9
mygrneyedangel
Posted 27 March 2014 - 09:41 AM

mygrneyedangel

    Member

  • Topic Starter
  • Member
  • PipPip
  • 67 posts

Do you want the quick scan?


  • 0

#10
Essexboy
Posted 27 March 2014 - 10:14 AM

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
Yes please
  • 0

Advertisements

#11
mygrneyedangel
Posted 27 March 2014 - 12:48 PM

mygrneyedangel

    Member

  • Topic Starter
  • Member
  • PipPip
  • 67 posts

ok

 

OTL logfile created on: 3/27/2014 11:00:39 AM - Run 3
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\owner\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
2.99 Gb Total Physical Memory | 1.29 Gb Available Physical Memory | 43.19% Memory free
6.18 Gb Paging File | 4.51 Gb Available in Paging File | 72.96% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 220.29 Gb Total Space | 114.73 Gb Free Space | 52.08% Space Free | Partition Type: NTFS
Drive D: | 10.00 Gb Total Space | 4.14 Gb Free Space | 41.38% Space Free | Partition Type: NTFS
 
Computer Name: OWNER-PC | User Name: owner | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2014/03/25 12:49:09 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\owner\Desktop\OTL.exe
PRC - [2014/03/13 11:35:24 | 004,233,744 | ---- | M] (iolo technologies, LLC) -- C:\Program Files\iolo\System Mechanic\SystemGuardAlerter.exe
PRC - [2014/03/13 11:07:08 | 004,492,776 | ---- | M] (iolo technologies, LLC) -- C:\Program Files\iolo\Common\Lib\ioloServiceManager.exe
PRC - [2014/03/05 09:24:48 | 000,857,912 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
PRC - [2014/03/05 09:24:46 | 001,809,720 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
PRC - [2014/03/05 09:24:40 | 007,430,968 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
PRC - [2014/02/16 10:39:39 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2014/02/06 19:22:58 | 003,767,096 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2014/02/06 19:22:58 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2014/01/23 18:12:52 | 000,091,936 | ---- | M] (PureLeads) -- C:\Program Files\PureLeads\PureLeadsSvc.exe
PRC - [2014/01/23 18:12:52 | 000,083,232 | ---- | M] (PureLeads) -- C:\Program Files\PureLeads\PureLeadsTray.exe
PRC - [2014/01/23 18:12:50 | 000,024,352 | ---- | M] (sendori) -- C:\Program Files\PureLeads\PureLeads.Service.exe
PRC - [2013/12/18 13:42:32 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2013/06/26 19:23:04 | 000,207,528 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
PRC - [2013/06/26 19:23:00 | 000,523,944 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
PRC - [2012/09/17 06:39:30 | 000,171,600 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
PRC - [2009/04/11 01:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008/01/20 21:23:32 | 001,008,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MSASCui.exe
PRC - [2008/01/01 22:44:32 | 000,102,400 | ---- | M] (IDT, Inc.) -- C:\Windows\System32\stacsv.exe
PRC - [2007/04/17 00:05:52 | 000,021,504 | ---- | M] (UPEK Inc.) -- C:\Program Files\Fingerprint Reader Suite\upeksvr.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2014/02/16 10:39:38 | 003,578,992 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2014/02/13 04:36:22 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\e3ab5ab0fbb86c36425e6902e54a547b\System.Runtime.Remoting.ni.dll
MOD - [2014/02/13 04:36:18 | 011,909,120 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\2183861863b3c98036f0d75f303d2a65\System.Web.ni.dll
MOD - [2014/02/13 04:33:07 | 007,977,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\957628d9dd7b3bf370a56dca7835a997\System.ni.dll
MOD - [2014/02/13 04:32:56 | 011,497,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\694a37a84dee2cd2609a1dfab27c0433\mscorlib.ni.dll
MOD - [2014/01/07 14:31:57 | 019,336,120 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
MOD - [2008/12/18 04:55:28 | 000,054,784 | ---- | M] () -- C:\Windows\System32\bcmwlrmt.dll
 
 
========== Services (SafeList) ==========
 
SRV - File not found [Auto | Stopped] -- C:\Program Files\ShowMyPCService\tvnserver.exe -- (tvnserver)
SRV - [2014/03/27 10:28:53 | 000,257,928 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2014/03/13 11:07:08 | 004,492,776 | ---- | M] (iolo technologies, LLC) [Auto | Running] -- C:\Program Files\iolo\Common\Lib\ioloServiceManager.exe -- (ioloSystemService)
SRV - [2014/03/05 09:24:48 | 000,857,912 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2014/03/05 09:24:46 | 001,809,720 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2014/02/16 10:39:39 | 000,118,896 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2014/02/06 19:22:58 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2014/01/23 18:12:52 | 000,091,936 | ---- | M] (PureLeads) [Auto | Running] -- C:\Program Files\PureLeads\PureLeadsSvc.exe -- (PlsvcV1)
SRV - [2014/01/23 18:12:50 | 003,690,784 | ---- | M] (Sendori) [Auto | Stopped] -- C:\Program Files\PureLeads\plsapp.exe -- (plsapp)
SRV - [2014/01/23 18:12:50 | 000,024,352 | ---- | M] (sendori) [Auto | Running] -- C:\Program Files\PureLeads\PureLeads.Service.exe -- (PlsvcV2)
SRV - [2013/12/18 13:42:32 | 000,065,432 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2013/08/14 16:19:24 | 000,039,056 | ---- | M] () [Disabled | Stopped] -- C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe -- (RealNetworks Downloader Resolver Service)
SRV - [2013/06/26 19:23:04 | 000,207,528 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
SRV - [2013/06/26 19:23:00 | 000,523,944 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
SRV - [2012/09/17 06:39:30 | 000,171,600 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor11.0)
SRV - [2010/03/18 11:19:26 | 000,113,152 | ---- | M] (ArcSoft Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon)
SRV - [2008/09/23 23:09:52 | 000,155,648 | ---- | M] (Stardock Corporation) [Disabled | Stopped] -- C:\Program Files\Dell\DellDock\DockLogin.exe -- (DockLoginService)
SRV - [2008/01/20 21:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2008/01/01 22:44:32 | 000,102,400 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\System32\stacsv.exe -- (STacSV)
SRV - [2008/01/01 22:44:26 | 000,073,728 | ---- | M] (Andrea Electronics Corporation) [Disabled | Stopped] -- C:\Windows\System32\AEstSrv.exe -- (AESTFilters)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | Auto | Stopped] -- System32\Drivers\Ca1528av.sys -- (Ca1528av)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\Bulk1528.sys -- (Bulk1528)
DRV - [2014/03/27 10:36:18 | 000,107,736 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\MBAMSwissArmy.sys -- (MBAMSwissArmy)
DRV - [2014/03/05 09:26:12 | 000,051,416 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\mwac.sys -- (MBAMWebAccessControl)
DRV - [2014/03/05 09:26:02 | 000,023,256 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2014/02/06 19:23:03 | 000,775,952 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2014/02/06 19:23:03 | 000,410,784 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2014/02/06 19:23:03 | 000,067,824 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2014/02/06 19:23:03 | 000,057,672 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2014/02/06 19:23:02 | 000,054,832 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2014/01/10 15:24:33 | 000,026,136 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswKbd.sys -- (aswKbd)
DRV - [2014/01/07 14:31:59 | 000,180,248 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswVmm.sys -- (aswVmm)
DRV - [2014/01/07 14:31:59 | 000,049,944 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswRvrt.sys -- (aswRvrt)
DRV - [2013/12/03 10:54:50 | 000,068,464 | ---- | M] (Raxco Software, Inc.) [File_System | Auto | Running] -- C:\Windows\System32\drivers\PDFsFilter.sys -- (PDFsFilter)
DRV - [2013/12/03 10:54:48 | 000,026,248 | ---- | M] (EldoS Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\ElRawDsk.sys -- (ElRawDisk)
DRV - [2013/06/26 19:23:04 | 000,020,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Sftvollh.sys -- (Sftvol)
DRV - [2013/06/26 19:23:00 | 000,197,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Sftplaylh.sys -- (Sftplay)
DRV - [2013/06/26 19:23:00 | 000,024,232 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\Sftredirlh.sys -- (Sftredir)
DRV - [2013/06/26 19:22:58 | 000,583,848 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Sftfslh.sys -- (Sftfs)
DRV - [2011/08/15 14:51:40 | 000,054,144 | ---- | M] (Fengtao Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\dvdfab.sys -- (dvdfab)
DRV - [2008/12/18 04:55:10 | 000,018,424 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\bcm42rly.sys -- (BCM42RLY)
DRV - [2008/04/22 01:11:54 | 000,111,616 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\IntcHdmi.sys -- (IntcHdmiAddService)
DRV - [2008/01/20 21:23:25 | 000,220,672 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\e1e6032.sys -- (e1express)
DRV - [2008/01/01 22:44:40 | 000,330,240 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\stwrt.sys -- (STHDA)
DRV - [2007/12/03 00:59:06 | 000,007,424 | ---- | M] (EyePower Games Pte. Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\OEM02Vfx.sys -- (OEM02Vfx)
DRV - [2007/12/03 00:58:50 | 000,235,648 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\OEM02Dev.sys -- (OEM02Dev)
DRV - [2007/06/22 17:59:24 | 000,479,232 | ---- | M] (eMPIA Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\emBDA.sys -- (USB28xxBGA)
DRV - [2007/02/28 06:25:46 | 000,037,376 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2007/02/28 06:25:44 | 000,043,520 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2007/02/28 06:25:44 | 000,032,256 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2007/02/06 16:38:02 | 000,028,288 | ---- | M] (eMPIA Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\emOEM.sys -- (USB28xxOEM)
DRV - [2006/11/10 15:05:00 | 000,018,688 | ---- | M] (Arcsoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\afc.sys -- (Afc)
DRV - [2006/11/02 02:36:43 | 002,028,032 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (R300)
DRV - [2001/09/13 21:35:58 | 000,027,519 | ---- | M] (Linksys) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\USB100M.SYS -- (USB-100)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
 
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
 
IE - HKU\S-1-5-21-3567570486-1457399869-1852187231-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1
IE - HKU\S-1-5-21-3567570486-1457399869-1852187231-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar =
IE - HKU\S-1-5-21-3567570486-1457399869-1852187231-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKU\S-1-5-21-3567570486-1457399869-1852187231-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages =
IE - HKU\S-1-5-21-3567570486-1457399869-1852187231-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?...42&ocid=U142DHP
IE - HKU\S-1-5-21-3567570486-1457399869-1852187231-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?...42&ocid=U142DHP
IE - HKU\S-1-5-21-3567570486-1457399869-1852187231-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKU\S-1-5-21-3567570486-1457399869-1852187231-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-3567570486-1457399869-1852187231-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL =
IE - HKU\S-1-5-21-3567570486-1457399869-1852187231-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =
IE - HKU\S-1-5-21-3567570486-1457399869-1852187231-1000\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-3567570486-1457399869-1852187231-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3567570486-1457399869-1852187231-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" =
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: ""
FF - prefs.js..browser.search.selectedEngine: ""
FF - prefs.js..extensions.enabledAddons: wrc%40avast.com:9.0.2013.75
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:27.0.1
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw_1207148.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8051.1204: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@oberon-media.com/ONCAdapter: C:\Program Files\Common Files\Oberon Media\NCAdapter\1.0.0.14\npapicomadapter.dll (Oberon-Media )
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=16.0.3.51: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.3: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.3: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.3: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=16.0.3.51: C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@realnetworks.com/npdlplugin;version=1: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\owner\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\AVAST Software\Avast\WebRep\FF [2014/02/06 19:23:24 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}: C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [2014/02/03 16:14:03 | 000,000,000 | ---D | M]
 
[2012/02/01 16:16:37 | 000,000,000 | ---D | M] (No name found) -- C:\Users\owner\AppData\Roaming\Mozilla\Extensions
[2014/03/26 13:21:57 | 000,000,000 | ---D | M] (No name found) -- C:\Users\owner\AppData\Roaming\Mozilla\Firefox\Profiles\140ox05w.default-1393965298370\extensions
[2014/02/16 10:39:33 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2014/02/16 10:39:39 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2014/02/06 19:23:24 | 000,000,000 | ---D | M] (avast! Online Security) -- C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF
 
========== Chrome  ==========
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR - homepage: http://www.msn.com/?...42&ocid=U142DHP
CHR - Extension: Google Docs = C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Google Drive = C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\
CHR - Extension: YouTube = C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Google Search = C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: Webexp Enhanced = C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\dffkkngemcheealimpeioaeilpcpopfl\1.1_0\
CHR - Extension: avast! Online Security = C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\9.0.2013.75_0\
CHR - Extension: RealDownloader = C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.3_0\
CHR - Extension: Google Wallet = C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\
CHR - Extension: Gmail = C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2014/03/26 11:16:39 | 000,000,098 | ---- | M]) - C:\Windows\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1       localhost
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (avast! Online Security) - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [PureLeads Tray] C:\Program Files\PureLeads\PureLeadsTray.exe (PureLeads)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
O4 - Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: disableCAD = 1
O7 - HKU\S-1-5-21-3567570486-1457399869-1852187231-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1
O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - Reg Error: Value error. File not found
O9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - Reg Error: Value error. File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\plsapp.dll (Sendori)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\plsapp.dll (Sendori)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\plsapp.dll (Sendori)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\plsapp.dll (Sendori)
O10 - Protocol_Catalog9\Catalog_Entries\000000000033 - C:\Windows\System32\plsapp.dll (Sendori)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9F283D49-F73F-494F-9C7F-B3468800B59F}: DhcpNameServer = 192.168.0.1
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: GinaDLL - (vrlogon.dll) - C:\Windows\System32\vrlogon.dll (UPEK Inc.)
O20 - Winlogon\Notify\psfus: DllName - (C:\Windows\system32\psqlpwd.dll) - C:\Windows\System32\psqlpwd.dll (UPEK Inc.)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 16:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{0f417dcb-4d4f-11e3-921e-0023ae1aea80}\Shell - "" = AutoRun
O33 - MountPoints2\{0f417dcb-4d4f-11e3-921e-0023ae1aea80}\Shell\AutoRun\command - "" = F:\autorun.exe
O33 - MountPoints2\{10bbdcef-6a91-11e3-8981-b5f0848fc86e}\Shell - "" = AutoRun
O33 - MountPoints2\{10bbdcef-6a91-11e3-8981-b5f0848fc86e}\Shell\AutoRun\command - "" = F:\menu.exe
O34 - HKLM BootExecute: (o)
O34 - HKLM BootExecute: ("쀀ឩҰ")
O34 - HKLM BootExecute: (3)
O34 - HKLM BootExecute: ("Tracks files that are managed by Elements Organizer")
O34 - HKLM BootExecute: ("쀀ឩҰ")
O34 - HKLM BootExecute: (0)
O34 - HKLM BootExecute: ("SOFTWARE\Mozilla\Mozilla Firefox 26.0\extensions")
O34 - HKLM BootExecute: (뚐ᙔ끘፭뤐Ȫ.)
O34 - HKLM BootExecute: ("㍼ፄĀ")
O34 - HKLM BootExecute: (Ā)
O34 - HKLM BootExecute: ("")
O34 - HKLM BootExecute: ()
O34 - HKLM BootExecute: (鴬ᡝ)
O34 - HKLM BootExecute: (Ѐ뼔൨Ā)
O34 - HKLM BootExecute: (ؕ)
O34 - HKLM BootExecute: (229)
O34 - HKLM BootExecute: ("먁ڦҰ")
O34 - HKLM BootExecute: (ù)
O34 - HKLM BootExecute: (COMPONENTS\DerivedData\VersionedIndex\6.0.6002.18005_001c11ba\ComponentFamilies\x86_microsoft-windows-crypt32-dll.resources_31bf3856ad364e35_en-us_5d347fe5c94357c3\f256!crypt32.dll.mui\f3e9c6f667cbf5a94577044def2f9c858ffe3d79f98384f24c48692b201a7884)
O34 - HKLM BootExecute: ("iolobtdfg C:\Windows\system32")
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2014/03/26 14:38:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
[2014/03/26 14:38:37 | 000,051,416 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mwac.sys
[2014/03/26 14:38:37 | 000,023,256 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2014/03/26 14:38:37 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes Anti-Malware
[2014/03/26 11:49:23 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2014/03/25 12:47:35 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\owner\Desktop\OTL.exe
[2014/03/24 14:03:57 | 000,000,000 | ---D | C] -- C:\Users\owner\AppData\Local\Downloaded Installations
[2014/03/24 12:52:50 | 000,026,248 | ---- | C] (EldoS Corporation) -- C:\Windows\System32\drivers\ElRawDsk.sys
[2014/03/04 16:21:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2014/03/04 15:35:04 | 000,000,000 | ---D | C] -- C:\Users\owner\Desktop\Old Firefox Data
[2014/02/27 12:42:08 | 000,000,000 | ---D | C] -- C:\Users\owner\AppData\Roaming\LegacyInteractive
[2014/02/27 12:41:21 | 000,000,000 | ---D | C] -- C:\Users\owner\AppData\Roaming\Oberon Media
[2014/02/27 12:41:14 | 000,000,000 | ---D | C] -- C:\Users\owner\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games of the Month
[2014/02/27 12:41:05 | 000,000,000 | ---D | C] -- C:\Program Files\Oberon Media SIDR
[2014/02/27 12:40:59 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Oberon Media
[2014/02/27 12:36:27 | 000,354,592 | ---- | C] (Sendori) -- C:\Windows\System32\plsapp.dll
[2014/02/27 12:36:24 | 000,000,000 | ---D | C] -- C:\ProgramData\PureLeads
[2014/02/27 12:36:21 | 000,000,000 | ---D | C] -- C:\Program Files\PureLeads
[2014/02/27 12:36:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Oberon Media
 
========== Files - Modified Within 30 Days ==========
 
[2014/03/27 11:03:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014/03/27 10:36:18 | 000,107,736 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys
[2014/03/27 10:28:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/03/27 09:49:56 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014/03/26 15:11:21 | 000,656,642 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2014/03/26 15:11:21 | 000,124,946 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2014/03/26 15:04:41 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2014/03/26 15:04:41 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2014/03/26 14:53:08 | 000,020,591 | ---- | M] () -- C:\Malwarebytes Anti-Malware.lnk
[2014/03/26 14:38:40 | 000,000,935 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2014/03/26 11:16:39 | 000,000,098 | ---- | M] () -- C:\Windows\System32\drivers\etc\Hosts
[2014/03/25 13:14:58 | 001,584,568 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2014/03/25 12:49:09 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\owner\Desktop\OTL.exe
[2014/03/24 12:44:53 | 000,001,947 | ---- | M] () -- C:\Users\owner\Desktop\System Mechanic.lnk
[2014/03/13 11:25:20 | 000,041,616 | ---- | M] (iolo technologies, LLC) -- C:\Windows\System32\iolobtdfg.exe
[2014/03/13 11:25:10 | 000,023,568 | ---- | M] (iolo technologies, LLC) -- C:\Windows\System32\smrgdf.exe
[2014/03/13 11:08:38 | 002,097,984 | ---- | M] (iolo technologies, LLC) -- C:\Windows\System32\Incinerator32.dll
[2014/03/10 14:54:31 | 000,001,076 | ---- | M] () -- C:\Users\owner\Documents\-.facebook.com
[2014/03/05 09:26:12 | 000,051,416 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mwac.sys
[2014/03/05 09:26:06 | 000,073,432 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamchameleon.sys
[2014/03/05 09:26:02 | 000,023,256 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2014/03/04 16:26:24 | 000,009,504 | ---- | M] () -- C:\Users\owner\Documents\cc_20140304_152615.reg
[2014/03/04 16:21:40 | 000,000,840 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2014/02/27 12:41:14 | 000,002,227 | ---- | M] () -- C:\Users\owner\Desktop\Criminal Minds.lnk
[2014/02/27 12:41:00 | 000,001,172 | ---- | M] () -- C:\Users\owner\Desktop\Games of the Month.lnk
 
========== Files Created - No Company Name ==========
 
[2014/03/26 14:53:08 | 000,020,591 | ---- | C] () -- C:\Malwarebytes Anti-Malware.lnk
[2014/03/26 14:38:40 | 000,000,935 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2014/03/10 14:54:31 | 000,001,076 | ---- | C] () -- C:\Users\owner\Documents\-.facebook.com
[2014/03/04 16:26:17 | 000,009,504 | ---- | C] () -- C:\Users\owner\Documents\cc_20140304_152615.reg
[2014/03/04 15:47:23 | 000,000,830 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2014/02/27 12:41:14 | 000,002,227 | ---- | C] () -- C:\Users\owner\Desktop\Criminal Minds.lnk
[2014/02/27 12:41:00 | 000,001,172 | ---- | C] () -- C:\Users\owner\Desktop\Games of the Month.lnk
[2014/01/07 14:32:20 | 000,180,248 | ---- | C] () -- C:\Windows\System32\drivers\aswVmm.sys
[2014/01/07 14:32:20 | 000,049,944 | ---- | C] () -- C:\Windows\System32\drivers\aswRvrt.sys
[2013/12/26 15:05:40 | 000,000,175 | ---- | C] () -- C:\Windows\System32\drivers\aswVmm.sys.sum
[2013/12/26 15:05:40 | 000,000,175 | ---- | C] () -- C:\Windows\System32\drivers\aswSP.sys.sum
[2013/12/26 15:05:40 | 000,000,175 | ---- | C] () -- C:\Windows\System32\drivers\aswSnx.sys.sum
[2013/07/19 07:17:41 | 000,000,000 | ---- | C] () -- C:\Users\owner\AppData\Roaming\SharedSettings.ccs
[2013/07/16 23:58:03 | 000,074,703 | ---- | C] () -- C:\Windows\System32\mfc45.dat
[2012/07/07 16:40:33 | 000,611,158 | ---- | C] () -- C:\Users\owner\DVDFab 8 Qt.lnk
[2012/04/04 13:14:35 | 000,006,013 | ---- | C] () -- C:\Windows\hplj1010.ini
[2012/01/17 11:29:12 | 000,000,212 | ---- | C] () -- C:\Users\owner\AppData\Roaming\wklnhst.dat
[2011/12/12 15:43:55 | 000,781,312 | -HS- | C] () -- C:\Users\owner\ehthumbs_vista.db
[2011/11/14 14:05:16 | 000,000,552 | ---- | C] () -- C:\Users\owner\AppData\Local\d3d8caps.dat
[2011/08/13 08:18:43 | 000,006,648 | ---- | C] () -- C:\Users\owner\AppData\Local\d3d9caps.dat
[2011/02/19 14:23:01 | 000,106,496 | ---- | C] () -- C:\Users\owner\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
 
========== ZeroAccess Check ==========
 
[2006/11/02 07:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012/06/08 12:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009/04/11 01:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/04/11 01:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
========== LOP Check ==========
 
[2013/06/26 22:20:54 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\ARA
[2014/01/02 17:30:55 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\AVAST Software
[2014/02/18 18:40:35 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\BitTorrent
[2012/02/06 11:40:53 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011/08/17 23:21:55 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\com.hwp.HWPLauncher
[2013/09/17 21:46:12 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\DVDFab9
[2013/11/13 16:47:33 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\ImgBurn
[2013/07/10 15:50:33 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\Instant Housecall
[2014/02/24 20:06:26 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\iolo
[2014/01/10 16:09:40 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\ioloGovernor
[2014/02/27 12:42:08 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\LegacyInteractive
[2014/02/03 16:29:23 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\LibreOffice
[2014/02/27 12:41:22 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\Oberon Media
[2011/08/15 22:37:55 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\PCDr
[2013/11/14 13:05:03 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\QBOSSCD
[2014/02/13 04:26:31 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\SoftGrid Client
[2012/01/17 11:29:13 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\Template
[2012/02/02 16:18:25 | 000,000,000 | ---D | M] -- C:\Users\owner\AppData\Roaming\TP
 
========== Purity Check ==========
 
 
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 376 bytes -> C:\ProgramData\TEMP:214562D2
@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:373E1720

< End of report >


  • 0

#12
Essexboy
Posted 27 March 2014 - 12:56 PM

Essexboy

    GeekU Moderator

  • Retired Staff
  • 69,964 posts
OK lets remove Sendori first and then I would like you to temporarily disable Avast Security Addon within IE and let me know if that allows the facebook game

[attachment=69795:Capture.JPG]

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following
    OTL_Fix.GIF
:Commands
[CREATERESTOREPOINT]

:Files
ipconfig /flushdns /c
ipconfig /release /c
ipconfig /renew /c
netsh winsock reset /c
netsh advfirewall reset /c

:Commands
[resethosts]
[emptytemp]
[Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

  • 0

#13
mygrneyedangel
Posted 27 March 2014 - 01:04 PM

mygrneyedangel

    Member

  • Topic Starter
  • Member
  • PipPip
  • 67 posts

Sir, I am running Firefox


  • 0

#14
mygrneyedangel
Posted 27 March 2014 - 01:07 PM

mygrneyedangel

    Member

  • Topic Starter
  • Member
  • PipPip
  • 67 posts

Sir I am running Firefox


  • 0

#15
mygrneyedangel
Posted 27 March 2014 - 01:08 PM

mygrneyedangel

    Member

  • Topic Starter
  • Member
  • PipPip
  • 67 posts

Sir, I am running Firefox


  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP