Vgrabber infected, can not remove ,help please 2 [Closed]

Hello, this is a continuation from my previous topic, as I had ended up on vacation. Tomk was helping me. I had run OTL and copied the logs into the other thread as well. I ran the script that he provided and attached the the log from that. All processes killed ========== PROCESSES ========== No active process named explorer.exe was found! ========== OTL ========== HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully! Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}\ not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully! HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully! Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found. File C:\Program Files\mozilla firefox\plugins\npBitCometAgent.dll not found. Use Chrome's Settings page to remove the default_search_provider items. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\plugins folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\Options folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\Media\rssItem folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\Media\popup folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\Media\icons\useful_components folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\Media\icons\urlGadget folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\Media\icons folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\Media\base64\searchBox folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\Media\base64\rssItem folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\Media\base64\ifarme folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\Media\base64\icons folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\Media\base64\dyamincMenu folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\Media\base64 folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\Media folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\utils\interface folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\utils folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\services\usage folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\services\translation folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\services\toolbarsManager folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\services\toolbarInfo folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\services\settings folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\services\serviceMap folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\services\login folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\services\jsonData folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\services\feed folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\services\cookieMonster folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\services\ContextMenuService folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\services\aliasReplace folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\services\alerts folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\services\404 folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\services folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\popup\view folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\popup\controller folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\popup folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\model folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\lib folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\xmlMenu\view folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\xmlMenu\model folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\xmlMenu\controller folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\xmlMenu folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\urlGadget\view folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\urlGadget\model folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\urlGadget\controller folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\urlGadget folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\multiRssItem\view folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\multiRssItem\model folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\multiRssItem\controller folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\multiRssItem folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\menuPanel\view folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\menuPanel\model folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\menuPanel\controller folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\menuPanel folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\gadgets\view folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\gadgets\model folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\gadgets folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\factories\view folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\factories\model folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\factories folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\dynamicMenu\view folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\dynamicMenu\model folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\dynamicMenu\controller folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\dynamicMenu\consts folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\dynamicMenu folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\contextMenu\view folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\contextMenu\model folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\contextMenu\controller folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\contextMenu folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\container folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\components\view\InjectScript folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\components\view folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\components\model folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\components\controller folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\components folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\about folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\css folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\controller folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\compatibility folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\API\Toolbar folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\API\Component\view folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\API\Component\model folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\API\Component\controller folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\API\Component folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\API folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\Css folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0 folder moved successfully. Starting removal of ActiveX control {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ not found. Starting removal of ActiveX control {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found. Starting removal of ActiveX control {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} C:\WINDOWS\Downloaded Program Files\popcaploader.inf not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{DF780F87-FF2B-4DF8-92D0-73DB16A1543A}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DF780F87-FF2B-4DF8-92D0-73DB16A1543A}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{DF780F87-FF2B-4DF8-92D0-73DB16A1543A}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DF780F87-FF2B-4DF8-92D0-73DB16A1543A}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a263f03c-e545-11de-973e-001c25abf1ca}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a263f03c-e545-11de-973e-001c25abf1ca}\ not found. File I:\PMB_P.exe not found. C:\Documents and Settings\Jess\Application Data\searchquband folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Ilivid Player folder moved successfully. C:\Program Files\iLivid\imageformats folder moved successfully. C:\Program Files\iLivid\fantastic folder moved successfully. C:\Program Files\iLivid folder moved successfully. Folder C:\Documents and Settings\Jess\Application Data\searchquband\ not found. C:\WINDOWS\Tasks\At1.job moved successfully. C:\WINDOWS\Tasks\At2.job moved successfully. C:\WINDOWS\Tasks\At3.job moved successfully. C:\WINDOWS\Tasks\At4.job moved successfully. ADS C:\Documents and Settings\All Users\Application Data\TEMP:0B4227B4 deleted successfully. ADS C:\Documents and Settings\All Users\Application Data\TEMP:D1B5B4F1 deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Jess ->Temp folder emptied: 334291438 bytes ->Temporary Internet Files folder emptied: 883778978 bytes ->Java cache emptied: 104949 bytes ->Google Chrome cache emptied: 278705619 bytes ->Flash cache emptied: 89705 bytes User: LocalService ->Temp folder emptied: 66016 bytes ->Temporary Internet Files folder emptied: 33234 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 313810842 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 2402044 bytes %systemroot%\System32 .tmp files removed: 5168657 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 116811735 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 488733766 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes RecycleBin emptied: 198701095 bytes Total Files Cleaned = 2,501.00 mb OTL by OldTimer - Version 3.2.55.0 log created on 07272012_141917 Files\Folders moved on Reboot… PendingFileRenameOperations files… Registry entries deleted on Reboot…

Hello, this is a continuation from my previous topic, as I had ended up on vacation. Tomk was helping me. I had run OTL and copied the logs into the other thread as well. I ran the script that he provided and attached the the log from that. All processes killed ========== PROCESSES ========== No active process named explorer.exe was found! ========== OTL ========== HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully! Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}\ not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully! HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully! Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found. File C:\Program Files\mozilla firefox\plugins\npBitCometAgent.dll not found. Use Chrome's Settings page to remove the default_search_provider items. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\plugins folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\Options folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\Media\rssItem folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\Media\popup folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\Media\icons\useful_components folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\Media\icons\urlGadget folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\Media\icons folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\Media\base64\searchBox folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\Media\base64\rssItem folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\Media\base64\ifarme folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\Media\base64\icons folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\Media\base64\dyamincMenu folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\Media\base64 folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\Media folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\utils\interface folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\utils folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\services\usage folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\services\translation folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\services\toolbarsManager folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\services\toolbarInfo folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\services\settings folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\services\serviceMap folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\services\login folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\services\jsonData folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\services\feed folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\services\cookieMonster folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\services\ContextMenuService folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\services\aliasReplace folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\services\alerts folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\services\404 folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\services folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\popup\view folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\popup\controller folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\popup folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\model folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\lib folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\xmlMenu\view folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\xmlMenu\model folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\xmlMenu\controller folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\xmlMenu folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\urlGadget\view folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\urlGadget\model folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\urlGadget\controller folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\urlGadget folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\multiRssItem\view folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\multiRssItem\model folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\multiRssItem\controller folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\multiRssItem folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\menuPanel\view folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\menuPanel\model folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\menuPanel\controller folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\menuPanel folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\gadgets\view folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\gadgets\model folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\gadgets folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\factories\view folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\factories\model folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\factories folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\dynamicMenu\view folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\dynamicMenu\model folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\dynamicMenu\controller folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\dynamicMenu\consts folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\dynamicMenu folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\contextMenu\view folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\contextMenu\model folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\contextMenu\controller folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\contextMenu folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\container folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\components\view\InjectScript folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\components\view folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\components\model folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\components\controller folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\components folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items\about folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\items folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\css folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\controller folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\compatibility folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\API\Toolbar folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\API\Component\view folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\API\Component\model folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\API\Component\controller folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\API\Component folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js\API folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\js folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0\Css folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhepndnhfbdjmegechokkbabcphcihdi\2.3.15.10_0 folder moved successfully. Starting removal of ActiveX control {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ not found. Starting removal of ActiveX control {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found. Starting removal of ActiveX control {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} C:\WINDOWS\Downloaded Program Files\popcaploader.inf not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{DF780F87-FF2B-4DF8-92D0-73DB16A1543A}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DF780F87-FF2B-4DF8-92D0-73DB16A1543A}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{DF780F87-FF2B-4DF8-92D0-73DB16A1543A}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DF780F87-FF2B-4DF8-92D0-73DB16A1543A}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a263f03c-e545-11de-973e-001c25abf1ca}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a263f03c-e545-11de-973e-001c25abf1ca}\ not found. File I:\PMB_P.exe not found. C:\Documents and Settings\Jess\Application Data\searchquband folder moved successfully. C:\Documents and Settings\Jess\Local Settings\Application Data\Ilivid Player folder moved successfully. C:\Program Files\iLivid\imageformats folder moved successfully. C:\Program Files\iLivid\fantastic folder moved successfully. C:\Program Files\iLivid folder moved successfully. Folder C:\Documents and Settings\Jess\Application Data\searchquband\ not found. C:\WINDOWS\Tasks\At1.job moved successfully. C:\WINDOWS\Tasks\At2.job moved successfully. C:\WINDOWS\Tasks\At3.job moved successfully. C:\WINDOWS\Tasks\At4.job moved successfully. ADS C:\Documents and Settings\All Users\Application Data\TEMP:0B4227B4 deleted successfully. ADS C:\Documents and Settings\All Users\Application Data\TEMP:D1B5B4F1 deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Jess ->Temp folder emptied: 334291438 bytes ->Temporary Internet Files folder emptied: 883778978 bytes ->Java cache emptied: 104949 bytes ->Google Chrome cache emptied: 278705619 bytes ->Flash cache emptied: 89705 bytes User: LocalService ->Temp folder emptied: 66016 bytes ->Temporary Internet Files folder emptied: 33234 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 313810842 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 2402044 bytes %systemroot%\System32 .tmp files removed: 5168657 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 116811735 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 488733766 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes RecycleBin emptied: 198701095 bytes Total Files Cleaned = 2,501.00 mb OTL by OldTimer - Version 3.2.55.0 log created on 07272012_141917 Files\Folders moved on Reboot… PendingFileRenameOperations files… Registry entries deleted on Reboot…

Welcome back Jessfeld.

I hope you had an enjoyable vacation.

Download ComboFix from here: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

* IMPORTANT !!! Save ComboFix.exe to your Desktop

• Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link –> http://forums.whatthetech.com/How_Disable_…ams_t96260.html
  
  
• Double click on ComboFix.exe & follow the prompts.
  
  
• As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  
  
• Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

[external image: Posted Image]

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

[external image: Posted Image]


Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.


Notes:

1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.
3. ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser.
4. Combofix prevents autorun of ALL CD, floppy and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you – please tell your helper.
5. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.

Hello? Are you out there or did you go on vacation again?

nope still here. I'm just running combo fix now.

That looks good.

Let's get an online scan. (be prepared. It takes hours)

Go here to run an online scanner from ESET.

• Turn off the real time scanner of any existing antivirus program while performing the online scan
• Tick the box next to YES, I accept the Terms of Use.
• Click Start
• When asked, allow the activeX control to install
• Click Start
• Make sure that the option Remove found threats is unticked and the Scan Archives option is ticked.
• Click on Advanced Settings, ensure the options Scan for potentially unwanted applications, Scan for potentially unsafe applications, and Enable Anti-Stealth Technology are ticked.
• Click Scan
• Wait for the scan to finish
• When the scan completes, press the LIST OF THREATS FOUND button
• Press EXPORT TO TEXT FILE , name the file ESETSCAN and save it to your desktop
• Include the contents of this report in your next reply.
• Press the BACK button.
• Press Finish

Also, please let me know how things seem to be running now.

Tomk, attached is the txt log from the Eset scan. C:\System Volume Information\_restore{E55FA822-DEE8-41BE-8889-B8EDEE6207DE}\RP898\A0097385.dll a variant of Win32/Toolbar.SearchSuite application C:\System Volume Information\_restore{E55FA822-DEE8-41BE-8889-B8EDEE6207DE}\RP898\A0097387.dll Win32/Toolbar.SearchSuite application C:\System Volume Information\_restore{E55FA822-DEE8-41BE-8889-B8EDEE6207DE}\RP898\A0097389.dll a variant of Win32/Toolbar.SearchSuite application C:\System Volume Information\_restore{E55FA822-DEE8-41BE-8889-B8EDEE6207DE}\RP898\A0097391.dll Win32/Toolbar.SearchSuite application D:\Junk\DVD burning\Temp\Powerdvd\PowerDVD 6 Deluxe multilanguage.part01.rar a variant of Win32/Keygen.CW application D:\Tunes\New Folder\torn trine rein (best quality).mp3 a variant of WMA/TrojanDownloader.GetCodec.gen trojan as for how things are running…. start up is quicker but i am rarely on this machine. So I cant speak to anything more than that

You've got a couple of pirated programs there… and they are infected - as the vast majority of them are. It is usually a very bad idea to download such programs.

COMBOFIX-Script

• Please open Notepad (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the code box below:
  
  

  File::
  D:\Junk\DVD burning\Temp\Powerdvd\PowerDVD 6 Deluxe multilanguage.part01.rar 
  D:\Tunes\New Folder\torn trine rein (best quality).mp3

• Save this as CFScript.txt and change the "Save as type" to "All Files" and place it on your desktop.
  
  [external image: Posted Image]
  
• Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
• Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
• ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
• When finished, it shall produce a log for you. Copy and paste the contents of the log in your next reply.

CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.

How are things running now?

Due to inactivity this topic will be closed.
If you need help please start a new thread.

New members follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html and start a new topic