[2Frustrated]

Hello,

 

My fathers Laptop Dell Inspiron has a number of issues:

1. Home page keeps reverting back to blank:blank even though I change it to www.att.net.

2. Pop up from McAfee shows up and says "Potentially Unwanted Program Blocked - McAfee prevented a potentially unwanted program from running. Protect your PC by only allowing programs you trust" and shows option to remove, allow or close, which I click but the pop up keeps coming up and I repeat the action of clicking remove and the pop up comes up again. 

3. Pop up and ad redirects keep showing up

 

I recently downloaded Adobe.

I also quarantined risks from McAfee, which are now coming up in the pop up to remove in #2.

 

I am not technical with computers and need help. Thank you!

 

 

OTL logfile created on: 12/14/2014 1:35:39 PM - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\herminiojotiesr\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17501)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
7.91 Gb Total Physical Memory | 4.67 Gb Available Physical Memory | 59.06% Memory free
15.81 Gb Paging File | 11.93 Gb Available in Paging File | 75.44% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 911.88 Gb Total Space | 858.85 Gb Free Space | 94.18% Space Free | Partition Type: NTFS
 
Computer Name: HERMSCOMPUTER | User Name: herminiojotiesr | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2014/12/14 13:34:41 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\herminiojotiesr\Desktop\OTL.exe
PRC - [2014/12/14 12:52:15 | 000,523,504 | ---- | M] () -- C:\Program Files (x86)\Hold Page\bin\utilHoldPage.exe
PRC - [2014/12/14 12:47:36 | 000,523,504 | ---- | M] () -- C:\Program Files (x86)\Hold Page\updateHoldPage.exe
PRC - [2014/12/14 05:39:46 | 000,101,616 | ---- | M] () -- C:\Program Files (x86)\Hold Page\bin\HoldPage.expext.exe
PRC - [2014/12/13 12:48:42 | 001,649,904 | ---- | M] () -- C:\Program Files (x86)\Hold Page\bin\HoldPage.BOASHelper.exe
PRC - [2014/12/13 12:48:40 | 001,791,216 | ---- | M] () -- C:\Program Files (x86)\Hold Page\bin\HoldPage.BOAS.exe
PRC - [2014/12/13 12:48:40 | 001,786,608 | ---- | M] () -- C:\Program Files (x86)\Hold Page\bin\HoldPage.BOASPRT.exe
PRC - [2014/12/13 12:47:36 | 000,161,520 | ---- | M] () -- C:\Program Files (x86)\Hold Page\bin\HoldPage.BRT.Helper.exe
PRC - [2014/12/03 14:56:44 | 000,399,976 | ---- | M] (RaMMicHaeL) -- C:\Program Files (x86)\Unchecky\bin\unchecky_bg.exe
PRC - [2014/12/03 14:56:44 | 000,111,208 | ---- | M] (RaMMicHaeL) -- C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe
PRC - [2014/12/03 10:06:08 | 000,081,088 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2014/11/20 16:46:22 | 000,862,800 | ---- | M] (PC Utilities Software Limited) -- C:\Program Files (x86)\Optimizer Pro 3.11\OptProReminder.exe
PRC - [2014/11/20 16:46:22 | 000,422,992 | ---- | M] (PC Utilities Software Limited) -- C:\Program Files (x86)\Optimizer Pro 3.11\OptProSmartScan.exe
PRC - [2014/11/20 10:13:26 | 004,531,664 | ---- | M] (PC Drivers HeadQuarters LP) -- C:\Program Files (x86)\Veloxum\iPTE\DriverSupportAO.exe
PRC - [2014/11/20 10:13:26 | 001,684,944 | ---- | M] (PC Drivers HeadQuarters LP) -- C:\Program Files (x86)\Veloxum\iPTE\DriverSupportAOsvc.exe
PRC - [2014/11/11 08:14:04 | 001,430,944 | ---- | M] (Xacti, LLC) -- C:\Program Files (x86)\Inbox Toolbar\Inbox.exe
PRC - [2014/09/20 21:09:09 | 000,195,240 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
PRC - [2014/03/11 22:36:06 | 000,453,280 | ---- | M] (Microsoft Corporation.) -- C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingBar.exe
PRC - [2014/03/11 22:36:06 | 000,267,936 | ---- | M] (Microsoft Corporation.) -- C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingApp.exe
PRC - [2014/03/11 22:36:06 | 000,247,968 | ---- | M] (Microsoft Corporation.) -- C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE
PRC - [2014/03/11 22:36:06 | 000,141,984 | ---- | M] (Microsoft Corporation.) -- C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\bingsurrogate.exe
PRC - [2012/02/16 09:49:44 | 001,695,040 | ---- | M] (SoftThinks SAS) -- C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
PRC - [2012/02/01 08:50:58 | 000,968,048 | ---- | M] () -- C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe
PRC - [2012/01/27 13:30:16 | 000,465,216 | ---- | M] (SoftThinks - Dell) -- C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
PRC - [2012/01/26 18:49:34 | 002,751,808 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe
PRC - [2012/01/26 18:47:36 | 004,293,952 | ---- | M] (SoftThinks - Dell) -- C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe
PRC - [2011/05/18 22:16:48 | 000,995,392 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
PRC - [2011/05/18 22:16:46 | 001,335,360 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
PRC - [2011/05/18 22:16:36 | 000,921,664 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
PRC - [2011/05/18 22:16:34 | 000,839,744 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
PRC - [2011/04/22 08:13:00 | 002,009,704 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2011/04/21 16:32:26 | 000,378,472 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2011/04/13 07:39:14 | 000,503,942 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
PRC - [2010/11/05 20:54:22 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
PRC - [2010/11/05 20:54:20 | 000,283,160 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
PRC - [2010/10/05 18:04:12 | 002,655,768 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
PRC - [2010/10/05 18:04:08 | 000,325,656 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2014/12/14 05:39:48 | 000,082,160 | ---- | M] () -- C:\Program Files (x86)\Hold Page\bin\HoldPage.expextdll.dll
MOD - [2014/12/14 05:39:46 | 000,101,616 | ---- | M] () -- C:\Program Files (x86)\Hold Page\bin\HoldPage.expext.exe
MOD - [2014/12/13 12:48:42 | 001,649,904 | ---- | M] () -- C:\Program Files (x86)\Hold Page\bin\HoldPage.BOASHelper.exe
MOD - [2014/12/13 12:48:40 | 001,791,216 | ---- | M] () -- C:\Program Files (x86)\Hold Page\bin\HoldPage.BOAS.exe
MOD - [2014/12/13 12:48:40 | 001,786,608 | ---- | M] () -- C:\Program Files (x86)\Hold Page\bin\HoldPage.BOASPRT.exe
MOD - [2014/12/13 12:47:36 | 000,161,520 | ---- | M] () -- C:\Program Files (x86)\Hold Page\bin\HoldPage.BRT.Helper.exe
MOD - [2014/12/01 17:52:34 | 000,475,648 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\82fb26570c888a04480408d950d9b016\IAStorUtil.ni.dll
MOD - [2014/11/27 14:34:45 | 000,774,144 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\875c35969785fa170d186e7ca546ac9e\System.Runtime.Remoting.ni.dll
MOD - [2014/11/22 11:17:41 | 000,316,576 | ---- | M] () -- C:\Program Files\Microsoft Office 15\root\office15\appvisvstream32.dll
MOD - [2014/10/20 11:15:51 | 001,358,336 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\9c41049a9716f9c34e8dfad27ac45153\System.WorkflowServices.ni.dll
MOD - [2014/10/20 11:15:30 | 001,707,008 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\26e521624e8e8c879ac83245694d809a\System.ServiceModel.Web.ni.dll
MOD - [2014/10/20 11:15:26 | 000,401,408 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\3063abda312516739bc808360071bad9\System.Xml.Linq.ni.dll
MOD - [2014/10/20 11:13:57 | 001,084,928 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\11295b4ad79dbeadee6c83ae45a8a07f\System.IdentityModel.ni.dll
MOD - [2014/10/20 11:13:56 | 002,347,008 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\b1e0939384cc320d6ac7b8921ccc2877\System.Runtime.Serialization.ni.dll
MOD - [2014/10/20 10:58:54 | 000,256,000 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\da4175d4363c1bcecb984a44cd53664f\SMDiagnostics.ni.dll
MOD - [2014/10/20 10:58:53 | 017,477,120 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\0d51a457c4cb85cd5ae8439094387ad3\System.ServiceModel.ni.dll
MOD - [2014/10/20 10:58:13 | 002,297,344 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\e3641fa3359f37ad12c84183ce765093\System.Core.ni.dll
MOD - [2014/10/14 12:08:53 | 000,368,128 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\7b22741531a2850c807656d0298a96bd\PresentationFramework.Aero.ni.dll
MOD - [2014/10/14 12:08:45 | 011,922,944 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\b4001d722e320fa42cd87b04b5249b2d\System.Web.ni.dll
MOD - [2014/10/14 12:08:29 | 014,340,096 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\1f539baa94516139240877cb6afd72c2\PresentationFramework.ni.dll
MOD - [2014/10/14 12:08:19 | 012,435,968 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\1453d9e9a4989833ef3db4b22549ba1a\System.Windows.Forms.ni.dll
MOD - [2014/10/14 12:08:14 | 001,593,344 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\836e10dfd0811b303553216f5cb092ef\System.Drawing.ni.dll
MOD - [2014/10/14 12:08:10 | 005,467,648 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\d49908aa93a23c84847b1f8b1b667860\System.Xml.ni.dll
MOD - [2014/10/14 12:08:07 | 000,978,432 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\237d509a79aeef6e4635b09450d98f2a\System.Configuration.ni.dll
MOD - [2014/10/14 12:08:06 | 012,236,800 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\3d4f835b8078dacc8d5da623e2c3f0ee\PresentationCore.ni.dll
MOD - [2014/10/14 12:07:58 | 003,348,480 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\d97a5aa0eb7697aca7c6e90ae471af2b\WindowsBase.ni.dll
MOD - [2014/10/14 12:07:56 | 007,991,808 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System\908ba9e296e92b4e14bdc2437edac603\System.ni.dll
MOD - [2014/10/11 10:04:04 | 000,014,336 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\f473a3fb0073a13849f5206103f64a99\IAStorCommon.ni.dll
MOD - [2014/09/27 11:27:34 | 000,025,600 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\0483c93466914f3fbd5b44454b0c8a98\Accessibility.ni.dll
MOD - [2014/09/27 11:27:10 | 011,497,984 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\38bf604432e1a30c954b2ee40d6a2d1c\mscorlib.ni.dll
MOD - [2012/02/01 08:50:58 | 000,968,048 | ---- | M] () -- C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe
MOD - [2012/02/01 08:44:34 | 008,151,040 | ---- | M] () -- C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\QtGui4.dll
MOD - [2012/02/01 08:44:34 | 002,278,400 | ---- | M] () -- C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\QtCore4.dll
MOD - [2012/01/26 18:49:34 | 002,751,808 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe
MOD - [2011/04/22 08:13:00 | 000,004,096 | ---- | M] () -- C:\Program Files (x86)\NVIDIA Corporation\coprocmanager\detoured.dll
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - [2014/11/21 18:35:29 | 000,114,688 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\windows\SysNative\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV:64bit: - [2014/10/30 01:24:10 | 002,443,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe -- (ClickToRunSvc)
SRV:64bit: - [2014/09/04 04:09:02 | 000,603,424 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\mcafee\virusscan\mcods.exe -- (McODS)
SRV:64bit: - [2014/08/20 08:16:12 | 001,041,192 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe -- (mfecore)
SRV:64bit: - [2014/06/20 09:30:38 | 000,189,912 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Windows\SysNative\mfevtps.exe -- (mfevtp)
SRV:64bit: - [2014/06/20 09:23:12 | 000,219,752 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe -- (mfefire)
SRV:64bit: - [2014/04/25 17:34:42 | 000,178,528 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\mcafee\msc\McAPExe.exe -- (McAPExe)
SRV:64bit: - [2013/07/30 11:45:02 | 000,328,928 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe -- (MSK80Service)
SRV:64bit: - [2013/07/30 11:45:02 | 000,328,928 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe -- (McProxy)
SRV:64bit: - [2013/07/30 11:45:02 | 000,328,928 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe -- (mcpltsvc)
SRV:64bit: - [2013/07/30 11:45:02 | 000,328,928 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe -- (McNaiAnn)
SRV:64bit: - [2013/07/30 11:45:02 | 000,328,928 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe -- (McMPFSvc)
SRV:64bit: - [2013/07/30 11:45:02 | 000,328,928 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe -- (HomeNetSvc)
SRV:64bit: - [2013/05/26 21:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2012/05/25 15:58:32 | 000,199,304 | ---- | M] () [Auto | Running] -- C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe -- (McShield)
SRV:64bit: - [2011/09/15 15:41:28 | 001,518,352 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)
SRV:64bit: - [2011/09/15 15:28:06 | 000,340,240 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS)
SRV:64bit: - [2011/09/15 15:24:52 | 000,844,560 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)
SRV:64bit: - [2011/09/15 06:54:46 | 001,166,848 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe -- (AMPPALR3)
SRV:64bit: - [2011/09/08 05:42:28 | 000,305,152 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Program Files\IDT\WDM\stacsv64.exe -- (STacSV)
SRV:64bit: - [2011/06/03 09:51:38 | 000,134,928 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe -- (BTHSSecurityMgr)
SRV:64bit: - [2011/03/08 14:00:50 | 000,224,704 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- c:\Program Files\mcafee\msc\McAWFwk.exe -- (McAWFwk)
SRV:64bit: - [2011/01/27 15:28:20 | 000,249,936 | ---- | M] (McAfee, Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe -- (McOobeSv)
SRV:64bit: - [2010/11/29 12:00:56 | 000,149,504 | ---- | M] (Intel® Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost)
SRV:64bit: - [2010/09/22 15:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV:64bit: - [2009/07/13 17:39:31 | 000,045,568 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\windows\SysNative\rundll32.exe -- (51cdb72)
SRV:64bit: - [2009/03/03 02:42:58 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Program Files\IDT\WDM\AESTSr64.exe -- (AESTFilters)
SRV - [2014/12/14 12:52:15 | 000,523,504 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Hold Page\bin\utilHoldPage.exe -- (Util Hold Page)
SRV - [2014/12/14 12:47:36 | 000,523,504 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Hold Page\updateHoldPage.exe -- (Update Hold Page)
SRV - [2014/12/03 14:56:44 | 000,111,208 | ---- | M] (RaMMicHaeL) [Auto | Running] -- C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe -- (Unchecky)
SRV - [2014/12/03 10:06:08 | 000,081,088 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2014/11/20 10:13:26 | 001,684,944 | ---- | M] (PC Drivers HeadQuarters LP) [Auto | Running] -- C:\Program Files (x86)\Veloxum\iPTE\DriverSupportAOsvc.exe -- (DSAO)
SRV - [2014/03/20 14:49:18 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2014/03/11 22:36:06 | 000,247,968 | ---- | M] (Microsoft Corporation.) [On_Demand | Running] -- C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE -- (BBUpdate)
SRV - [2014/03/11 22:36:06 | 000,193,696 | ---- | M] (Microsoft Corporation.) [Auto | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.EXE -- (BBSvc)
SRV - [2013/09/11 20:21:54 | 000,105,144 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2012/02/16 09:49:44 | 001,695,040 | ---- | M] (SoftThinks SAS) [Auto | Running] -- C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe -- (SftService)
SRV - [2011/05/18 22:16:48 | 000,995,392 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe -- (Bluetooth OBEX Service)
SRV - [2011/05/18 22:16:46 | 001,335,360 | ---- | M] (Intel Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe -- (Bluetooth Media Service)
SRV - [2011/05/18 22:16:36 | 000,921,664 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe -- (Bluetooth Device Monitor)
SRV - [2011/04/22 08:13:00 | 002,009,704 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011/04/21 16:32:26 | 000,378,472 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2010/11/05 20:54:22 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
SRV - [2010/10/05 18:04:12 | 002,655,768 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2010/10/05 18:04:08 | 000,325,656 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe -- (LMS)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2014/12/12 07:25:20 | 000,048,784 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\{a16a1775-5ab3-4034-ac52-de0795db97f0}w64.sys -- ({a16a1775-5ab3-4034-ac52-de0795db97f0}w64)
DRV:64bit: - [2014/12/10 00:51:52 | 000,048,784 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\{078ad437-dc9f-4228-9edb-b3d1c0246ff8}w64.sys -- ({078ad437-dc9f-4228-9edb-b3d1c0246ff8}w64)
DRV:64bit: - [2014/12/03 05:53:14 | 000,048,776 | ---- | M] (StdLib) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\{507a9b68-2b48-4a22-b662-e674fb6a16f7}Gw64.sys -- ({507a9b68-2b48-4a22-b662-e674fb6a16f7}Gw64)
DRV:64bit: - [2014/08/20 08:06:14 | 000,096,592 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mfencrk.sys -- (mfencrk)
DRV:64bit: - [2014/08/20 08:05:28 | 000,445,512 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mfencbdc.sys -- (mfencbdc)
DRV:64bit: - [2014/06/20 09:38:22 | 000,072,128 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\cfwids.sys -- (cfwids)
DRV:64bit: - [2014/06/20 09:31:06 | 000,348,552 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mfewfpk.sys -- (mfewfpk)
DRV:64bit: - [2014/06/20 09:26:02 | 000,786,296 | ---- | M] (McAfee, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\mfehidk.sys -- (mfehidk)
DRV:64bit: - [2014/06/20 09:23:40 | 000,523,792 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mfefirek.sys -- (mfefirek)
DRV:64bit: - [2014/06/20 09:21:48 | 000,313,544 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mfeavfk.sys -- (mfeavfk)
DRV:64bit: - [2014/06/20 09:20:54 | 000,181,704 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\mfeapfk.sys -- (mfeapfk)
DRV:64bit: - [2013/09/23 12:49:22 | 000,197,704 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HipShieldK.sys -- (HipShieldK)
DRV:64bit: - [2012/02/29 22:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012/02/22 12:29:46 | 000,100,912 | ---- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mferkdet.sys -- (mferkdet)
DRV:64bit: - [2011/09/17 23:26:52 | 008,604,672 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETwNs64.sys -- (NETwNs64)
DRV:64bit: - [2011/09/15 06:48:24 | 000,299,008 | ---- | M] (Windows ® Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPALP)
DRV:64bit: - [2011/09/15 06:48:24 | 000,299,008 | ---- | M] (Windows ® Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPAL)
DRV:64bit: - [2011/09/08 05:42:28 | 000,535,040 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA)
DRV:64bit: - [2011/07/20 14:21:50 | 000,406,336 | ---- | M] (Texas Instruments Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tixhci.sys -- (tixhci)
DRV:64bit: - [2011/07/20 14:21:50 | 000,136,000 | ---- | M] (Texas Instruments Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tihub3.sys -- (tihub3)
DRV:64bit: - [2011/07/19 15:54:06 | 000,059,904 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iBtFltCoex.sys -- (iBtFltCoex)
DRV:64bit: - [2011/07/19 12:13:42 | 000,282,624 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btmhsf.sys -- (btmhsf)
DRV:64bit: - [2011/06/21 12:19:14 | 000,025,496 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus)
DRV:64bit: - [2011/06/21 12:19:12 | 000,034,200 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible)
DRV:64bit: - [2011/05/18 22:17:04 | 000,053,248 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btmaux.sys -- (btmaux)
DRV:64bit: - [2011/05/18 22:17:02 | 000,051,712 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\btmaud.sys -- (btmaudio)
DRV:64bit: - [2011/05/13 00:28:46 | 000,363,856 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Apfiltr.sys -- (ApfiltrService)
DRV:64bit: - [2011/04/22 08:13:00 | 000,025,960 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)
DRV:64bit: - [2011/04/10 11:51:06 | 012,223,936 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2011/03/10 22:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/10 22:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011/03/03 21:29:20 | 000,174,184 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2011/01/20 08:20:46 | 000,176,096 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CtClsFlt.sys -- (CtClsFlt)
DRV:64bit: - [2010/11/29 12:00:04 | 000,016,120 | ---- | M] (Intel® Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\TurboB.sys -- (TurboB)
DRV:64bit: - [2010/11/20 19:24:33 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/11/20 19:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/20 19:23:47 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2010/11/06 15:45:48 | 000,438,808 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2010/10/29 16:11:42 | 000,250,984 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV:64bit: - [2010/10/26 11:08:08 | 000,406,632 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2010/09/21 06:59:38 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:64bit: - [2009/07/13 17:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 17:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 17:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/07/13 16:35:32 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\serscan.sys -- (StillCam)
DRV:64bit: - [2009/06/10 12:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 12:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 12:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 12:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2006/11/01 01:51:00 | 000,151,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
DRV - [2009/07/13 17:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE:64bit: - HKLM\..\SearchScopes\{2F1E335A-858A-4BE9-8F6B-D0AF1D018B53}: "URL" = http://www.bing.com/...rc=IE-SearchBox
IE:64bit: - HKLM\..\SearchScopes\{DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77}: "URL" = http://Vosteran.com/...cr=374216352=
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{2F1E335A-858A-4BE9-8F6B-D0AF1D018B53}: "URL" = http://www.bing.com/...rc=IE-SearchBox
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default Download Directory = C:\Users\herminiojotiesr\Documents\Custom Office Templates
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IESR02
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "AutoConfigURL" = file://C:\Program Files (x86)\Hold Page\bin\Pac9064.js
 
 
========== FireFox ==========
 
FF:64bit: - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
FF - HKLM\Software\MozillaPlugins\@mcafee.com/MVT: C:\Program Files (x86)\McAfee\Supportability\MVT\NPMVTPlugin.dll (McAfee, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\herminiojotiesr\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\herminiojotiesr\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\[email protected]: C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension [2013/06/17 12:31:25 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{D19CA586-DD6C-4a0a-96F8-14644F340D60}: C:\Program Files (x86)\Common Files\McAfee\SystemCore [2014/07/23 02:15:05 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files\McAfee\MSK [2014/12/10 03:34:03 | 000,000,000 | ---D | M]
 
 
========== Chrome  ==========
 
CHR - default_search_provider:  ()
CHR - default_search_provider: search_url =
CHR - default_search_provider: suggest_url =
CHR - plugin: Error reading preferences file
CHR - Extension: No name found = C:\Users\herminiojotiesr\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_1\
CHR - Extension: No name found = C:\Users\herminiojotiesr\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_1\
CHR - Extension: No name found = C:\Users\herminiojotiesr\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_2\
CHR - Extension: No name found = C:\Users\herminiojotiesr\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgcfmnelakbbgmkdgkbengjoghnejgle\1.0.1_0\
 
O1 HOSTS File: ([2014/12/14 12:51:17 | 000,001,993 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 0.0.0.0 0.0.0.0 # fix for traceroute and netstat display anomaly
O1 - Hosts: 0.0.0.0 tracking.opencandy.com.s3.amazonaws.com
O1 - Hosts: 0.0.0.0 media.opencandy.com
O1 - Hosts: 0.0.0.0 cdn.opencandy.com
O1 - Hosts: 0.0.0.0 tracking.opencandy.com
O1 - Hosts: 0.0.0.0 api.opencandy.com
O1 - Hosts: 0.0.0.0 installer.betterinstaller.com
O1 - Hosts: 0.0.0.0 installer.filebulldog.com
O1 - Hosts: 0.0.0.0 d3oxtn1x3b8d7i.cloudfront.net
O1 - Hosts: 0.0.0.0 inno.bisrv.com
O1 - Hosts: 0.0.0.0 nsis.bisrv.com
O1 - Hosts: 0.0.0.0 cdn.file2desktop.com
O1 - Hosts: 0.0.0.0 cdn.goateastcach.us
O1 - Hosts: 0.0.0.0 cdn.guttastatdk.us
O1 - Hosts: 0.0.0.0 cdn.inskinmedia.com
O1 - Hosts: 0.0.0.0 cdn.insta.oibundles2.com
O1 - Hosts: 0.0.0.0 cdn.insta.playbryte.com
O1 - Hosts: 0.0.0.0 cdn.llogetfastcach.us
O1 - Hosts: 0.0.0.0 cdn.montiera.com
O1 - Hosts: 0.0.0.0 cdn.msdwnld.com
O1 - Hosts: 0.0.0.0 cdn.mypcbackup.com
O1 - Hosts: 0.0.0.0 cdn.ppdownload.com
O1 - Hosts: 0.0.0.0 cdn.riceateastcach.us
O1 - Hosts: 0.0.0.0 cdn.shyapotato.us
O1 - Hosts: 0.0.0.0 cdn.solimba.com
O1 - Hosts: 10 more lines...
O2:64bit: - BHO: (Lync Browser Helper) - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ochelper.dll (Microsoft Corporation)
O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\urlredir.dll (Microsoft Corporation)
O2:64bit: - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\grooveex.dll (Microsoft Corporation)
O2:64bit: - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
O2:64bit: - BHO: (Inbox Toolbar) - {D3D233D5-9F6D-436C-B6C7-E63F77503B30} - C:\Program Files (x86)\Inbox Toolbar\Inbox64.dll (Xacti, LLC)
O2 - BHO: (Hold Page 1.0.0.5) - {6c14185e-4de6-4a79-985b-19f23fd1e638} - C:\Program Files (x86)\Hold Page\HoldPageBHO.dll (Hold Page)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\office15\urlredir.dll (Microsoft Corporation)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (Inbox Toolbar) - {D3D233D5-9F6D-436C-B6C7-E63F77503B30} - C:\Program Files (x86)\Inbox Toolbar\Inbox.dll (Xacti, LLC)
O3:64bit: - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll (Microsoft Corporation.)
O3:64bit: - HKLM\..\Toolbar: (&Inbox Toolbar) - {D7E97865-918F-41E4-9CD0-25AB1C574CE8} - C:\Program Files (x86)\Inbox Toolbar\Inbox64.dll (Xacti, LLC)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (&Inbox Toolbar) - {D7E97865-918F-41E4-9CD0-25AB1C574CE8} - C:\Program Files (x86)\Inbox Toolbar\Inbox.dll (Xacti, LLC)
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (&Inbox Toolbar) - {D7E97865-918F-41E4-9CD0-25AB1C574CE8} - C:\Program Files (x86)\Inbox Toolbar\Inbox64.dll (Xacti, LLC)
O3 - HKCU\..\Toolbar\WebBrowser: (&Inbox Toolbar) - {D7E97865-918F-41E4-9CD0-25AB1C574CE8} - C:\Program Files (x86)\Inbox Toolbar\Inbox.dll (Xacti, LLC)
O4:64bit: - HKLM..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe (Alps Electric Co., Ltd.)
O4:64bit: - HKLM..\Run: [BTMTrayAgent] C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll (Intel Corporation)
O4:64bit: - HKLM..\Run: [DellStage] C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe ()
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [InstallerLauncher] "C:\Users\HERMIN~1\AppData\Local\Temp\GZ_INSTALL_0\setuplauncher.exe" /run:"C:\Users\HERMIN~1\AppData\Local\Temp\GZ_INSTALL_0\Installer.exe" File not found
O4:64bit: - HKLM..\Run: [IntelPAN] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel® Corporation)
O4:64bit: - HKLM..\Run: [IntelTBRunOnce] wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" File not found
O4:64bit: - HKLM..\Run: [NVHotkey] C:\windows\SysNative\nvHotkey.dll (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe (Dell Inc.)
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: [AccuWeatherWidget] C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe ()
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Dell Registration] C:\Program Files (x86)\System Registration\prodreg.exe (Dell, Inc.)
O4 - HKLM..\Run: [Dell Webcam Central] C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [InboxToolbar] C:\Program Files (x86)\Inbox Toolbar\Inbox.exe (Xacti, LLC)
O4 - HKLM..\Run: [mcpltui_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
O4 - HKLM..\Run: [mcui_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
O4 - HKCU..\Run: [Driver Support] C:\Program Files (x86)\Driver Support\DriverSupport.exe (PC Drivers Headquarters)
O4 - HKCU..\Run: [HP Deskjet 3520 series (NET)] C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe (Hewlett-Packard Co.)
O4 - HKCU..\Run: [Optimizer Pro] C:\Program Files (x86)\Optimizer Pro 3.11\OptProLauncher.exe (PC Utilities Software Limited)
O4 - HKCU..\RunOnce: [Adobe Speed Launcher] 1418590349 File not found
O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\windows\system32\Macromed\Flash\FlashUtil64_11_7_700_224_ActiveX.exe -update activex File not found
O4 - Startup: C:\Users\herminiojotiesr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk = C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE (Microsoft Corporation)
O8:64bit: - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll (Microsoft Corporation)
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\onbttnie.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\onbttnie.dll (Microsoft Corporation)
O9:64bit: - Extra Button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ochelper.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\ochelper.dll (Microsoft Corporation)
O9:64bit: - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\onbttnielinkednotes.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\onbttnielinkednotes.dll (Microsoft Corporation)
O9 - Extra Button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe (Hewlett-Packard)
O9 - Extra 'Tools' menuitem : HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe (Hewlett-Packard)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\office15\onbttnie.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\office15\onbttnie.dll (Microsoft Corporation)
O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\office15\onbttnielinkednotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\office15\onbttnielinkednotes.dll (Microsoft Corporation)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D4434115-4927-4D95-BE5B-8E1797F8E44A}: DhcpNameServer = 192.168.1.254
O18:64bit: - Protocol\Handler\cozi - No CLSID value found
O18:64bit: - Protocol\Handler\inbox {37540F19-DD4C-478B-B2DF-C19281BCAF27} - C:\Program Files (x86)\Inbox Toolbar\Inbox64.dll (Xacti, LLC)
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\osf - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\cozi {5356518D-FE9C-4E08-9C1F-1E872ECD367F} - C:\Program Files (x86)\Cozi Express\CoziProtocolHandler.dll (Cozi Group, Inc.)
O18 - Protocol\Handler\inbox {37540F19-DD4C-478B-B2DF-C19281BCAF27} - C:\Program Files (x86)\Inbox Toolbar\Inbox64.dll (Xacti, LLC)
O18 - Protocol\Handler\osf {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\office15\MSOSB.DLL (Microsoft Corporation)
O18:64bit: - Protocol\Filter\application/x-mfe-ipt {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
O18 - Protocol\Filter\application/x-mfe-ipt {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)
O20:64bit: - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2014/12/14 13:34:41 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\herminiojotiesr\Desktop\OTL.exe
[2014/12/14 13:10:09 | 000,000,000 | ---D | C] -- C:\Users\herminiojotiesr\AppData\Roaming\QuickScan
[2014/12/14 12:47:36 | 000,000,000 | ---D | C] -- C:\windows\SysNative\MRT
[2014/12/14 12:47:26 | 000,000,000 | ---D | C] -- C:\725005577af22948fcee7f
[2014/12/12 15:51:40 | 000,048,784 | ---- | C] (StdLib) -- C:\windows\SysNative\drivers\{a16a1775-5ab3-4034-ac52-de0795db97f0}w64.sys
[2014/12/10 03:20:56 | 000,048,784 | ---- | C] (StdLib) -- C:\windows\SysNative\drivers\{078ad437-dc9f-4228-9edb-b3d1c0246ff8}w64.sys
[2014/12/10 03:17:25 | 000,000,000 | ---D | C] -- C:\windows\SysNative\appraiser
[2014/12/03 15:03:17 | 000,048,776 | ---- | C] (StdLib) -- C:\windows\SysNative\drivers\{507a9b68-2b48-4a22-b662-e674fb6a16f7}Gw64.sys
[2014/12/03 15:02:06 | 000,000,000 | ---D | C] -- C:\Users\herminiojotiesr\Documents\Optimizer Pro
[2014/12/03 15:02:05 | 000,000,000 | ---D | C] -- C:\Users\herminiojotiesr\AppData\Roaming\Optimizer Pro
[2014/12/03 14:58:14 | 000,000,000 | ---D | C] -- C:\Users\herminiojotiesr\AppData\Local\IsolatedStorage
[2014/12/03 14:57:58 | 000,000,000 | -H-D | C] -- C:\ProgramData\{FA77A43D-F6ED-4924-87B5-517C061388C6}
[2014/12/03 14:57:09 | 000,000,000 | ---D | C] -- C:\Users\herminiojotiesr\AppData\Roaming\1H1Q1V0B1L1G1N1V0M1P1Q1L1T0D1P1E2Z
[2014/12/03 14:56:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Hold Page
[2014/12/03 14:56:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WSE_Vosteran
[2014/12/03 14:56:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2
[2014/12/03 14:56:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Optimizer Pro 3.11
[2014/12/03 14:56:49 | 000,000,000 | ---D | C] -- C:\Users\herminiojotiesr\AppData\Local\Programs
[2014/12/03 14:56:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Unchecky
[2014/12/03 14:56:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unchecky
[2014/12/03 14:56:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Unchecky
[2014/12/03 14:44:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Veloxum
[2014/12/03 14:43:40 | 000,000,000 | ---D | C] -- C:\ProgramData\UAB
[2014/12/03 14:43:36 | 000,000,000 | ---D | C] -- C:\Users\herminiojotiesr\AppData\Local\PC_Drivers_Headquarters
[2014/12/03 14:43:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Driver Support
[2014/12/03 14:43:21 | 000,000,000 | ---D | C] -- C:\Users\herminiojotiesr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Driver Support
[2014/12/03 14:42:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Driver Support
[2014/12/03 14:37:46 | 000,000,000 | ---D | C] -- C:\Users\herminiojotiesr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2014/12/03 14:37:00 | 000,000,000 | ---D | C] -- C:\Users\herminiojotiesr\AppData\Local\Google
[2014/12/03 14:34:17 | 000,000,000 | ---D | C] -- C:\Users\herminiojotiesr\AppData\Roaming\WSE_Vosteran
[2014/12/03 14:34:17 | 000,000,000 | ---D | C] -- C:\Users\herminiojotiesr\AppData\Local\WSE_Vosteran
[2014/11/30 10:56:40 | 000,000,000 | -HSD | C] -- C:\Users\herminiojotiesr\AppData\Local\EmieBrowserModeList
[2 C:\Users\herminiojotiesr\AppData\Local\*.tmp files -> C:\Users\herminiojotiesr\AppData\Local\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2014/12/14 13:34:41 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\herminiojotiesr\Desktop\OTL.exe
[2014/12/14 13:11:23 | 000,046,143 | ---- | M] () -- C:\ProgramData\1418591446.bdinstall.bin
[2014/12/14 13:10:23 | 000,045,724 | ---- | M] () -- C:\ProgramData\1418591410.bdinstall.bin
[2014/12/14 12:59:12 | 000,028,576 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014/12/14 12:59:12 | 000,028,576 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014/12/14 12:58:26 | 000,782,470 | ---- | M] () -- C:\windows\SysNative\PerfStringBackup.INI
[2014/12/14 12:58:26 | 000,662,634 | ---- | M] () -- C:\windows\SysNative\perfh009.dat
[2014/12/14 12:58:26 | 000,122,470 | ---- | M] () -- C:\windows\SysNative\perfc009.dat
[2014/12/14 12:57:04 | 000,000,318 | ---- | M] () -- C:\windows\tasks\WSE_Vosteran.job
[2014/12/14 12:57:03 | 000,000,130 | ---- | M] () -- C:\Users\herminiojotiesr\AppData\Roaming\WB.CFG
[2014/12/14 12:51:00 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
[2014/12/14 12:50:54 | 2073,595,903 | -HS- | M] () -- C:\hiberfil.sys
[2014/12/14 12:47:00 | 000,000,948 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-707686012-2047944002-608474964-1001UA1d00f4a6edc906a.job
[2014/12/14 12:47:00 | 000,000,948 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-707686012-2047944002-608474964-1001UA.job
[2014/12/13 14:47:00 | 000,000,896 | ---- | M] () -- C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-707686012-2047944002-608474964-1001Core.job
[2014/12/13 13:21:42 | 000,002,021 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2014/12/12 14:56:57 | 000,002,425 | ---- | M] () -- C:\Users\herminiojotiesr\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2014/12/12 14:56:57 | 000,002,423 | ---- | M] () -- C:\Users\herminiojotiesr\Desktop\Google Chrome.lnk
[2014/12/12 07:25:20 | 000,048,784 | ---- | M] (StdLib) -- C:\windows\SysNative\drivers\{a16a1775-5ab3-4034-ac52-de0795db97f0}w64.sys
[2014/12/10 03:20:02 | 000,000,258 | RHS- | M] () -- C:\ProgramData\ntuser.pol
[2014/12/10 00:51:52 | 000,048,784 | ---- | M] (StdLib) -- C:\windows\SysNative\drivers\{078ad437-dc9f-4228-9edb-b3d1c0246ff8}w64.sys
[2014/12/05 05:57:17 | 000,000,002 | ---- | M] () -- C:\Users\herminiojotiesr\AppData\Local\DSI.DAT
[2014/12/05 05:57:16 | 000,022,528 | ---- | M] () -- C:\Users\herminiojotiesr\AppData\Local\dsisetup1424468522.exe
[2014/12/03 14:56:54 | 000,001,101 | ---- | M] () -- C:\Users\herminiojotiesr\Desktop\Optimizer Pro.lnk
[2014/12/03 14:56:45 | 000,001,021 | ---- | M] () -- C:\Users\Public\Desktop\Unchecky.lnk
[2014/12/03 14:45:14 | 000,032,832 | ---- | M] () -- C:\windows\SysWow64\rnd_chunk.bin
[2014/12/03 05:53:14 | 000,048,776 | ---- | M] (StdLib) -- C:\windows\SysNative\drivers\{507a9b68-2b48-4a22-b662-e674fb6a16f7}Gw64.sys
[2014/11/27 14:31:36 | 000,327,096 | ---- | M] () -- C:\windows\SysNative\FNTCACHE.DAT
[2 C:\Users\herminiojotiesr\AppData\Local\*.tmp files -> C:\Users\herminiojotiesr\AppData\Local\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2014/12/14 13:11:23 | 000,046,143 | ---- | C] () -- C:\ProgramData\1418591446.bdinstall.bin
[2014/12/14 13:10:23 | 000,045,724 | ---- | C] () -- C:\ProgramData\1418591410.bdinstall.bin
[2014/12/10 03:20:02 | 000,000,258 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2014/12/05 05:57:17 | 000,000,002 | ---- | C] () -- C:\Users\herminiojotiesr\AppData\Local\DSI.DAT
[2014/12/05 05:57:16 | 000,022,528 | ---- | C] () -- C:\Users\herminiojotiesr\AppData\Local\dsisetup1424468522.exe
[2014/12/03 15:57:02 | 000,000,130 | ---- | C] () -- C:\Users\herminiojotiesr\AppData\Roaming\WB.CFG
[2014/12/03 14:56:54 | 000,001,101 | ---- | C] () -- C:\Users\herminiojotiesr\Desktop\Optimizer Pro.lnk
[2014/12/03 14:56:45 | 000,001,021 | ---- | C] () -- C:\Users\Public\Desktop\Unchecky.lnk
[2014/12/03 14:45:14 | 000,032,832 | ---- | C] () -- C:\windows\SysWow64\rnd_chunk.bin
[2014/12/03 14:42:35 | 000,000,948 | ---- | C] () -- C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-707686012-2047944002-608474964-1001UA1d00f4a6edc906a.job
[2014/12/03 14:37:46 | 000,002,425 | ---- | C] () -- C:\Users\herminiojotiesr\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2014/12/03 14:37:46 | 000,002,423 | ---- | C] () -- C:\Users\herminiojotiesr\Desktop\Google Chrome.lnk
[2014/12/03 14:37:00 | 000,000,948 | ---- | C] () -- C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-707686012-2047944002-608474964-1001UA.job
[2014/12/03 14:37:00 | 000,000,896 | ---- | C] () -- C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-707686012-2047944002-608474964-1001Core.job
[2014/12/03 14:34:31 | 000,000,318 | ---- | C] () -- C:\windows\tasks\WSE_Vosteran.job
[2013/08/13 11:11:40 | 000,005,243 | ---- | C] () -- C:\Users\herminiojotiesr\AppData\Roaming\UserTile.png
[2013/06/17 12:27:53 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini
[2013/06/17 08:41:51 | 000,103,832 | ---- | C] () -- C:\Users\herminiojotiesr\GoToAssistDownloadHelper.exe
[2012/11/17 11:21:49 | 000,000,363 | ---- | C] () -- C:\Users\herminiojotiesr\Control Panel - Shortcut.lnk
 
========== ZeroAccess Check ==========
 
[2009/07/13 20:55:00 | 000,000,227 | RHS- | M] () -- C:\windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2014/06/24 18:05:42 | 014,175,744 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2014/06/24 17:41:30 | 012,874,240 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 17:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 19:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 17:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
========== LOP Check ==========
 
[2014/12/03 14:57:09 | 000,000,000 | ---D | M] -- C:\Users\herminiojotiesr\AppData\Roaming\1H1Q1V0B1L1G1N1V0M1P1Q1L1T0D1P1E2Z
[2012/11/10 21:23:17 | 000,000,000 | ---D | M] -- C:\Users\herminiojotiesr\AppData\Roaming\Fingertapps
[2012/11/10 21:22:52 | 000,000,000 | ---D | M] -- C:\Users\herminiojotiesr\AppData\Roaming\Leadertech
[2014/12/03 15:02:05 | 000,000,000 | ---D | M] -- C:\Users\herminiojotiesr\AppData\Roaming\Optimizer Pro
[2014/07/15 12:03:33 | 000,000,000 | ---D | M] -- C:\Users\herminiojotiesr\AppData\Roaming\PCDr
[2014/12/14 13:10:09 | 000,000,000 | ---D | M] -- C:\Users\herminiojotiesr\AppData\Roaming\QuickScan
[2012/11/10 21:45:30 | 000,000,000 | ---D | M] -- C:\Users\herminiojotiesr\AppData\Roaming\Windows Live Writer
[2014/12/03 14:56:56 | 000,000,000 | ---D | M] -- C:\Users\herminiojotiesr\AppData\Roaming\WSE_Vosteran
 
========== Purity Check ==========
 
 

< End of report >

 

OTL Extras logfile created on: 12/14/2014 1:35:39 PM - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\herminiojotiesr\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.17501)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
 
7.91 Gb Total Physical Memory | 4.67 Gb Available Physical Memory | 59.06% Memory free
15.81 Gb Paging File | 11.93 Gb Available in Paging File | 75.44% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 911.88 Gb Total Space | 858.85 Gb Free Space | 94.18% Space Free | Partition Type: NTFS
 
Computer Name: HERMSCOMPUTER | User Name: herminiojotiesr | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01C47126-FA15-479D-B82C-09CDE114293C}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{1A9C7A78-919E-4F4B-840E-19EBD7CC8D3E}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office 15\root\office15\outlook.exe |
"{2DFC2068-FC26-4AB0-B8F0-A2A7C12A0816}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{2EA03EE5-CA88-4E88-B5F2-70DEB3C6DE7B}" = rport=137 | protocol=17 | dir=out | app=system |
"{3E4090FF-5208-4172-98EE-76A79C098625}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | [email protected],-28539 |
"{4115C665-6A2E-42C9-9644-E5C4FB005D3D}" = lport=5353 | protocol=17 | dir=in | app=c:\users\herminiojotiesr\appdata\local\google\chrome\application\chrome.exe |
"{47388CDF-8637-4752-B8DB-8579212AB1A7}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{4A916D49-9F79-4C73-BB85-08E0F6A6A9E5}" = rport=139 | protocol=6 | dir=out | app=system |
"{5E066556-4EAC-45E8-AE94-2F0EF9B87F58}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{60433629-C7AD-42FF-9748-8EE8D7FFF83F}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{60C865A3-B432-41F9-BFB4-F1384C9E2EEB}" = lport=139 | protocol=6 | dir=in | app=system |
"{6A52B3D9-1158-4366-92DB-6FC60BB7557B}" = lport=445 | protocol=6 | dir=in | app=system |
"{730DAA40-68FB-4575-BB8F-ADFF32BC720B}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{97CC31B1-0531-4336-AB45-737BD9A4A9DB}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{9B36DBFF-67BD-4467-BAF3-E5E2BA2CB285}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{9C55D9E6-8896-42E2-B25E-561466DDFC26}" = lport=137 | protocol=17 | dir=in | app=system |
"{A1956ABB-CCBE-432E-B65A-A93AE0C0DDAB}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{B3ED19D4-FC3E-4DEE-888A-7BCEFC838748}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{BF8B4AFD-747B-49CE-97E6-FF344C2BA448}" = rport=10243 | protocol=6 | dir=out | app=system |
"{C05FA03A-E40E-454B-B385-41BBE10E6280}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{C5E4CD82-5D1F-45A5-812A-3211F6427537}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{C5EE58D3-C77D-4710-9DEC-98BE232F9B24}" = lport=2869 | protocol=6 | dir=in | app=system |
"{CB09B7FB-39E6-46AF-8E72-90678E83C9FD}" = lport=138 | protocol=17 | dir=in | app=system |
"{D325A456-3AB4-4550-9569-D239F4DF28EF}" = rport=138 | protocol=17 | dir=out | app=system |
"{D9B1C499-3068-4FDA-B318-0E763AAEBD57}" = lport=10243 | protocol=6 | dir=in | app=system |
"{E7096BBD-84A8-4C5B-A737-450E351D88E6}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{EB71FCFC-4E5F-4B81-84AE-2382EEF82758}" = rport=445 | protocol=6 | dir=out | app=system |
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{018ED7BE-3DFE-413E-8163-8EA127EB6752}" = dir=in | app=c:\program files\hp\hp deskjet 3520 series\bin\hpnetworkcommunicator.exe |
"{03B4D3C8-5A53-4097-A8F5-8C6FD0D272CA}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{079439A4-3B89-4A9F-9CC8-6EE2CCFD13FC}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{0D9D8BEB-4EB5-4ED5-A7A1-3465E30C3B94}" = protocol=6 | dir=in | app=c:\program files\common files\mcafee\platform\mcsvchost\mcsvhost.exe |
"{0F61FCB5-F26B-41AB-8BE0-98611AB8C441}" = dir=in | app=c:\program files\intel\wifi\bin\pandhcpdns.exe |
"{0FC2480E-663C-4691-A7D5-FEE07BA67304}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{15B820B8-9E93-42A4-8183-65DF7C7CAB3B}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{1C48142D-2859-4928-A426-20A8DA6B2370}" = protocol=17 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe |
"{32F98F14-32EF-42D3-BAD0-A9EC83CB193C}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{33D663D7-F805-4274-B1CC-BAA7E6BE9174}" = dir=in | app=c:\program files (x86)\dell\videostage\videostage.exe |
"{3554FED1-9A30-4706-8A3C-C792E8710497}" = protocol=17 | dir=in | app=c:\program files\common files\mcafee\platform\mcsvchost\mcsvhost.exe |
"{36877C61-8002-461A-96B2-D4EB20A897D0}" = dir=in | app=c:\program files\dell stage\musicstage\musicstageengine.exe |
"{3F910D62-1BD4-443B-8FBA-E7988B54CDA4}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{52C201A1-931B-43A1-A03B-CCF7B94E9186}" = dir=in | app=c:\program files\hp\hp deskjet 3520 series\bin\devicesetup.exe |
"{5C607726-2B06-4C93-9E01-CA0ED821BBEE}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{602BAA64-C092-4EED-870D-798D7497571E}" = protocol=6 | dir=in | app=c:\program files (x86)\hold page\bin\holdpage.brt.helper.exe |
"{66CE88AB-9A37-4953-8D96-55BB97695505}" = dir=in | app=c:\program files (x86)\intel corporation\intel widi\widiapp.exe |
"{67376F3F-62ED-441D-BF80-8C01C4EED9CF}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{7047B13D-F5DE-46F0-BFA2-B2CAB2CFABDF}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{731E1A10-BAE3-4566-A813-D6D6552E6333}" = dir=in | app=c:\users\herminiojotiesr\appdata\local\microsoft\skydrive\skydrive.exe |
"{755C0BB1-CE24-4D4A-BC23-E28457736DFA}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{769D0591-3E77-4BE6-BDD5-A66734FF9EFB}" = protocol=6 | dir=in | app=c:\program files\common files\mcafee\mcsvchost\mcsvhost.exe |
"{7BAD1DEF-9EC5-47DE-816B-12EB2F1196B1}" = protocol=6 | dir=out | app=system |
"{807E0C63-2762-4939-B695-C7FF12372318}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{8DCB1EA3-2660-497B-A154-E8CBCA217AE6}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{916D6BE0-B2E4-435D-B891-9512D1F9CA3D}" = dir=in | app=c:\program files\dell stage\dell stage\accuweather\accuweather.exe |
"{AB93A606-9DBE-4FF3-A100-158530640FA2}" = protocol=1 | dir=out | [email protected],-28544 |
"{BD22F027-539F-4BA2-896D-17BF4165C363}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{BEB6443E-8FD8-451D-B724-9E8A249F2B28}" = dir=in | app=c:\program files\dell stage\dell stage\stage_primary.exe |
"{C27121A7-0222-4EA9-A37E-65B53926D473}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{C34FD612-A6CA-47A8-923D-9E64D3E2F8E4}" = protocol=1 | dir=in | [email protected],-28543 |
"{CB0BA19D-D544-4180-BB2F-A3FAA4127080}" = dir=in | app=c:\program files (x86)\windows live\mesh\moe.exe |
"{D9E59EA4-D60C-496E-891F-E017B5898317}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{DF24CBB8-293D-44A9-9989-C807FE5D2188}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{E08C366B-13C3-4F79-9840-3CB051495F65}" = protocol=17 | dir=in | app=c:\program files (x86)\hold page\bin\holdpage.brt.helper.exe |
"{E79BB7A7-C7EF-4B9D-AFFE-BFE0AC30D647}" = protocol=58 | dir=out | [email protected],-28546 |
"{E8604C97-5938-4DC4-AE1D-E399363838A2}" = protocol=58 | dir=in | [email protected],-28545 |
"{EBBF4C56-9C5D-43EB-A8C6-BDA6D245BC9A}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
"{28EF7372-9087-4AC3-9B9F-D9751FCDF830}" = Intel® Wireless Display
"{295AEB79-B53A-4F1B-860F-7800BB7E3681}" = Intel® PROSet/Wireless WiFi Software
"{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources
"{7CE8BE79-ABC3-4B2C-9543-28ED2B0A9EA8}" = Intel® PROSet/Wireless Software for Bluetooth® Technology
"{7DEBE4EB-6B40-3766-BB35-5CBBC385DA37}" = Microsoft .NET Framework 4.5.1
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources
"{87CF757E-C1F1-4D22-865C-00C6950B5258}" = Quickset64
"{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}" = Dell Edoc Viewer
"{90150000-008F-0000-1000-0000000FF1CE}" = Office 15 Click-to-Run Licensing Component
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.1
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = Dell Touchpad
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Driver 268.30
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 268.30
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 268.30
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus 1.0.21
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD Audio Driver 1.2.22.1
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}" = Intel® Turbo Boost Technology Monitor 2.0
"{D07A61E5-A59C-433C-BCBD-22025FA2287B}" = Windows Live Language Selector
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{E80963EC-EED7-411A-8AC0-149EC57FB0F9}" = HP Deskjet 3520 series Basic Device Software
"Hold Page" = Hold Page
"HomeBusinessRetail - en-us" = Microsoft Office Home and Business 2013 - en-us
"PC-Doctor for Windows" = My Dell
"ProInst" = Intel PROSet Wireless
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0ED7EE95-6A97-47AA-AD73-152C08A15B04}" = Dell DataSafe Local Backup
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{2A0F2CC5-3065-492C-8380-B03AA7106B1A}" = Dell Product Registration
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{3365E735-48A6-4194-9988-CE59AC5AE503}" = Bing Bar
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{3BD7DD08-991B-4A2F-A165-614ED14EAADD}" = Dell MusicStage
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel® Rapid Storage Technology
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{612AD33D-9824-4E87-8396-92374E91C4BB}_is1" = Inbox Toolbar
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel® Management Engine Components
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{781A93CD-1608-427D-B7F0-D05C07795B25}" = Intel® WiDi
"{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}" = Dell Getting Started Guide
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{820B6609-4C97-3A2B-B644-573B06A0F0CC}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{90150000-008C-0000-0000-0000000FF1CE}" = Office 15 Click-to-Run Extensibility Component
"{90150000-008C-0409-0000-0000000FF1CE}" = Office 15 Click-to-Run Localization Component
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A8B88634-7F90-402F-B66A-86429755F6A5}" = eBay
"{A9668246-FB70-4103-A1E3-66C9BC2EFB49}" = Dell DataSafe Local Backup - Support Software
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AB2FDE4F-6BED-4E9E-B676-3DCCEBB1FBFE}" = Dell Home Systems Service Agreement
"{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" = Adobe Reader X (10.1.13) MUI
"{AEEDCEB7-00B8-4BE1-B492-AB04803D5F1E}" = HP Deskjet 3520 series Setup Guide
"{B1EB7FFF-6E44-43D8-869D-B78E44CD3E0F}" = TI USB3 Host Driver
"{C16A92EF-017B-4839-9C75-FBADB5A1FA27}" = TrustedID
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}" = Dell VideoStage
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio
"{E4335E82-17B3-460F-9E70-39D9BC269DB3}" = Dell PhotoStage
"{E8C8B9FA-1C5E-4D3E-8936-AC3A17888B3C}" = Driver Support Active Optimization
"{EA1F3D6C-A6F5-4CDC-B0D3-9C56C06B4D29}" = Cozi
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel® Processor Graphics
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel® Control Center
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FE182796-F6BA-486A-8590-89B7E8D1D60F}" = Dell Stage
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Advanced Audio FX Engine" = Advanced Audio FX Engine
"Coupon Printer for Windows5.0.0.0" = Coupon Printer for Windows
"Dell Webcam Central" = Dell Webcam Central
"HP Photo Creations" = HP Photo Creations
"InstallShield_{B1EB7FFF-6E44-43D8-869D-B78E44CD3E0F}" = TI USB 3.0 Host Controller Driver
"InstallShield_{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}" = Dell VideoStage
"McAfee Virtual Technician" = McAfee Virtual Technician
"MSC" = McAfee SecurityCenter
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"Optimizer Pro v3.2_is1" = Optimizer Pro v3.2
"ProInst" = Intel PROSet Wireless
"Unchecky" = Unchecky v0.3.4
"WinLiveSuite" = Windows Live Essentials
"WSE_Vosteran" = WSE_Vosteran
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"DriverSupport" = Driver Support
"Google Chrome" = Google Chrome
"Google Chrome Packages" = Google Chrome Packages
"SkyDriveSetup.exe" = Microsoft SkyDrive
"WSE_Vosteran" = WSE_Vosteran
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 8/21/2014 3:40:55 PM | Computer Name = hermscomputer | Source = WinMgmt | ID = 10
Description =
 
Error - 8/21/2014 3:44:26 PM | Computer Name = hermscomputer | Source = McLogEvent | ID = 5022
Description = MCSCAN32 Engine Initialisation failed.  Engine returned error : 1
 
Error - 8/25/2014 12:59:44 PM | Computer Name = hermscomputer | Source = WinMgmt | ID = 10
Description =
 
Error - 8/25/2014 1:02:04 PM | Computer Name = hermscomputer | Source = McLogEvent | ID = 5022
Description = MCSCAN32 Engine Initialisation failed.  Engine returned error : 1
 
Error - 8/25/2014 10:40:25 PM | Computer Name = hermscomputer | Source = WinMgmt | ID = 10
Description =
 
Error - 8/28/2014 12:57:26 PM | Computer Name = hermscomputer | Source = WinMgmt | ID = 10
Description =
 
Error - 8/29/2014 3:50:38 AM | Computer Name = hermscomputer | Source = WinMgmt | ID = 10
Description =
 
Error - 8/29/2014 3:53:20 AM | Computer Name = hermscomputer | Source = McLogEvent | ID = 5022
Description = MCSCAN32 Engine Initialisation failed.  Engine returned error : 1
 
Error - 8/29/2014 4:04:29 AM | Computer Name = hermscomputer | Source = WinMgmt | ID = 10
Description =
 
Error - 8/29/2014 4:07:57 AM | Computer Name = hermscomputer | Source = McLogEvent | ID = 5022
Description = MCSCAN32 Engine Initialisation failed.  Engine returned error : 1
 
[ System Events ]
Error - 9/21/2014 12:50:49 AM | Computer Name = hermscomputer | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installation Failure: Windows failed to install the following update
 with error 0x8007045b: Cumulative Security Update for Internet Explorer 11 for
Windows 7 for x64-based Systems (KB2977629).
 
Error - 9/21/2014 12:50:56 AM | Computer Name = hermscomputer | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installation Failure: Windows failed to install the following update
 with error 0x80070643: Security Update for Microsoft .NET Framework 4.5, 4.5.1
and 4.5.2 on Windows 7, Vista, Server 2008, Server 2008 R2 x64 (KB2972216).
 
Error - 9/21/2014 12:50:56 AM | Computer Name = hermscomputer | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installation Failure: Windows failed to install the following update
 with error 0x8007045b: Update for Windows 7 for x64-based Systems (KB2985461).
 
Error - 9/21/2014 12:50:56 AM | Computer Name = hermscomputer | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installation Failure: Windows failed to install the following update
 with error 0x8007045b: Security Update for Microsoft .NET Framework 3.5.1 on Windows
 7 and Windows Server 2008 R2 SP1 for x64-based Systems (KB2894844).
 
Error - 9/27/2014 2:05:03 PM | Computer Name = hermscomputer | Source = Service Control Manager | ID = 7043
Description = The Windows Update service did not shut down properly after receiving
 a preshutdown control.
 
Error - 9/27/2014 2:05:52 PM | Computer Name = hermscomputer | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installation Failure: Windows failed to install the following update
 with error 0x80070013: Security Update for Microsoft .NET Framework 3.5.1 on Windows
 7 and Windows Server 2008 R2 SP1 for x64-based Systems (KB2972211).
 
Error - 9/27/2014 2:05:52 PM | Computer Name = hermscomputer | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installation Failure: Windows failed to install the following update
 with error 0x80070013: Security Update for Microsoft .NET Framework 3.5.1 on Windows
 7 and Windows Server 2008 R2 SP1 for x64-based Systems (KB2972211).
 
Error - 9/27/2014 2:05:52 PM | Computer Name = hermscomputer | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installation Failure: Windows failed to install the following update
 with error 0x80070013: Security Update for Microsoft .NET Framework 3.5.1 on Windows
 7 and Windows Server 2008 R2 SP1 for x64-based Systems (KB2972211).
 
Error - 9/27/2014 2:05:52 PM | Computer Name = hermscomputer | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installation Failure: Windows failed to install the following update
 with error 0x80070013: Security Update for Microsoft .NET Framework 3.5.1 on Windows
 7 and Windows Server 2008 R2 SP1 for x64-based Systems (KB2972211).
 
Error - 9/27/2014 2:05:52 PM | Computer Name = hermscomputer | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installation Failure: Windows failed to install the following update
 with error 0x80070013: Security Update for Microsoft .NET Framework 3.5.1 on Windows
 7 and Windows Server 2008 R2 SP1 for x64-based Systems (KB2972211).
 
 
< End of report >

[Advertisements]

Hi! My name is zep516 and Welcome to Geekstogo!
I'll do the best I can to resolve your computer issue
Please make sure to carefully read any instruction that I give you. If you're not sure, or if something unexpected happens, don't continue Stop and ask! Never be afraid to ask questions!

First
Please remove these programs: Go to > Start > Control panel > programs an Features in the list find these programs and remove them. If it does not remove try the next one and keep following my instructions.
1. WSE_Vosteran
2. Optimizer Pro v3.2_is1
3. Hold Page

We need to do a fix using OTL.

• Double click on the to open the program. On Vista/Win7/Win8 right click select Run As Administrator to start the program. If prompted by UAC, please allow it.
• Under the Custom Scans/Fixes box at the bottom, paste in the following
  
  

  :COMMANDS
  [CREATERESTOREPOINT]
  
  :OTL
  IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
  IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
  IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
  IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  O2 - BHO: (Hold Page 1.0.0.5) - {6c14185e-4de6-4a79-985b-19f23fd1e638} - C:\Program Files (x86)\Hold Page\HoldPageBHO.dll (Hold Page)
  O4:64bit: - HKLM..\Run: [InstallerLauncher] "C:\Users\HERMIN~1\AppData\Local\Temp\GZ_INSTALL_0\setuplauncher.exe" /run:"C:\Users\HERMIN~1\AppData\Local\Temp\GZ_INSTALL_0\Installer.exe" File not found
  O4:64bit: - HKLM..\Run: [IntelTBRunOnce] wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" File not found
  O4 - HKCU..\Run: [Optimizer Pro] C:\Program Files (x86)\Optimizer Pro 3.11\OptProLauncher.exe (PC Utilities Software Limited)
  O4 - HKCU..\RunOnce: [Adobe Speed Launcher] 1418590349 File not found
  O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\windows\system32\Macromed\Flash\FlashUtil64_11_7_700_224_ActiveX.exe -update activex File not found
  O1364bit: - gopher Prefix: missing
  O13 - gopher Prefix: missing
  O18:64bit: - Protocol\Handler\cozi - No CLSID value found
  O18:64bit: - Protocol\Handler\livecall - No CLSID value found
  O18:64bit: - Protocol\Handler\msnim - No CLSID value found
  O18:64bit: - Protocol\Handler\osf - No CLSID value found
  O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
  O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
  [2014/12/03 15:02:06 | 000,000,000 | ---D | C] -- C:\Users\herminiojotiesr\Documents\Optimizer Pro
  [2014/12/03 15:02:05 | 000,000,000 | ---D | C] -- C:\Users\herminiojotiesr\AppData\Roaming\Optimizer Pro
  [2014/12/03 14:58:14 | 000,000,000 | ---D | C] -- C:\Users\herminiojotiesr\AppData\Local\IsolatedStorage
  [2014/12/03 14:57:58 | 000,000,000 | -H-D | C] -- C:\ProgramData\{FA77A43D-F6ED-4924-87B5-517C061388C6}
  [2014/12/03 14:57:09 | 000,000,000 | ---D | C] -- C:\Users\herminiojotiesr\AppData\Roaming\1H1Q1V0B1L1G1N1V0M1P1Q1L1T0D1P1E2Z
  [2014/12/03 14:56:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Hold Page
  [2014/12/03 14:56:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WSE_Vosteran
  [2014/12/03 14:56:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2
  [2014/12/03 14:56:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Optimizer Pro 3.11
  [2014/12/03 14:34:17 | 000,000,000 | ---D | C] -- C:\Users\herminiojotiesr\AppData\Roaming\WSE_Vosteran
  [2014/12/03 14:34:17 | 000,000,000 | ---D | C] -- C:\Users\herminiojotiesr\AppData\Local\WSE_Vosteran
  [2 C:\Users\herminiojotiesr\AppData\Local\*.tmp files -> C:\Users\herminiojotiesr\AppData\Local\*.tmp -> ]
  [2014/12/14 13:11:23 | 000,046,143 | ---- | M] () -- C:\ProgramData\1418591446.bdinstall.bin
  [2014/12/14 13:10:23 | 000,045,724 | ---- | M] () -- C:\ProgramData\1418591410.bdinstall.bin
  [2014/12/14 12:57:04 | 000,000,318 | ---- | M] () -- C:\windows\tasks\WSE_Vosteran.job
  [2014/12/03 14:56:54 | 000,001,101 | ---- | M] () -- C:\Users\herminiojotiesr\Desktop\Optimizer Pro.lnk
  [2014/12/03 14:56:54 | 000,001,101 | ---- | C] () -- C:\Users\herminiojotiesr\Desktop\Optimizer Pro.lnk
  [2014/12/03 14:34:31 | 000,000,318 | ---- | C] () -- C:\windows\tasks\WSE_Vosteran.job
  
  :Files
  ipconfig /flushdns /c
  C:\Program Files (x86)\Hold Page\bin\utilHoldPage.exe
  C:\Program Files (x86)\Hold Page\updateHoldPage.exe
  C:\Program Files (x86)\Hold Page\bin\HoldPage.expext.exe
  C:\Program Files (x86)\Hold Page\bin\HoldPage.BOASHelper.exe
  C:\Program Files (x86)\Hold Page\bin\HoldPage.BOAS.exe
  C:\Program Files (x86)\Hold Page\bin\HoldPage.BOASPRT.exe
  C:\Program Files (x86)\Hold Page\bin\HoldPage.BRT.Helper.exe
  C:\Program Files (x86)\Hold Page\HoldPageBHO.dll (Hold Page)
  C:\Users\herminiojotiesr\AppData\Roaming\WSE_Vosteran
  C:\Users\herminiojotiesr\AppData\Roaming\Optimizer Pro
  
  :Commands
  [emptytemp]
  [resethosts]
  

• Make sure all other windows are closed.
• Click the Run Fix button at the top
• Let the program run uninterrupted. The computer should reboot when the scan is done. If not, please reboot the computer.
• Post the log that is found in C:\_OTL\Moved Files in your next reply.
• Open OTL again and click the Quick Scan button.
• Next
  
  Please download AdwCleaner by Xplode onto your Desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click the Scan button and wait for the process to complete.
  • Click the Report button and the report will open in Notepad.
  • NOTE: If you get an error message, it means that nothing was found. Exit from AdwCleaner.
  • Click on the Clean button follow the prompts.
  • A log file will automatically open after the scan has finished and the PC has rebooted.
  • Please post the content of that log file with your next answer.
  • You can find the log file at C:\AdwCleaner
  Next
  
  Please download Junkware Removal Tool to your Desktop.
  
  Please close your security software to avoid potential conflicts. See Here how to disable you security protection (Anti Virus)
  Run the tool by double-clicking it. If you are using Windows Vista or 7, right-mouse click it and select Run as administrator.
  The tool will open and start scanning your system.
  Please be patient as this can take a while to complete, depending on your system's specifications.
  On completion, a log (JRT.txt) is saved to your Desktop and will automatically open.
  Please post the contents of JRT.txt into your reply.
  
  In your next reply post:
  • The OTL Fix log, that log should pop up after you run the fix.
  • The AdwCleaner [SO].txt log after running the clean option.
  • The JRT.txt log
  Thanks
  Joe

[zep516]

Hi! My name is zep516 and Welcome to Geekstogo!
I'll do the best I can to resolve your computer issue
Please make sure to carefully read any instruction that I give you. If you're not sure, or if something unexpected happens, don't continue Stop and ask! Never be afraid to ask questions!

First
Please remove these programs: Go to > Start > Control panel > programs an Features in the list find these programs and remove them. If it does not remove try the next one and keep following my instructions.
1. WSE_Vosteran
2. Optimizer Pro v3.2_is1
3. Hold Page

We need to do a fix using OTL.

• Double click on the to open the program. On Vista/Win7/Win8 right click select Run As Administrator to start the program. If prompted by UAC, please allow it.
• Under the Custom Scans/Fixes box at the bottom, paste in the following
  
  

  :COMMANDS
  [CREATERESTOREPOINT]
  
  :OTL
  IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
  IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
  IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
  IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
  O2 - BHO: (Hold Page 1.0.0.5) - {6c14185e-4de6-4a79-985b-19f23fd1e638} - C:\Program Files (x86)\Hold Page\HoldPageBHO.dll (Hold Page)
  O4:64bit: - HKLM..\Run: [InstallerLauncher] "C:\Users\HERMIN~1\AppData\Local\Temp\GZ_INSTALL_0\setuplauncher.exe" /run:"C:\Users\HERMIN~1\AppData\Local\Temp\GZ_INSTALL_0\Installer.exe" File not found
  O4:64bit: - HKLM..\Run: [IntelTBRunOnce] wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" File not found
  O4 - HKCU..\Run: [Optimizer Pro] C:\Program Files (x86)\Optimizer Pro 3.11\OptProLauncher.exe (PC Utilities Software Limited)
  O4 - HKCU..\RunOnce: [Adobe Speed Launcher] 1418590349 File not found
  O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\windows\system32\Macromed\Flash\FlashUtil64_11_7_700_224_ActiveX.exe -update activex File not found
  O1364bit: - gopher Prefix: missing
  O13 - gopher Prefix: missing
  O18:64bit: - Protocol\Handler\cozi - No CLSID value found
  O18:64bit: - Protocol\Handler\livecall - No CLSID value found
  O18:64bit: - Protocol\Handler\msnim - No CLSID value found
  O18:64bit: - Protocol\Handler\osf - No CLSID value found
  O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
  O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
  [2014/12/03 15:02:06 | 000,000,000 | ---D | C] -- C:\Users\herminiojotiesr\Documents\Optimizer Pro
  [2014/12/03 15:02:05 | 000,000,000 | ---D | C] -- C:\Users\herminiojotiesr\AppData\Roaming\Optimizer Pro
  [2014/12/03 14:58:14 | 000,000,000 | ---D | C] -- C:\Users\herminiojotiesr\AppData\Local\IsolatedStorage
  [2014/12/03 14:57:58 | 000,000,000 | -H-D | C] -- C:\ProgramData\{FA77A43D-F6ED-4924-87B5-517C061388C6}
  [2014/12/03 14:57:09 | 000,000,000 | ---D | C] -- C:\Users\herminiojotiesr\AppData\Roaming\1H1Q1V0B1L1G1N1V0M1P1Q1L1T0D1P1E2Z
  [2014/12/03 14:56:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Hold Page
  [2014/12/03 14:56:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WSE_Vosteran
  [2014/12/03 14:56:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2
  [2014/12/03 14:56:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Optimizer Pro 3.11
  [2014/12/03 14:34:17 | 000,000,000 | ---D | C] -- C:\Users\herminiojotiesr\AppData\Roaming\WSE_Vosteran
  [2014/12/03 14:34:17 | 000,000,000 | ---D | C] -- C:\Users\herminiojotiesr\AppData\Local\WSE_Vosteran
  [2 C:\Users\herminiojotiesr\AppData\Local\*.tmp files -> C:\Users\herminiojotiesr\AppData\Local\*.tmp -> ]
  [2014/12/14 13:11:23 | 000,046,143 | ---- | M] () -- C:\ProgramData\1418591446.bdinstall.bin
  [2014/12/14 13:10:23 | 000,045,724 | ---- | M] () -- C:\ProgramData\1418591410.bdinstall.bin
  [2014/12/14 12:57:04 | 000,000,318 | ---- | M] () -- C:\windows\tasks\WSE_Vosteran.job
  [2014/12/03 14:56:54 | 000,001,101 | ---- | M] () -- C:\Users\herminiojotiesr\Desktop\Optimizer Pro.lnk
  [2014/12/03 14:56:54 | 000,001,101 | ---- | C] () -- C:\Users\herminiojotiesr\Desktop\Optimizer Pro.lnk
  [2014/12/03 14:34:31 | 000,000,318 | ---- | C] () -- C:\windows\tasks\WSE_Vosteran.job
  
  :Files
  ipconfig /flushdns /c
  C:\Program Files (x86)\Hold Page\bin\utilHoldPage.exe
  C:\Program Files (x86)\Hold Page\updateHoldPage.exe
  C:\Program Files (x86)\Hold Page\bin\HoldPage.expext.exe
  C:\Program Files (x86)\Hold Page\bin\HoldPage.BOASHelper.exe
  C:\Program Files (x86)\Hold Page\bin\HoldPage.BOAS.exe
  C:\Program Files (x86)\Hold Page\bin\HoldPage.BOASPRT.exe
  C:\Program Files (x86)\Hold Page\bin\HoldPage.BRT.Helper.exe
  C:\Program Files (x86)\Hold Page\HoldPageBHO.dll (Hold Page)
  C:\Users\herminiojotiesr\AppData\Roaming\WSE_Vosteran
  C:\Users\herminiojotiesr\AppData\Roaming\Optimizer Pro
  
  :Commands
  [emptytemp]
  [resethosts]
  

• Make sure all other windows are closed.
• Click the Run Fix button at the top
• Let the program run uninterrupted. The computer should reboot when the scan is done. If not, please reboot the computer.
• Post the log that is found in C:\_OTL\Moved Files in your next reply.
• Open OTL again and click the Quick Scan button.
• Next
  
  Please download AdwCleaner by Xplode onto your Desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click the Scan button and wait for the process to complete.
  • Click the Report button and the report will open in Notepad.
  • NOTE: If you get an error message, it means that nothing was found. Exit from AdwCleaner.
  • Click on the Clean button follow the prompts.
  • A log file will automatically open after the scan has finished and the PC has rebooted.
  • Please post the content of that log file with your next answer.
  • You can find the log file at C:\AdwCleaner
  Next
  
  Please download Junkware Removal Tool to your Desktop.
  
  Please close your security software to avoid potential conflicts. See Here how to disable you security protection (Anti Virus)
  Run the tool by double-clicking it. If you are using Windows Vista or 7, right-mouse click it and select Run as administrator.
  The tool will open and start scanning your system.
  Please be patient as this can take a while to complete, depending on your system's specifications.
  On completion, a log (JRT.txt) is saved to your Desktop and will automatically open.
  Please post the contents of JRT.txt into your reply.
  
  In your next reply post:
  • The OTL Fix log, that log should pop up after you run the fix.
  • The AdwCleaner [SO].txt log after running the clean option.
  • The JRT.txt log
  Thanks
  Joe

[2Frustrated]

Hello,

 

I'm stuck...I downloaded the AdwCleaner and ran the scan. Adware says "Pending. Please uncheck elements you don't want to remove" and it has 4 items below that are checked. What do I do?

Optimizer Pro Crash Monitoring

(078ad437-dc9f-4228-9edb-b3d1c0246ff8}w64

(507a9b68-2b48-4a22-b662-e674fb6a16f7}Gw64

(a16a1775-5ab3-4034-ac52-de0795db97f0}w64

 

Thanks

[zep516]

Hit the report button, then see if you can do the clean option.

[2Frustrated]

Hi Zep516,

Here are my results

All processes killed
========== COMMANDS ==========
Restore point Set: OTL Restore Point
========== OTL ==========
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6c14185e-4de6-4a79-985b-19f23fd1e638}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6c14185e-4de6-4a79-985b-19f23fd1e638}\ not found.
File C:\Program Files (x86)\Hold Page\HoldPageBHO.dll not found.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\InstallerLauncher deleted successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\IntelTBRunOnce not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Optimizer Pro not found.
File C:\Program Files (x86)\Optimizer Pro 3.11\OptProLauncher.exe not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Adobe Speed Launcher deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\FlashPlayerUpdate deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes\\gopher|:gopher:// /E : value set successfully!
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\cozi\ deleted successfully.
File Protocol\Handler\cozi - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\livecall\ deleted successfully.
File Protocol\Handler\livecall - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msnim\ deleted successfully.
File Protocol\Handler\msnim - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\osf\ deleted successfully.
File Protocol\Handler\osf - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\wlmailhtml\ deleted successfully.
File Protocol\Handler\wlmailhtml - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\wlpg\ deleted successfully.
File Protocol\Handler\wlpg - No CLSID value found not found.
C:\Users\herminiojotiesr\Documents\Optimizer Pro folder moved successfully.
Folder C:\Users\herminiojotiesr\AppData\Roaming\Optimizer Pro\ not found.
C:\Users\herminiojotiesr\AppData\Local\IsolatedStorage\vo14jmcq.kl5\dyy5gfs3.bdn folder moved successfully.
C:\Users\herminiojotiesr\AppData\Local\IsolatedStorage\vo14jmcq.kl5 folder moved successfully.
C:\Users\herminiojotiesr\AppData\Local\IsolatedStorage folder moved successfully.
C:\ProgramData\{FA77A43D-F6ED-4924-87B5-517C061388C6}\OFFLINE\mWinRun.dll folder moved successfully.
C:\ProgramData\{FA77A43D-F6ED-4924-87B5-517C061388C6}\OFFLINE\mMSI.dll folder moved successfully.
C:\ProgramData\{FA77A43D-F6ED-4924-87B5-517C061388C6}\OFFLINE\mIDEFunc.dll folder moved successfully.
C:\ProgramData\{FA77A43D-F6ED-4924-87B5-517C061388C6}\OFFLINE\mFileBagIDE.dll\bag folder moved successfully.
C:\ProgramData\{FA77A43D-F6ED-4924-87B5-517C061388C6}\OFFLINE\mFileBagIDE.dll folder moved successfully.
C:\ProgramData\{FA77A43D-F6ED-4924-87B5-517C061388C6}\OFFLINE\mDown.dll folder moved successfully.
C:\ProgramData\{FA77A43D-F6ED-4924-87B5-517C061388C6}\OFFLINE\ED87AFBD\FB6F57A0 folder moved successfully.
C:\ProgramData\{FA77A43D-F6ED-4924-87B5-517C061388C6}\OFFLINE\ED87AFBD\F1B200E5 folder moved successfully.
C:\ProgramData\{FA77A43D-F6ED-4924-87B5-517C061388C6}\OFFLINE\ED87AFBD\D759BF7C folder moved successfully.
C:\ProgramData\{FA77A43D-F6ED-4924-87B5-517C061388C6}\OFFLINE\ED87AFBD\B2890989 folder moved successfully.
C:\ProgramData\{FA77A43D-F6ED-4924-87B5-517C061388C6}\OFFLINE\ED87AFBD\B2735F12 folder moved successfully.
C:\ProgramData\{FA77A43D-F6ED-4924-87B5-517C061388C6}\OFFLINE\ED87AFBD\B16299D3 folder moved successfully.
C:\ProgramData\{FA77A43D-F6ED-4924-87B5-517C061388C6}\OFFLINE\ED87AFBD\88EF8CFE folder moved successfully.
C:\ProgramData\{FA77A43D-F6ED-4924-87B5-517C061388C6}\OFFLINE\ED87AFBD\76981FF9 folder moved successfully.
C:\ProgramData\{FA77A43D-F6ED-4924-87B5-517C061388C6}\OFFLINE\ED87AFBD\609C82D7 folder moved successfully.
C:\ProgramData\{FA77A43D-F6ED-4924-87B5-517C061388C6}\OFFLINE\ED87AFBD\557E91D7 folder moved successfully.
C:\ProgramData\{FA77A43D-F6ED-4924-87B5-517C061388C6}\OFFLINE\ED87AFBD\4D8E513 folder moved successfully.
C:\ProgramData\{FA77A43D-F6ED-4924-87B5-517C061388C6}\OFFLINE\ED87AFBD\2F536942 folder moved successfully.
C:\ProgramData\{FA77A43D-F6ED-4924-87B5-517C061388C6}\OFFLINE\ED87AFBD\2AF55881 folder moved successfully.
C:\ProgramData\{FA77A43D-F6ED-4924-87B5-517C061388C6}\OFFLINE\ED87AFBD\1382EDFA folder moved successfully.
C:\ProgramData\{FA77A43D-F6ED-4924-87B5-517C061388C6}\OFFLINE\ED87AFBD\1194B90A folder moved successfully.
C:\ProgramData\{FA77A43D-F6ED-4924-87B5-517C061388C6}\OFFLINE\ED87AFBD\10755C93 folder moved successfully.
C:\ProgramData\{FA77A43D-F6ED-4924-87B5-517C061388C6}\OFFLINE\ED87AFBD folder moved successfully.
C:\ProgramData\{FA77A43D-F6ED-4924-87B5-517C061388C6}\OFFLINE folder moved successfully.
C:\ProgramData\{FA77A43D-F6ED-4924-87B5-517C061388C6} folder moved successfully.
C:\Users\herminiojotiesr\AppData\Roaming\1H1Q1V0B1L1G1N1V0M1P1Q1L1T0D1P1E2Z\Google Chrome Packages folder moved successfully.
C:\Users\herminiojotiesr\AppData\Roaming\1H1Q1V0B1L1G1N1V0M1P1Q1L1T0D1P1E2Z folder moved successfully.
C:\Program Files (x86)\Hold Page\bin folder moved successfully.
C:\Program Files (x86)\Hold Page folder moved successfully.
C:\Program Files (x86)\WSE_Vosteran\bh folder moved successfully.
C:\Program Files (x86)\WSE_Vosteran folder moved successfully.
Folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2\ not found.
Folder C:\Program Files (x86)\Optimizer Pro 3.11\ not found.
C:\Users\herminiojotiesr\AppData\Roaming\WSE_Vosteran\UpdateProc folder moved successfully.
C:\Users\herminiojotiesr\AppData\Roaming\WSE_Vosteran\icons_3.6.6.0 folder moved successfully.
C:\Users\herminiojotiesr\AppData\Roaming\WSE_Vosteran\icons_3.6.10.0 folder moved successfully.
C:\Users\herminiojotiesr\AppData\Roaming\WSE_Vosteran folder moved successfully.
Folder C:\Users\herminiojotiesr\AppData\Local\WSE_Vosteran\ not found.
C:\Users\herminiojotiesr\AppData\Local\Z@!-fabbdffe-45d3-411d-9907-4521de90c505.tmp deleted successfully.
C:\Users\herminiojotiesr\AppData\Local\Z@S!-68113556-ef64-467f-9b05-842360e5ebcd.tmp deleted successfully.
C:\ProgramData\1418591446.bdinstall.bin moved successfully.
C:\ProgramData\1418591410.bdinstall.bin moved successfully.
File C:\windows\tasks\WSE_Vosteran.job not found.
File C:\Users\herminiojotiesr\Desktop\Optimizer Pro.lnk not found.
File C:\Users\herminiojotiesr\Desktop\Optimizer Pro.lnk not found.
File C:\windows\tasks\WSE_Vosteran.job not found.
========== FILES ==========
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Users\herminiojotiesr\Desktop\cmd.bat deleted successfully.
C:\Users\herminiojotiesr\Desktop\cmd.txt deleted successfully.
File\Folder C:\Program Files (x86)\Hold Page\bin\utilHoldPage.exe not found.
File\Folder C:\Program Files (x86)\Hold Page\updateHoldPage.exe not found.
File\Folder C:\Program Files (x86)\Hold Page\bin\HoldPage.expext.exe not found.
File\Folder C:\Program Files (x86)\Hold Page\bin\HoldPage.BOASHelper.exe not found.
File\Folder C:\Program Files (x86)\Hold Page\bin\HoldPage.BOAS.exe not found.
File\Folder C:\Program Files (x86)\Hold Page\bin\HoldPage.BOASPRT.exe not found.
File\Folder C:\Program Files (x86)\Hold Page\bin\HoldPage.BRT.Helper.exe not found.
File\Folder C:\Program Files (x86)\Hold Page\HoldPageBHO.dll (Hold Page) not found.
File\Folder C:\Users\herminiojotiesr\AppData\Roaming\WSE_Vosteran not found.
File\Folder C:\Users\herminiojotiesr\AppData\Roaming\Optimizer Pro not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Guest
->Temp folder emptied: 50768 bytes
->Temporary Internet Files folder emptied: 54500 bytes
->Flash cache emptied: 716 bytes

User: herminiojotiesr
->Temp folder emptied: 178503380 bytes
->Temporary Internet Files folder emptied: 557362391 bytes
->Google Chrome cache emptied: 15755475 bytes
->Flash cache emptied: 26160 bytes

User: Public

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 643314758 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 43294427 bytes
RecycleBin emptied: 2419844 bytes

Total Files Cleaned = 1,374.00 mb

C:\windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
Error: Unable to interpret <•Make sure all other windows are closed.> in the current context!
Error: Unable to interpret <•Click the Run Fix button at the top> in the current context!
Error: Unable to interpret <•Let the program run uninterrupted. The computer should reboot when the scan is done. If not, please reboot the computer.> in the current context!
Error: Unable to interpret <•Post the log that is found in C:\_OTL\Moved Files in your next reply.> in the current context!
Error: Unable to interpret <•Open OTL again and click the Quick Scan button.> in the current context!
Error: Unable to interpret <•Next> in the current context!
Error: Unable to interpret <Please download AdwCleaner by Xplode onto your Desktop.◦Close all open programs and internet browsers.> in the current context!
Error: Unable to interpret <◦Double click on AdwCleaner.exe to run the tool.> in the current context!
Error: Unable to interpret <◦Click the Scan button and wait for the process to complete.> in the current context!
Error: Unable to interpret <◦Click the Report button and the report will open in Notepad.> in the current context!
Error: Unable to interpret <◦NOTE: If you get an error message, it means that nothing was found. Exit from AdwCleaner.> in the current context!
Error: Unable to interpret <◦Click on the Clean button follow the prompts.> in the current context!
Error: Unable to interpret <◦A log file will automatically open after the scan has finished and the PC has rebooted.> in the current context!
Error: Unable to interpret <◦Please post the content of that log file with your next answer.> in the current context!
Error: Unable to interpret <◦You can find the log file at C:\AdwCleaner> in the current context!
Error: Unable to interpret <Next> in the current context!
Error: Unable to interpret <thisisujrt.gif Please download Junkware Removal Tool to your Desktop.> in the current context!
Error: Unable to interpret <Please close your security software to avoid potential conflicts. See Here how to disable you security protection (Anti Virus)> in the current context!
Error: Unable to interpret <Run the tool by double-clicking it. If you are using Windows Vista or 7, right-mouse click it and select Run as administrator.> in the current context!
Error: Unable to interpret <The tool will open and start scanning your system.> in the current context!
Error: Unable to interpret <Please be patient as this can take a while to complete, depending on your system's specifications.> in the current context!
Error: Unable to interpret <On completion, a log (JRT.txt) is saved to your Desktop and will automatically open.> in the current context!
Error: Unable to interpret <Please post the contents of JRT.txt into your reply.> in the current context!
Error: Unable to interpret <In your next reply post:◦The OTL Fix log, that log should pop up after you run the fix.> in the current context!
Error: Unable to interpret <◦The AdwCleaner [SO].txt log after running the clean option.> in the current context!
Error: Unable to interpret <◦The JRT.txt log> in the current context!

OTL by OldTimer - Version 3.2.69.0 log created on 12142014_164041

Files\Folders moved on Reboot...
C:\Users\herminiojotiesr\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\herminiojotiesr\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.
C:\windows\temp\HERMSCOMPUTER-20141214-1251.log moved successfully.
File\Folder C:\windows\temp\mcafee_7hkHhNfiGIUy2RT not found!
File\Folder C:\windows\temp\officeclicktorun.exe_c2ruidll(201412141251158A8).log not found!
File\Folder C:\windows\temp\officeclicktorun.exe_streamserver(201412141251158A8).log not found!
C:\windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

# AdwCleaner v4.105 - Report created 14/12/2014 at 18:50:25
# Updated 08/12/2014 by Xplode
# Database : 2014-12-13.4 [Live]
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : herminiojotiesr - HERMSCOMPUTER
# Running from : C:\Users\herminiojotiesr\Documents\Custom Office Templates\adwcleaner_4.105.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : 51cdb72
Service Deleted : {078ad437-dc9f-4228-9edb-b3d1c0246ff8}w64
Service Deleted : {507a9b68-2b48-4a22-b662-e674fb6a16f7}Gw64
Service Deleted : {a16a1775-5ab3-4034-ac52-de0795db97f0}w64

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Driver Support
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inbox Toolbar
Folder Deleted : C:\Program Files (x86)\Inbox Toolbar
Folder Deleted : C:\Program Files (x86)\Driver Support
Folder Deleted : C:\Users\herminiojotiesr\AppData\LocalLow\Inbox Toolbar
Folder Deleted : C:\Users\herminiojotiesr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Driver Support
Folder Deleted : C:\Users\herminiojotiesr\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce
File Deleted : C:\Users\Public\Desktop\eBay.lnk
File Deleted : C:\windows\System32\drivers\{078ad437-dc9f-4228-9edb-b3d1c0246ff8}w64.sys
File Deleted : C:\windows\System32\drivers\{507a9b68-2b48-4a22-b662-e674fb6a16f7}Gw64.sys
File Deleted : C:\windows\System32\drivers\{a16a1775-5ab3-4034-ac52-de0795db97f0}w64.sys
File Deleted : C:\Users\herminiojotiesr\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage
File Deleted : C:\Users\herminiojotiesr\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage-journal

***** [ Scheduled Tasks ] *****

Task Deleted : Driver Support-RTMRules
Task Deleted : Driver Support-RTMScan
Task Deleted : Driver Support-RTMUpdater

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\Google\Chrome\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce
Key Deleted : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce
Key Deleted : HKCU\Software\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.superfish.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com
Key Deleted : HKLM\SOFTWARE\Classes\inbox.appserver
Key Deleted : HKLM\SOFTWARE\Classes\inbox.ibx404
Key Deleted : HKLM\SOFTWARE\Classes\Inbox.JSServer
Key Deleted : HKLM\SOFTWARE\Classes\Inbox.Toolbar
Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\inbox
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [InboxToolbar]
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{042DA63B-0933-403D-9395-B49307691690}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{37540F19-DD4C-478B-B2DF-C19281BCAF27}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{612AD33D-9824-4E87-8396-92374E91C4BB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8DCB7100-DF86-4384-8842-8FA844297B3F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A85A5E6A-DE2C-4F4E-99DC-F469DF5A0EEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{28C3737A-32D1-492D-B76B-8D75EBBFB887}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CE057E0D-2D7E-4DFF-A890-07BA69B8C762}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{615E8AA1-6BB8-4A3D-A1CC-373194DB612C}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{CBEF8724-D080-4737-88DA-111EEC6651AA}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{042DA63B-0933-403D-9395-B49307691690}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8DCB7100-DF86-4384-8842-8FA844297B3F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8DCB7100-DF86-4384-8842-8FA844297B3F}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{612AD33D-9824-4E87-8396-92374E91C4BB}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D7E97865-918F-41E4-9CD0-25AB1C574CE8}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{8DCB7100-DF86-4384-8842-8FA844297B3F}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D7E97865-918F-41E4-9CD0-25AB1C574CE8}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{042DA63B-0933-403D-9395-B49307691690}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{37540F19-DD4C-478B-B2DF-C19281BCAF27}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{8DCB7100-DF86-4384-8842-8FA844297B3F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{28C3737A-32D1-492D-B76B-8D75EBBFB887}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{CE057E0D-2D7E-4DFF-A890-07BA69B8C762}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}
Value Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D7E97865-918F-41E4-9CD0-25AB1C574CE8}]
Value Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{8DCB7100-DF86-4384-8842-8FA844297B3F}]
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{612AD33D-9824-4E87-8396-92374E91C4BB}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77}
Key Deleted : HKCU\Software\Inbox Toolbar
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\Optimizer Pro
Key Deleted : HKCU\Software\DriverSupport
Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Key Deleted : HKLM\SOFTWARE\Inbox Toolbar
Key Deleted : HKLM\SOFTWARE\InstallCore
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\DriverSupport
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{612AD33D-9824-4E87-8396-92374E91C4BB}_is1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Coupon Printer for Windows5.0.0.0
Key Deleted : [x64] HKLM\SOFTWARE\DriverSupport
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\ask.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\vosteran.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.ask.com

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17496


-\\ Google Chrome v

[C:\Users\herminiojotiesr\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.aol.com/aol/search?q={searchTerms}
[C:\Users\herminiojotiesr\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.ask.com/web?q={searchTerms}
[C:\Users\herminiojotiesr\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://Vosteran.com/results.php?f=4&q={searchTerms}&a=vst_ggbg_14_49_ch_na01&cd=2XzuyEtN2Y1L1QzuyE0C0E0ByEtBzz0Czy0DyB0AzzyC0DyEtN0D0Tzu0StCtDyCyBtN1L2XzutAtFyCtFtCtDtFtDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StCzy0Bzy0CyDyE0CtG0BtCyB0FtGyB0EyDyDtGtBzy0ByEtGyB0FtCtAzzyEtCtCzztDtC0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0C0E0CzztDtA0B0CtG0FyEyB0DtGyEyD0ByDtGzyzy0A0CtGyCyB0E0A0CtAyE0A0B0B0AyC2Q&cr=374216352&ir=
[C:\Users\herminiojotiesr\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://Vosteran.com/results.php?f=4&q={searchTerms}&a=vst_ggbg_14_49_ch_na01&cd=2XzuyEtN2Y1L1QzuyE0C0E0ByEtBzz0Czy0DyB0AzzyC0DyEtN0D0Tzu0StCtDyCyBtN1L2XzutAtFyCtFtCtDtFtDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StCzy0Bzy0CyDyE0CtG0BtCyB0FtGyB0EyDyDtGtBzy0ByEtGyB0FtCtAzzyEtCtCzztDtC0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0C0E0CzztDtA0B0CtG0FyEyB0DtGyEyD0ByDtGzyzy0A0CtGyCyB0E0A0CtAyE0A0B0B0AyC2Q&cr=374216352&ir=

*************************

AdwCleaner[R0].txt - [11140 octets] - [14/12/2014 17:35:59]
AdwCleaner[S0].txt - [10965 octets] - [14/12/2014 18:50:25]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [11026 octets] ##########

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.0 (11.29.2014:1)
OS: Windows 7 Home Premium x64
Ran by herminiojotiesr on Sun 12/14/2014 at 19:04:31.64
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\driver support



~~~ Registry Keys



~~~ Files

Successfully deleted: [File] "C:\windows\couponprinter.ocx"



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\pcdr"
Successfully deleted: [Folder] "C:\Users\herminiojotiesr\AppData\Roaming\pcdr"
Successfully deleted: [Folder] "C:\Users\herminiojotiesr\appdata\local\pc_drivers_headquarters"
Successfully deleted: [Folder] "C:\Program Files (x86)\coupons"
Successfully deleted: [Empty Folder] C:\Users\herminiojotiesr\appdata\local\{3A3E7FD3-4A58-4B68-A28E-94A37B419302}
Successfully deleted: [Empty Folder] C:\Users\herminiojotiesr\appdata\local\{7CB79DC4-EC93-4621-BE77-3B057ACC237E}
Successfully deleted: [Empty Folder] C:\Users\herminiojotiesr\appdata\local\{865711FB-1254-4720-970B-7F254AB77CD5}
Successfully deleted: [Empty Folder] C:\Users\herminiojotiesr\appdata\local\{B161628B-7C3C-4A23-9F9F-123239C3DE27}



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Sun 12/14/2014 at 19:09:12.70
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[zep516]

Hello,

Very good so far, looks like you copied to much information for OTL, But it still seemed to work.

Tell me how the computer is now, before we move on.

Thanks
Joe

[2Frustrated]

Hi

Looks like all the issues are gone. No more pop ups, the McAfee notice isn't coming up anymore, and the home page is not coming up blank:blankwhen I open by browser. The performance is much better. Feeling good about the fix. So, anything else I should do?

Thank you!

[zep516]

Download Security Check by screen317 from Here or Here
Save it to your Desktop.
Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt; please post the contents of that document.

[2Frustrated]

Here is the results

UNSUPPORTED OPERATING SYSTEM! ABORTED!

[zep516]

OK,

Not to worry about that.

The last scan we will do is an online scan called ESET. Warning this scan may take a long time. This scan will also show files we have already taken care of so don't be alarmed if it seems to show a lot of what looks like infections. Some people start the scan and just go to bed.


ESET Online Scanner

Note: You can use either Internet Explorer or Mozilla FireFox for this scan. You will however need to disable your current installed Anti-Virus, how to do so can be read here.

• Please go >>HERE<< then click on:
  
  Note: If using Mozilla Firefox you will need to download esetsmartinstaller_enu.exe when prompted then double click on the icon to install.
  
  All of the below instructions are compatible with either Internet Explorer or Mozilla FireFox.
• Select the option YES, I accept the Terms of Use then click on:
• When prompted allow the Add-On/Active X to install.
• Make sure that the option Remove found threats is NOT checked, and the option Scan archives is checked.
• Now click on Advanced Settings and select the following:
  • Scan for potentially unwanted applications
  • Scan for potentially unsafe applications
  • Enable Anti-Stealth Technology

• Now click on:
• The virus signature database... will begin to download. Be patient this make take some time depending on the speed of your Internet Connection.
• When completed the Online Scan will begin automatically.
• Do not touch either the Mouse or keyboard during the scan otherwise it may stall.
• When completed make sure you first copy the logfile located at C:\Program Files (x86)\ESET\Esetonlinescanner\log.txt).
• Copy and paste that log as a reply to this topic.
• Now click on:
  (Selecting Uninstall application on close if you so wish)

Post the ESET scan results when you can, I'll look them over, make any necessary deletions, and then we will remove all the tools I had you download an close the topic.

Thanks
Joe

[2Frustrated]

Hello,

ESET did not work. I tried twice. I believe I did everything per your instructions.

Edited by 2Frustrated, 15 December 2014 - 10:38 AM.

[zep516]

Hello,

Were there any errors ? What browser ?

Lets try another scan.

http://www.bitdefend...nline/free.html

Post the log even if nothing shows up.

Joe

[2Frustrated]

Hi,

I ran bitdefend and it says "Your're good to go. No active Viruses found" there was no log and I downloaded 6 months free. Will this interfere with McAfee?

[zep516]

It shouldn't interfere.

Lets clean up the tools we used by doing the following exercise,

Download DelFix by Xplode and save it to your desktop.

• Run the tool by right click on the icon and Run as administrator option.
• Make sure that these ones are checked:
  • Remove disinfection tools
  • Purge system restore
  • Reset system settings
• Push Run.
• The program will run for a few seconds and display a notepad report.
  Paste it for my review.

[2Frustrated]

Here you go:

# DelFix v10.8 - Logfile created 15/12/2014 at 17:32:07
# Updated 29/07/2014 by Xplode
# Username : herminiojotiesr - HERMSCOMPUTER
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)

~ Removing disinfection tools ...

Deleted : C:\_OTL
Deleted : C:\AdwCleaner
Deleted : C:\Users\herminiojotiesr\Desktop\Extras.Txt
Deleted : C:\Users\herminiojotiesr\Desktop\JRT.txt
Deleted : C:\Users\herminiojotiesr\Desktop\OTL.Txt
Deleted : C:\Users\herminiojotiesr\Desktop\OTL.exe
Deleted : HKLM\SOFTWARE\OldTimer Tools
Deleted : HKLM\SOFTWARE\AdwCleaner

~ Cleaning system restore ...

Deleted : RP #54 [Windows Update | 11/22/2014 20:23:23]
Deleted : RP #55 [Scheduled Checkpoint | 12/04/2014 06:47:34]
Deleted : RP #56 [Windows Update | 12/10/2014 11:00:14]
Deleted : RP #57 [Windows Update | 12/13/2014 21:16:56]
Deleted : RP #58 [Windows Update | 12/14/2014 20:46:59]
Deleted : RP #59 [OTL Restore Point - 12/14/2014 4:40:52 PM | 12/15/2014 00:40:55]

New restore point created !

~ Resetting system settings ... OK

########## - EOF - ##########