Slow running pc, web browser jumps to a serch engine. [Solved]

Hello and Welcome to WhatTheTech Forums

My name is BlackPegasus and I would be glad to help you with your computer problem.

Please read the following guidelines which will help to make cleaning your machine easier:

• please follow all instructions in the order posted
• please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear
• all logs/reports, etc. must be posted in Notepad. Please ensure that word wrap is unchecked. In Notepad click Format, uncheck Word wrap if it is checked
• if you don't understand something, please don't hesitate to ask for clarification before proceeding
• the fixes are specific to your problem and should only be used for this issue on this machine.
• please reply within 3 days. If you do not reply within this period I will post a reminder but topics with no reply in 4 days will be closed!

IMPORTANT:

Please DO NOT install/uninstall any programs unless asked to.
Please DO NOT run any scans other than those requested
=============
To ensure that I get all the information this log will need to be attached (instructions at the end) if it is to large to attach then upload to Mediafire and post the sharing link.

Download OTS to your Desktop

• Close ALL OTHER PROGRAMS.
• Double-click on OTS.exe to start the program.
• Check the box that says Scan All Users
• Under Additional Scans check the following:
  • Uninstall List :
  • File - Lop Check
  • File - Purity Scan
  • Evnt - EventViewer Errors/Warnings (last 10)
• Now click the Run Scan button on the toolbar.
• Let it run unhindered until it finishes.
• When the scan is complete Notepad will open with the report file loaded in it.
• Click the Format menu and make sure that Wordwrap is not checked. If it is then click on it to uncheck it.

Please attach the log in your next post.

To attach a file, do the following:

• Click Add Reply
• Under the reply panel is the Attachments Panel
• Browse for the attachment file you want to upload, then click the green Upload button
• Once it has uploaded, click the Manage Current Attachments drop down box
• Click on [external image: Posted Image] to insert the attachment into your post

=============
NEXT
Please download aswMBR to your desktop.

• Double click the aswMBR.exe icon to run it
• Click the Scan button to start the scan
• On completion of the scan, click the save log button, save it to your desktop and post it in your next reply.

Summary of the logs I need from you in your next post:
OTS log
aswMBR log

Hello BlackPegasus, Here are the logs you asked for. Thank you for your help.

Here is the log. My computer is running a little bit faster and there has not been any search engine redirects so far.

Sorry thought it uploaded here you go. It does not want to upload for some reason. So here it is. All Processes Killed [Registry - Safe List] Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\URLSearchHooks\\{2558d83c-097c-4cf1-9163-ce5ecc36ace2} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2558d83c-097c-4cf1-9163-ce5ecc36ace2}\ not found. File C:\Program Files\MapQuest Toolbar\mapquesttb.dll not found. Registry value HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\[removed] deleted successfully. File C:\PROGRAM FILES\MYWEBSEARCH\BAR\1.BIN not found. C:\Documents and Settings\Yvette\Application Data\Mozilla\Firefox\Profiles\gjm7r763.default\extensions\{4D1E692F-D179-413b-A987-EEEAAD85DDB3}\META-INF folder moved successfully. C:\Documents and Settings\Yvette\Application Data\Mozilla\Firefox\Profiles\gjm7r763.default\extensions\{4D1E692F-D179-413b-A987-EEEAAD85DDB3}\components folder moved successfully. C:\Documents and Settings\Yvette\Application Data\Mozilla\Firefox\Profiles\gjm7r763.default\extensions\{4D1E692F-D179-413b-A987-EEEAAD85DDB3}\chrome folder moved successfully. C:\Documents and Settings\Yvette\Application Data\Mozilla\Firefox\Profiles\gjm7r763.default\extensions\{4D1E692F-D179-413b-A987-EEEAAD85DDB3} folder moved successfully. C:\Documents and Settings\Yvette\Application Data\Mozilla\FireFox\Profiles\gjm7r763.default\searchplugins\askcom.xml moved successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{74322BF9-DF26-493f-B0DA-6D2FC5E6429E}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{74322BF9-DF26-493f-B0DA-6D2FC5E6429E}\ deleted successfully. LoadLibrary failed for C:\Program Files\BearShare Applications\MediaBar\Datamngr\IEBHO.dll C:\Program Files\BearShare Applications\MediaBar\Datamngr\IEBHO.dll moved successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079a25-328f-4bd4-be04-00955acaa0a7}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{99079a25-328f-4bd4-be04-00955acaa0a7}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bd3fd433-147a-482e-a192-614f26e2310c}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{bd3fd433-147a-482e-a192-614f26e2310c}\ not found. File C:\Program Files\MapQuest Toolbar\mapquesttb.dll not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CB0D163C-E9F4-4236-9496-0597E24B23A5}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CB0D163C-E9F4-4236-9496-0597E24B23A5}\ not found. File C:\Program Files\GamesBar\2.0.1.82\oberontb.dll not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E38FA08E-F56A-4169-ABF5-5C71E3C153A1}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E38FA08E-F56A-4169-ABF5-5C71E3C153A1}\ not found. File C:\Program Files\Freeze.com\NetAssistant\NetAssistant.dll not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}\ not found. File C:\Program Files\Yontoo Layers Runtime\YontooIEClient_2.dll not found. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar\\{6F282B65-56BF-4BD1-A8B2-A4449A05863D} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6F282B65-56BF-4BD1-A8B2-A4449A05863D}\ not found. File C:\Program Files\GamesBar\2.0.1.82\oberontb.dll not found. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar\\{9302e698-7e00-43ab-b867-c6e759bc2ada} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9302e698-7e00-43ab-b867-c6e759bc2ada}\ not found. File C:\Program Files\MapQuest Toolbar\mapquesttb.dll not found. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar\\{99079a25-328f-4bd4-be04-00955acaa0a7} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{99079a25-328f-4bd4-be04-00955acaa0a7}\ not found. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar\\10 deleted successfully. Registry value HKEY_USERS\S-1-5-21-1177238915-1965331169-682003330-1004\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{9302E698-7E00-43AB-B867-C6E759BC2ADA} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9302E698-7E00-43AB-B867-C6E759BC2ADA}\ not found. File C:\Program Files\MapQuest Toolbar\mapquesttb.dll not found. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{1A93C934-025B-4c3a-B38E-9654A7003239}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1A93C934-025B-4c3a-B38E-9654A7003239}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1A93C934-025B-4c3a-B38E-9654A7003239}:Reg Error: Value error.\ not found. Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\C:\Program Files\BearShare Applications\BearShare\BearShare.exe deleted successfully. File C:\Program Files\BearShare Applications\BearShare\BearShare.exe not found. Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\BearShare Applications\BearShare\BearShare.exe deleted successfully. File C:\Program Files\BearShare Applications\BearShare\BearShare.exe not found. Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\FrostWire 5\FrostWire.exe deleted successfully. Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Lime PRO\LimePro.exe deleted successfully. Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\C:\Program Files\Windows iLivid Toolbar\Datamngr\ToolBar\dtUser.exe deleted successfully. Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\E:\My Music\FrostWire 5\FrostWire.exe deleted successfully. Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\E:\My Music\FrostWire\FrostWire.exe deleted successfully. E:\My Music\FrostWire\FrostWire.exe moved successfully. Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\\E:\Program Files\LimeWire\LimeWire.exe deleted successfully. [Registry - Additional Scans - Safe List] [Files/Folders - Created Within 30 Days] C:\WINDOWS\002044_.tmp deleted successfully. C:\WINDOWS\004842_.tmp deleted successfully. C:\WINDOWS\DUMP1bd5.tmp deleted successfully. C:\WINDOWS\DUMP22ca.tmp deleted successfully. C:\WINDOWS\SET14.tmp deleted successfully. C:\WINDOWS\SET3.tmp deleted successfully. C:\WINDOWS\SETA.tmp deleted successfully. C:\WINDOWS\System32\ConduitEngine.tmp deleted successfully. C:\WINDOWS\System32\CONFIG.TMP deleted successfully. C:\WINDOWS\System32\SET4D.tmp deleted successfully. C:\WINDOWS\System32\SET51.tmp deleted successfully. C:\WINDOWS\System32\SET59.tmp deleted successfully. C:\Documents and Settings\Yvette\My Documents\~WRL1096.tmp deleted successfully. C:\Documents and Settings\Yvette\My Documents\~WRL1891.tmp deleted successfully. C:\tmp63.tmp deleted successfully. [Files/Folders - Modified Within 30 Days] C:\WINDOWS\Temp\GUR26.tmp deleted successfully. C:\WINDOWS\Temp\GUR59.tmp deleted successfully. C:\WINDOWS\Temp\is250.tmp deleted successfully. C:\WINDOWS\Temp\is254.tmp deleted successfully. C:\WINDOWS\Temp\RAP2C4.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\139.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\21.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\5.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\7F4E393D.TMP deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\9zkB3.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\cdm78.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\cdm7A.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\cdm89.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\EE.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\eLiveAS0.tmp\eLiveASBroker32.exe deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\eLiveAS0.tmp\eLiveASBroker64.exe deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\eLiveAS0.tmp\eLiveASHooks32.dll deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\eLiveAS0.tmp\eLiveASHooks64.dll deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\eLiveAS0.tmp\eLiveASHost32.dll deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\eLiveAS0.tmp\eLiveASHost64.dll deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\eLiveAS0.tmp folder deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\F0.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\is-984SJ.tmp\DealRunnerSetup.exe deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\is-984SJ.tmp folder deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\jar_cache62553.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR10.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR11.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR12.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR13.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR14.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR15.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR16.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR17.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR18.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR19.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR1A.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR1B.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR1C.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR1D.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR1E.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR1F.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR20.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR21.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR22.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR23.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR24.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR25.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR26.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR27.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR28.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR29.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR2A.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR2B.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR2C.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR2D.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR2E.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR2F.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR30.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR31.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR32.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR33.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR34.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR35.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR36.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR37.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR38.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR39.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR6E.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR6F.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR8.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MAR9.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MARA.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MARB.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MARC.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MARD.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MARE.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MARF.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MEP3E.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MEP3F.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MEP44.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MEP63.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MEP64.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MEP67.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MEPB3.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MEPB4.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\MEPB5.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\nsm132.tmp\NSISpcre.dll deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\nsm132.tmp folder deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\q7gB2.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\RBX-4525D84C.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\Set4C.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\STS11.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\STS13.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\STS14.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\STS1B.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\STS1C.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\STS1E.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\STS1F.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\STS21.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\STS26.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\STS29.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\STS2A.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\STS2B.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\STS2E.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\STS34.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\STS36.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\STS37.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\STS39.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\STS3B.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\STS3C.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\STS41.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\STS4A.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\STS60.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\STS71.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\STS8F.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\STSE.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\STSF.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\vneAC.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~1F0.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF1338.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF1413.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF17CB.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF17DF.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF1F4.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF2A52.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF2A5C.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF36BE.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF36CB.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF3860.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF3928.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF3A4A.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF3F41.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF401D.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF4204.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF4573.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF558A.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF6073.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF6CFD.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF6D05.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF6E0C.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF6E5C.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF73AA.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF7445.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF744E.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF77CF.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF77D9.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF7B4C.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF7BB7.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF7D97.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF7E57.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF8198.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF8726.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF872E.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF8886.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF8D47.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF8D5F.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF9194.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF91AA.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF9208.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF9210.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF92B3.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF9E45.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF9EB8.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFA286.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFADA6.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFADE3.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFB07A.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFC032.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFC05F.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFC414.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFC423.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFC950.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFCD0E.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFCE8A.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFD272.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFD4D9.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFDC63.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFEA44.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFEDA9.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFEDB1.tmp deleted successfully. File delete failed. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF0C1.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF0C9.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF0DD.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF0E5.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF157.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF15F.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF189.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF191.tmp scheduled to be deleted on reboot. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF7B3.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFFA87.tmp deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~nsu.tmp\Au_.exe deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~nsu.tmp\Bu_.exe deleted successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\~nsu.tmp folder deleted successfully. File delete failed. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF4204.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF558A.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF0C1.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF0C9.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF0DD.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF0E5.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF157.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF15F.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF189.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF191.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF4204.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Yvette\Local Settings\Temp\~DF558A.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF0C1.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF0C9.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF0DD.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF0E5.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF157.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF15F.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF189.tmp scheduled to be deleted on reboot. File delete failed. C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF191.tmp scheduled to be deleted on reboot. [File - Lop Check] C:\Documents and Settings\All Users\Application Data\Azureus folder moved successfully. File C:\Documents and Settings\All Users\Application Data\BearShare not found! File C:\Documents and Settings\All Users\Application Data\GamesBar not found! File C:\Documents and Settings\All Users\Application Data\MapQuest Toolbar not found! C:\Documents and Settings\All Users\Application Data\Oberon Media\Services\Search folder moved successfully. C:\Documents and Settings\All Users\Application Data\Oberon Media\Services folder moved successfully. C:\Documents and Settings\All Users\Application Data\Oberon Media\11008813 folder moved successfully. C:\Documents and Settings\All Users\Application Data\Oberon Media folder moved successfully. C:\Documents and Settings\misshoopladi\Application Data\bearsharemediabartb folder moved successfully. C:\Documents and Settings\Yvette\Application Data\Azureus\updates folder moved successfully. C:\Documents and Settings\Yvette\Application Data\Azureus\torrents folder moved successfully. C:\Documents and Settings\Yvette\Application Data\Azureus\tmp folder moved successfully. C:\Documents and Settings\Yvette\Application Data\Azureus\shares folder moved successfully. C:\Documents and Settings\Yvette\Application Data\Azureus\rss folder moved successfully. C:\Documents and Settings\Yvette\Application Data\Azureus\plugins\azupnpav folder moved successfully. C:\Documents and Settings\Yvette\Application Data\Azureus\plugins folder moved successfully. C:\Documents and Settings\Yvette\Application Data\Azureus\net folder moved successfully. C:\Documents and Settings\Yvette\Application Data\Azureus\logs\save folder moved successfully. C:\Documents and Settings\Yvette\Application Data\Azureus\logs folder moved successfully. C:\Documents and Settings\Yvette\Application Data\Azureus\dht folder moved successfully. C:\Documents and Settings\Yvette\Application Data\Azureus\active folder moved successfully. C:\Documents and Settings\Yvette\Application Data\Azureus folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\xml\data folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\xml folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\themes\frostwirePro_theme folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\themes folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\overlays folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\image_cache\static.frostwire.com\images\overlays folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\image_cache\static.frostwire.com\images\banners folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\image_cache\static.frostwire.com\images folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\image_cache\static.frostwire.com folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\image_cache\farm6.static.flickr.com\5128 folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\image_cache\farm6.static.flickr.com\5047 folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\image_cache\farm6.static.flickr.com folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\image_cache\farm5.static.flickr.com\4147 folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\image_cache\farm5.static.flickr.com\4089 folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\image_cache\farm5.static.flickr.com\4084 folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\image_cache\farm5.static.flickr.com\4055 folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\image_cache\farm5.static.flickr.com\4047 folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\image_cache\farm5.static.flickr.com\4028 folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\image_cache\farm5.static.flickr.com folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\image_cache\farm2.static.flickr.com\1218 folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\image_cache\farm2.static.flickr.com\1207 folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\image_cache\farm2.static.flickr.com folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\image_cache folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\azureus\torrents folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\azureus\tmp folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\azureus\plugins folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\azureus\net folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\azureus\logs\save folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\azureus\logs folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\azureus\dht folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\azureus\active folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\azureus folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\.NetworkShare\Incomplete folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\.NetworkShare folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire\.AppSpecialShare folder moved successfully. C:\Documents and Settings\Yvette\Application Data\FrostWire folder moved successfully. C:\Documents and Settings\Yvette\Application Data\Oberon Media\11008813\510005489 folder moved successfully. C:\Documents and Settings\Yvette\Application Data\Oberon Media\11008813\116881683 folder moved successfully. C:\Documents and Settings\Yvette\Application Data\Oberon Media\11008813\112623650 folder moved successfully. C:\Documents and Settings\Yvette\Application Data\Oberon Media\11008813 folder moved successfully. C:\Documents and Settings\Yvette\Application Data\Oberon Media folder moved successfully. C:\Documents and Settings\Yvette\Application Data\OpenCandy\OpenCandy_23D5E51E4A5C4E90A00916E58BE2E132 folder moved successfully. C:\Documents and Settings\Yvette\Application Data\OpenCandy\23D5E51E4A5C4E90A00916E58BE2E132 folder moved successfully. C:\Documents and Settings\Yvette\Application Data\OpenCandy folder moved successfully. C:\Documents and Settings\Yvette\Application Data\searchquband folder moved successfully. C:\Documents and Settings\Yvette\Application Data\searchqutoolbar\weather folder moved successfully. C:\Documents and Settings\Yvette\Application Data\searchqutoolbar\coupons folder moved successfully. C:\Documents and Settings\Yvette\Application Data\searchqutoolbar folder moved successfully. [Alternate Data Streams] ADS C:\Documents and Settings\All Users\Application Data\TEMP:33384BC0 deleted successfully. ADS C:\Documents and Settings\All Users\Application Data\TEMP:91486201 deleted successfully. ADS C:\Documents and Settings\All Users\Application Data\TEMP:D2A5A561 deleted successfully. ADS C:\Documents and Settings\All Users\Application Data\TEMP:06F77AFE deleted successfully. ADS C:\Documents and Settings\All Users\Application Data\TEMP:4B244549 deleted successfully. ADS C:\Documents and Settings\All Users\Application Data\TEMP:91730504 deleted successfully. ADS C:\Documents and Settings\All Users\Application Data\TEMP:23FD8469 deleted successfully. ADS C:\Documents and Settings\All Users\Application Data\TEMP:61AF91EC deleted successfully. ADS C:\Documents and Settings\All Users\Application Data\TEMP:30FD0CBD deleted successfully. [Empty Temp Folders] User: Administrator ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 416763 bytes ->Flash cache emptied: 41620 bytes User: All Users User: Arsenio User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 0 bytes User: LocalService ->Temp folder emptied: 66016 bytes ->Temporary Internet Files folder emptied: 192818 bytes User: LogMeInRemoteUser ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 41620 bytes User: misshoopladi ->Temp folder emptied: 2109465 bytes ->Temporary Internet Files folder emptied: 24493731 bytes ->Flash cache emptied: 678 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 39988441 bytes User: Yvette ->Temp folder emptied: 1331242945 bytes ->Temporary Internet Files folder emptied: 327268976 bytes ->Java cache emptied: 20934198 bytes ->FireFox cache emptied: 470676694 bytes ->Google Chrome cache emptied: 14372913 bytes ->Flash cache emptied: 2173462 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 30642646 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 130208868 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes RecycleBin emptied: 3691755741 bytes Total Files Cleaned = 5,805.00 mb [EMPTYFLASH] User: Administrator ->Flash cache emptied: 0 bytes User: All Users User: Arsenio User: Default User ->Flash cache emptied: 0 bytes User: LocalService User: LogMeInRemoteUser ->Flash cache emptied: 0 bytes User: misshoopladi ->Flash cache emptied: 0 bytes User: NetworkService User: Yvette ->Flash cache emptied: 99 bytes Total Flash Files Cleaned = 0.00 mb [EMPTYJAVA] User: Administrator User: All Users User: Arsenio User: Default User User: LocalService User: LogMeInRemoteUser User: misshoopladi User: NetworkService User: Yvette ->Java cache emptied: 0 bytes Total Java Files Cleaned = 0.00 mb Cannot create restore point. Unable to start SRService service! < End of fix log > OTS by OldTimer - Version 3.1.46.0 fix logfile created on 01072012_211559 Files\Folders moved on Reboot… File\Folder C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF0C1.tmp not found! File\Folder C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF0C9.tmp not found! File\Folder C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF0DD.tmp not found! File\Folder C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF0E5.tmp not found! File\Folder C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF157.tmp not found! File\Folder C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF15F.tmp not found! File\Folder C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF189.tmp not found! File\Folder C:\Documents and Settings\Yvette\Local Settings\Temp\~DFF191.tmp not found! File\Folder C:\Documents and Settings\Yvette\Local Settings\Temp\~DF4204.tmp not found! File\Folder C:\Documents and Settings\Yvette\Local Settings\Temp\~DF558A.tmp not found! C:\Documents and Settings\Yvette\Local Settings\Temp\McAfeeLogs\UpdaterUI_SLAMMEDGV.log moved successfully. C:\Documents and Settings\Yvette\Local Settings\Temp\McAfeeLogs\UpdaterUI_SLAMMEDGV_error.log moved successfully. C:\Documents and Settings\Yvette\Local Settings\Temporary Internet Files\Content.IE5\FX7DSR0F\iframe[1].htm moved successfully. C:\Documents and Settings\Yvette\Local Settings\Temporary Internet Files\Content.IE5\92EW3R09\index[3].htm moved successfully. C:\Documents and Settings\Yvette\Local Settings\Temporary Internet Files\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully. C:\Documents and Settings\Yvette\Local Settings\Temporary Internet Files\SuggestedSites.dat moved successfully. File\Folder C:\Documents and Settings\Yvette\Application Data\Macromedia\Flash Player\#SharedObjects\82FMNJK4\a.dolimg.com\media\en-US\dxd\code\dcom3_global_animation_code.swf\dcomFeatureAnimationCounterV1187474.sol not found! Registry entries deleted on Reboot… Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5F624839-947D-46EA-BD63-FD847C1AC6F1}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5F624839-947D-46EA-BD63-FD847C1AC6F1}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\ not found.

Hello tazuki,

Download Security Check by screen317 from here or here.

• Save it to your Desktop.
• Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
• A Notepad document should open automatically called checkup.txt; please post the contents of that document.

=============
NEXT

Download ComboFix from one of the following locations:
Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here

• Double click on ComboFix.exe & follow the prompts.

As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.

• Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

[external image: Posted Image]

• Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

[external image: Posted Image]

• Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.
Notes:
1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.

Summary of the logs I need from you in your next post:
Security Checklog
Combofix log
How is your computer running now?

Here are the logs you asked for. It seems to be running a bit faster now.

Hello tazuki,


VirusTotal

We need to upload files to VirusTotal for inspection.

• Please visit VirusTotal by clicking here.
• Click the Browse… button and search for the following file:
  
  • C:\lj1010seriesprintsys
    c:\program files\1103201122153681.bat
• Click Open.
• Click Send File.
• Please be patient while the file is scanned.
• If VirusTotal tells you that the file has already been scanned, click "reanalyse now".
• Once scanned, copy and paste the link to the results page in your next reply.

If you're having trouble loading VirusTotal, try VirSCAN or Jotti.
================
NEXT

You have this program installed, Malwarebytes' Anti-Malware (MBAM). Please update it and run a scan.

Open MBAM

• Click the Update tab
• Click Check for Updates
• If an update is found, it will download and install the latest version.
• The program will close to update and reopen.
• Once the program has loaded, select "Perform Quick Scan", then click Scan.
• The scan may take some time to finish,so please be patient.
• When the scan is complete, click OK, then Show Results to view the results.
• Make sure that everything is checked, and click Remove Selected.
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
• Copy&Paste the entire report in your next reply.

Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.
================
NEXT


ESET Online Scanner:

Note: You can use either Internet Explorer or Mozilla FireFox for this scan. You will however need to disable your current installed Anti-Virus, how to do so can be read here.

Vista users: You will need to to right-click on the either the IE or FF icon in the Start Menu or Quick Launch Bar on the Taskbar and select Run as Administrator from the context menu.

• Please go here then click on: [external image: Posted Image]
  

  Note: If using Mozilla Firefox you will need to download esetsmartinstaller_enu.exe when prompted then double click on it to install.
  All of the below instructions are compatible with either Internet Explorer or Mozilla FireFox.

• Select the option YES, I accept the Terms of Use then click on: [external image: Posted Image]
• When prompted allow the Add-On/Active X to install.
• Make sure that the option Remove found threats is NOT checked, and the option Scan archives is checked.
• Now click on Advanced Settings and select the following:

• • Scan for potentially unwanted applications
  • Scan for potentially unsafe applications
  • Enable Anti-Stealth Technology
• Now click on: [external image: Posted Image]
• The virus signature database… will begin to download. Be patient this make take some time depending on the speed of your Internet Connection.
• When completed the Online Scan will begin automatically.
• Do not touch either the Mouse or keyboard during the scan otherwise it may stall.
• When completed select Uninstall application on close if you so wish, make sure you copy the logfile first!
• Now click on: [external image: Posted Image]
• Use notepad to open the logfile located at C:\Program Files\ESET\EsetOnlineScanner\log.txt.
• Copy and paste that log as a reply to this topic.

Note: Do not forget to re-enable your Anti-Virus application after running the above scan!


Summary of the logs I need from you in your next post:
VirusTotal results
Malwarebytes' log
ESET log

Here is the VTool link http://www.virustotal.com/file-scan/report…e5ec-1326193556 the C:\lj1010seriesprintsys is folder for my printer driver. The logs are attached.

Hello tazuki,

C:\lj1010seriesprintsys is folder for my printer driver.

I had a feeling that's what it was but just wanted to make sure.

We need to upload files to VirusTotal and Jotti for inspection.

• Please visit VirusTotal by clicking here.
  Jotti.
• Click the Browse… button and search for the following file:
  
  • C:\Mcafee\UnInstX64.exe
• Click Open.
• Click Send File.
• Please be patient while the file is scanned.
• If VirusTotal tells you that the file has already been scanned, click "reanalyse now".
• Once scanned, copy and paste the link to the results page in your next reply.

Summary of the logs I need from you in your next post:
VirusTotal results
Jotti results

Here is the link from vtool: http://www.virustotal.com/file-scan/report…ffb5-1326299569

and from Jotti: http://virusscan.jotti.org/en/scanresult/0…c6c12a7ff65a0fc

Hello tazuki,

Download CKScanner by askey127 from Here & save it to your Desktop.

• Doubleclick CKScanner.exe then click Search For Files
• When the cursor hourglass disappears, click Save List To File
• A message box will verify the file saved
• Double-click the CKFiles.txt icon on your desktop then copy/paste the contents in your next reply

Here is the log. CKScanner - Additional Security Risks - These are not necessarily bad c:\documents and settings\yvette\my documents\my music\unknown artist\crackradio.org\desktop.ini scanner sequence 3.NA.11.OWAPNC —– EOF —–