Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie

Browser keeps adding Hyperlinks!

Options
  • 24-07-2013 9:11pm
    #1
    Prizen
    Registered Users Posts: 44 ✭


    Hi All,

    I am running Win7 and use Chrome and Firefox browsers. Lately I have a lot of annoying popups continually appear. Also, certain words are incorrectly hyperlinked with popup ads beside them.

    I have tried to resolve this issue using Malwarebytes Anti Malware as per sticky in this forum, but to no avail.

    Please can somebody help?

    Thanks


Comments

  • Options
    #2
    uch
    Registered Users Posts: 7,008 ✭✭✭uch


    Did you run an update for MBAM ?

    21/25



  • Options
    #3
    pennypitstop
    Banned (with Prison Access) Posts: 86 ✭✭pennypitstop


    Prizen wrote: »
    Hi All,

    Lately I have a lot of annoying popups continually appear. Also, certain words are incorrectly hyperlinked with popup ads beside them.

    I have tried to resolve this issue using Malwarebytes Anti Malware as per sticky in this forum, but to no avail.

    Please can somebody help?

    Thanks

    Well described :D
    I had the same problem but only when using Chrome. I Uninstalled it and then re-installed it. This seemed to solve the problem for a few weeks but I have just noticed it happening again this evening!


  • Options
    #4
    ASJ112
    Site Banned Posts: 1,167 ✭✭✭ASJ112


    run this

    Download OTL to your Desktop
    • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
    • Click the Quick Scan button. Do not change any settings. The scan wont take long.
    • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
    • Please copy (Edit->Select All, Edit->Copy) the contents of these files here


  • Options
    #5
    Kent Brockman
    Registered Users Posts: 1,282 ✭✭✭Kent Brockman


    Sounds like you have picked up 'coupondropdown' add on or plugin. I think there is an option to disable and unsubscribe if you go to their faq page.


  • Options
    #6
    Prizen
    Registered Users Posts: 44 ✭Prizen


    ASJ112 wrote: »
    run this

    Download OTL to your Desktop
    • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
    • Click the Quick Scan button. Do not change any settings. The scan wont take long.
    • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
    • Please copy (Edit->Select All, Edit->Copy) the contents of these files here

    Thanks a mil, here's the extras file

    OTL Extras logfile created on: 01/08/2013 23:01:11 - Run 1
    OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Áine\Downloads
    64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
    Internet Explorer (Version = 9.0.8112.16421)
    Locale: 00000809 | Country: Ireland | Language: ENI | Date Format: dd/MM/yyyy

    2.74 Gb Total Physical Memory | 1.59 Gb Available Physical Memory | 58.15% Memory free
    5.48 Gb Paging File | 3.81 Gb Available in Paging File | 69.62% Paging File free
    Paging file location(s): ?:\pagefile.sys [binary data]

    %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
    Drive C: | 285.99 Gb Total Space | 3.85 Gb Free Space | 1.35% Space Free | Partition Type: NTFS
    Drive D: | 4.32 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF
    Drive E: | 1.67 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: CDFS
    Drive G: | 429.35 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

    Computer Name: FINNIAN-PC | User Name: Áine | Logged in as Administrator.
    Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
    Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

    ========== Extra Registry (SafeList) ==========


    ========== File Associations ==========

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
    .html[@ = ChromeHTML] -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
    .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
    .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
    .html [@ = ChromeHTML] -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)

    [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
    .html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

    ========== Shell Spawning ==========

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
    batfile [open] -- "%1" %*
    cmdfile [open] -- "%1" %*
    comfile [open] -- "%1" %*
    exefile [open] -- "%1" %*
    helpfile [open] -- Reg Error: Key error.
    http [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
    https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
    inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
    InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
    InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
    piffile [open] -- "%1" %*
    regfile [merge] -- Reg Error: Key error.
    scrfile [config] -- "%1"
    scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
    scrfile [open] -- "%1" /S
    txtfile [edit] -- Reg Error: Key error.
    Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
    Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
    Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
    Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
    Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
    Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
    Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
    Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
    Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
    Folder [explore] -- Reg Error: Value error.
    Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
    batfile [open] -- "%1" %*
    cmdfile [open] -- "%1" %*
    comfile [open] -- "%1" %*
    cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
    exefile [open] -- "%1" %*
    helpfile [open] -- Reg Error: Key error.
    http [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
    https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
    inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
    piffile [open] -- "%1" %*
    regfile [merge] -- Reg Error: Key error.
    scrfile [config] -- "%1"
    scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
    scrfile [open] -- "%1" /S
    txtfile [edit] -- Reg Error: Key error.
    Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
    Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
    Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
    Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
    Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
    Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
    Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
    Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
    Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
    Folder [explore] -- Reg Error: Value error.
    Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

    ========== Security Center Settings ==========

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
    "cval" = 1

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
    "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
    "AntiVirusOverride" = 0
    "AntiSpywareOverride" = 0
    "FirewallOverride" = 0

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

    ========== Firewall Settings ==========

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
    "EnableFirewall" = 1
    "DisableNotifications" = 0

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
    "EnableFirewall" = 1
    "DisableNotifications" = 0

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
    "EnableFirewall" = 1
    "DisableNotifications" = 0

    ========== Authorized Applications List ==========

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
    "C:\Program Files (x86)\Orbitdownloader\orbitdm.exe" = C:\Program Files (x86)\Orbitdownloader\orbitdm.exe:*:Enabled:Orbit -- (Orbitdownloader.com)
    "C:\Program Files (x86)\Orbitdownloader\orbitnet.exe" = C:\Program Files (x86)\Orbitdownloader\orbitnet.exe:*:Enabled:Orbit -- (Orbitdownloader.com)
    "C:\Program Files (x86)\Orbitdownloader\orbitdm.exe" = C:\Program Files (x86)\Orbitdownloader\orbitdm.exe:*:Enabled:Orbit -- (Orbitdownloader.com)
    "C:\Program Files (x86)\Orbitdownloader\orbitnet.exe" = C:\Program Files (x86)\Orbitdownloader\orbitnet.exe:*:Enabled:Orbit -- (Orbitdownloader.com)


    ========== Vista Active Open Ports Exception List ==========

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
    "{00C0F269-9EB9-48A8-A47D-375091722C94}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
    "{09CE5EB0-18A8-467C-9C3B-CC79BE3C1849}" = rport=137 | protocol=17 | dir=out | app=system |
    "{0C5EC697-068E-4061-B246-7F2211D49CF9}" = lport=10243 | protocol=6 | dir=in | app=system |
    "{1CEE1893-0A1F-47FA-8FFE-CE387101F00C}" = rport=10243 | protocol=6 | dir=out | app=system |
    "{2D92EB96-7A6A-40A3-BB3F-B1B0D1978E11}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
    "{41EEF65C-708A-4DFF-886C-E9524AD55C3C}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
    "{50E37427-02F9-4207-A409-E0A979A42308}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
    "{5C06F52F-BA58-4D4B-8705-E95CC9FDDEEF}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
    "{61A1A1D3-124A-4FF2-B413-4E0AD48D4646}" = rport=139 | protocol=6 | dir=out | app=system |
    "{68C0016A-1BB5-4F12-9281-747544533884}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
    "{6C885453-C448-4AEE-AFBD-267775F4EAA7}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
    "{78536585-5911-45B4-B56C-6C5FC2FFB69D}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
    "{82425E26-C0EC-4478-8A35-FC8EEC0E0951}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
    "{87B613FD-E367-4E05-9F8D-149BFEA4078F}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
    "{8EC137F9-008D-4411-ABCE-E5D5367B45D7}" = lport=138 | protocol=17 | dir=in | app=system |
    "{9A93C320-D8C3-4B4F-B693-6F1920C52999}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
    "{A1289338-DDC7-4AB0-A619-B6D342753BFE}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
    "{A82106CE-AF03-4C6B-9CC8-AA05F7D889F8}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
    "{B0759F59-1F41-4189-BED0-4ACD4487162A}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
    "{B1862BC3-B9A6-4546-8037-BE1BE2BF9216}" = lport=139 | protocol=6 | dir=in | app=system |
    "{B79CE31B-5B6F-4807-8657-885F27DFD19F}" = rport=445 | protocol=6 | dir=out | app=system |
    "{B9310B70-8797-4526-97C0-D5A2BBB6182E}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
    "{BD74A4DF-9E46-439F-BBD3-00F560057804}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
    "{C3A304C9-E1A7-4555-9726-F3F1E8741B37}" = rport=138 | protocol=17 | dir=out | app=system |
    "{D850D2AA-2D6D-4BD2-84C0-D66776E65256}" = lport=2869 | protocol=6 | dir=in | app=system |
    "{EADE363E-15E1-4C57-A406-C0A372197796}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
    "{EC157CF5-5FED-4381-B46A-5D5B4509B96A}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
    "{F83465B6-E726-4D03-A2F4-2C8D3DD745FA}" = lport=445 | protocol=6 | dir=in | app=system |
    "{FC51B86F-23A3-44E0-BA16-D213F28B248C}" = lport=137 | protocol=17 | dir=in | app=system |

    ========== Vista Active Application Exception List ==========

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
    "{03BC00DD-BA80-43C9-8A5C-BE43C59AA07F}" = dir=in | app=c:\users\áine\appdata\local\torch\plugins\torrent\torchtorrent.exe |
    "{0C9E3C9E-ACA7-4D78-ADFF-F63F645731C3}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
    "{10984CE9-7342-4F6C-B3E5-9D222937C1FB}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
    "{143CAA3B-7F3B-40B6-A073-6407AEBC7BC8}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
    "{1B753645-68B8-4584-8241-22C8E5F22320}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
    "{1BD80DA4-5EAC-40B8-8DB1-D0FA2DDD837C}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
    "{2DEDF911-CB5F-4B4C-BECA-2DEF5835D512}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe |
    "{2FC112EF-8EA9-47ED-A9AB-0D5B3E435A27}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
    "{303ECABF-FE00-4B5A-B647-331CC7F4DC1C}" = protocol=17 | dir=in | app=c:\program files (x86)\search results toolbar\datamngr\srtool~1\dtuser.exe |
    "{31377BCB-293F-4D2F-A646-1DA0BF06402B}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
    "{34CA3F51-196F-4DC3-B7D2-047DA2ACFE10}" = protocol=6 | dir=in | app=c:\program files (x86)\search results toolbar\datamngr\srtool~1\dtuser.exe |
    "{3EEE1E12-93C7-43B6-80BD-CC6808B6F13B}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
    "{43F5C6DB-9B54-473B-8881-007471997440}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
    "{441BCB52-AF48-437C-88FE-5361A7F98E50}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
    "{6D066678-04CE-4CA9-83DE-63977E094EC8}" = dir=in | app=c:\program files (x86)\iminent\iminent.exe |
    "{6E65F07A-0D0C-45C3-B3A5-4392FB0F7C8B}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
    "{6F90E41F-CA62-46E1-AC02-E4AAF01ABC2B}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
    "{7EF0FD4D-9C86-46FF-B422-6DC535F7165F}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
    "{88444F8F-E90B-42F7-BE2B-238AF9BBD7A4}" = dir=in | app=c:\program files (x86)\iminent\iminent.messengers.exe |
    "{9A4EF65F-11B9-4B6B-87A9-162679DD0322}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
    "{9FB3B1C6-7F77-40A5-8E31-D6ADE7912DAD}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
    "{A07A5950-8DA7-48F1-8B82-77906EBABB77}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
    "{AE313927-8807-441F-8C14-766DB38A2648}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
    "{AEC6AAEC-03EE-4E91-AE76-B1B341C5F467}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
    "{B362B9A1-0CE6-4E86-8E56-EE803639B23E}" = protocol=6 | dir=out | app=system |
    "{C22E9CEF-2E19-43B4-8084-DD9FD0917086}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
    "{D38E1FDE-FF61-456E-8B6A-E5D1595B139A}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
    "{D8D7E740-701E-4CE4-BFF9-BAC8868467C6}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
    "{DC644440-7EF0-448E-AEDD-1417336A08E5}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
    "{DEDF2C48-8267-47FC-8044-77073C0BCC1A}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
    "{E85BCE0D-0853-41DB-A399-704E2C3F2931}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
    "{E97E1DD3-A88D-45E6-964D-5F391C2DA8C6}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
    "TCP Query User{5063AC63-138C-42F3-9BA2-667B78AD3896}C:\program files (x86)\utorrent\utorrent.exe" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
    "TCP Query User{5D20082F-0146-4126-8859-5A2ED98117D0}C:\windows\syswow64\svchost.exe" = protocol=6 | dir=in | app=c:\windows\syswow64\svchost.exe |
    "TCP Query User{60B84A60-C597-4023-83BB-17A4BD23696F}C:\windows\syswow64\svchost.exe" = protocol=6 | dir=in | app=c:\windows\syswow64\svchost.exe |
    "TCP Query User{6771E5BD-633C-4587-8E64-8654422C3DE4}C:\program files (x86)\orbitdownloader\orbitnet.exe" = protocol=6 | dir=in | app=c:\program files (x86)\orbitdownloader\orbitnet.exe |
    "TCP Query User{68D2ABB7-B245-458D-AABC-3E42C64A251D}C:\program files (x86)\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
    "TCP Query User{71401164-A691-49DB-AC3C-42B3BFF00F0D}C:\program files (x86)\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
    "TCP Query User{AD738F5D-FEFF-4AC1-A570-F2E84A2FA78B}C:\users\áine\appdata\roaming\iqezt\dimemoo.exe" = protocol=6 | dir=in | app=c:\users\áine\appdata\roaming\iqezt\dimemoo.exe |
    "TCP Query User{C22AD959-879C-4D07-8E3E-551B8F059C93}C:\users\áine\appdata\roaming\iqezt\dimemoo.exe" = protocol=6 | dir=in | app=c:\users\áine\appdata\roaming\iqezt\dimemoo.exe |
    "UDP Query User{1DD85567-1380-4B28-ADBC-B1D6983F368D}C:\program files (x86)\orbitdownloader\orbitnet.exe" = protocol=17 | dir=in | app=c:\program files (x86)\orbitdownloader\orbitnet.exe |
    "UDP Query User{370755BE-F5F7-4A34-8FAB-0EC414F644D6}C:\program files (x86)\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
    "UDP Query User{9829CDBB-A89C-49BA-BE50-8750E2366403}C:\windows\syswow64\svchost.exe" = protocol=17 | dir=in | app=c:\windows\syswow64\svchost.exe |
    "UDP Query User{B0B08420-F4CC-4405-943E-B0219B242E93}C:\windows\syswow64\svchost.exe" = protocol=17 | dir=in | app=c:\windows\syswow64\svchost.exe |
    "UDP Query User{B58DCF19-E99B-4518-A9AB-1E2A4A7AB46A}C:\program files (x86)\utorrent\utorrent.exe" = protocol=17 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
    "UDP Query User{BBFCB87C-8CF6-4819-A92A-2B1AD42C1752}C:\users\áine\appdata\roaming\iqezt\dimemoo.exe" = protocol=17 | dir=in | app=c:\users\áine\appdata\roaming\iqezt\dimemoo.exe |
    "UDP Query User{DF59D8AB-7265-466B-B522-26D74DAEC8ED}C:\users\áine\appdata\roaming\iqezt\dimemoo.exe" = protocol=17 | dir=in | app=c:\users\áine\appdata\roaming\iqezt\dimemoo.exe |
    "UDP Query User{EAC497FC-CE15-4732-A933-76575CC51A9E}C:\program files (x86)\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |

    ========== HKEY_LOCAL_MACHINE Uninstall List ==========

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
    "{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
    "{2F72F540-1F60-4266-9506-952B21D6640D}" = Apple Mobile Device Support
    "{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
    "{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
    "{66C10F29-31F0-4A9B-B2CF-465F488AE086}" = CorelDRAW Graphics Suite X5 - Windows Shell Extension 64 Bit
    "{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
    "{76FF0F03-B707-4332-B5D1-A56C8303514E}" = iTunes
    "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
    "{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
    "{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007
    "{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
    "{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
    "{A84DB02B-9C2B-4272-9D2D-A80E00A56513}" = Broadcom Gigabit NetLink Controller
    "{C4ED781C-7394-4906-AAFF-D6AB64FF7C38}" = WebCake 3.00
    "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
    "24DA573F901348FFDFF7717497830D45BE0C362E" = Windows Driver Package - Dynastream Innovations (libusb0) LibUsbDevices (07/07/2009 1.12.2)
    "49CF605F02C7954F4E139D18828DE298CD59217C" = Windows Driver Package - Garmin (grmnusb) GARMIN Devices (06/03/2009 2.3.0.0)
    "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
    "SynTPDeinstKey" = Synaptics Pointing Device Driver

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
    "_{51DD370C-6690-424E-9674-5F14468B323F}" = Corel Graphics - Windows Shell Extension
    "_{CE54DCE1-E00A-4D91-ACB9-A2D916C24051}" = CorelDRAW(R) Graphics Suite X5
    "{12EFA1A4-AC3B-443C-8143-237EDE760403}" = NTI Backup Now Standard
    "{13E92303-C1AC-4012-9E22-54EACBF54888}" = MCCI(r)Firmware Update Driver for MTK
    "{15D967B5-A4BE-42AE-9E84-64CD062B25AA}" = eSobi v2
    "{178832DE-9DE0-4C87-9F82-9315A9B03985}" = Windows Live Writer
    "{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
    "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
    "{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
    "{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
    "{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
    "{2413930C-8309-47A6-BC61-5EF27A4222BC}" = NTI Media Maker 8
    "{24D9A3E0-D086-4B62-AF93-63CF6B05CB48}" = CorelDRAW Graphics Suite X5 - Custom Data
    "{260ED378-2B8C-4831-ADAE-D0712D119AC5}" = CorelDRAW Graphics Suite X5 - VSTA
    "{26945917-E053-45F6-AF98-309730CFC318}" = Visual Basic for Applications (R) Core
    "{26A24AE4-039D-4CA4-87B4-2F83216022F0}" = Java(TM) 6 Update 22
    "{26A24AE4-039D-4CA4-87B4-2F83216026FF}" = Java(TM) 6 Update 26
    "{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
    "{299C0434-4F4E-341F-A916-4E07AEB35E79}" = Microsoft Visual Studio Tools for Applications 2.0 Runtime
    "{2A3A4BD6-6CE0-4E2A-80D2-1D0FF6ACBFBA}" = LG United Mobile Driver
    "{342126E1-173C-4585-BFBE-3EBDD20E3E9E}" = Mobipocket Reader 6.2
    "{3472C84E-2FD0-439F-B27F-C290C1E4CD8B}" = CorelDRAW Graphics Suite X5 - Filters
    "{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
    "{3D5044A5-97B8-45C0-B956-BB2376569188}" = Windows Live Movie Maker
    "{3D6878FF-FAF4-4C27-903C-0D07FBBB92F9}" = Garmin Training Center
    "{3DB0448D-AD82-4923-B305-D001E521A964}" = Acer ePower Management
    "{3E1ECEEC-814C-4B53-9E08-9B1F2FA83434}" = Easy MP3 Sound Recorder 2.01
    "{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
    "{45338B07-A236-4270-9A77-EBB4115517B5}" = Windows Live Sign-in Assistant
    "{468D22C0-8080-11E2-B86E-B8AC6F98CCE3}" = Google Earth
    "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
    "{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.6
    "{510D2239-6C2E-457B-9590-485EC552D94D}" = Garmin USB Drivers
    "{51DD370C-6690-424E-9674-5F14468B323F}" = Corel Graphics - Windows Shell Extension
    "{51F026FA-5146-4232-A8BA-1364740BD053}" = Acer Crystal Eye webcam
    "{54B8F4A1-02B0-4D32-8F37-925526C0EEC6}" = CorelDRAW Graphics Suite X5 - Connect
    "{57400C1E-BC51-4ECE-AD2A-A6096204DDEC}" = CorelDRAW Graphics Suite X5 - VBA
    "{59123CCF-FED2-46FF-9293-D1DC80042219}" = CorelDRAW Graphics Suite X5 - Redist
    "{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}" = Apple Application Support
    "{5E21B617-F52E-BB10-92F9-C8AB2C799A8A}" = Adobe Download Assistant
    "{62978C1C-FE2E-4A4E-851D-3EB406C9EBC2}" = CorelDRAW Graphics Suite X5 - Draw
    "{6412CECE-8172-4BE5-935B-6CECACD2CA87}" = Windows Live Mail
    "{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
    "{67E03279-F703-408F-B4BF-46B5FC8D70CD}" = Microsoft Works
    "{68301905-2DEA-41CE-A4D4-E8B443B099BA}" = MyWinLocker
    "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
    "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
    "{72B776E5-4530-4C4B-9453-751DF87D9D93}" = Backup Manager Basic
    "{739126B3-1C80-4F1F-8D59-312A19633E1A}_is1" = Epub reader
    "{76C24F39-B161-498F-BD8B-C64789812D13}_is1" = ConvertXtoDVD 3.1.0.24
    "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
    "{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
    "{7A03BEDC-6390-440E-8D13-721A22F0BD1F}" = PhoenixRC
    "{7D42B43A-EA63-4234-B00A-757C15B2B185}_is1" = Leawo AVI Converter version 4.1.0.1
    "{7F811A54-5A09-4579-90E1-C93498E230D9}" = Acer eRecovery Management
    "{81128EE8-8EAD-4DB0-85C6-17C2CE50FF71}" = Windows Live Essentials
    "{82AF3E91-57E1-4754-84D0-40A46E2479AB}" = OpenOffice.org 3.3
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110209593}" = Chicken Invaders 2
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110551697}" = Granny In Paradise
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112662477}" = Merriam Websters Spell Jam
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11273477}" = Amazonia
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112920767}" = Alice Greenfingers
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113786380}" = Heroes of Hellas
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113832110}" = Dream Day First Home
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115053100}" = Dairy Dash
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11531173}" = Farm Frenzy 2
    "{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}" = Windows Live Sync
    "{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
    "{89B5DFCA-81E0-4EA4-8A0A-4F4087A1DD00}" = Iminent
    "{8EB62C87-AAA6-4850-A5BC-64155884B973}" = SketchUp 8
    "{8ed9688e-4f79-4308-91ca-f1c37ca142b4}_is1" = Acer GameZone Console
    "{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
    "{90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
    "{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
    "{90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
    "{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
    "{90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
    "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
    "{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
    "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
    "{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
    "{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
    "{90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
    "{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
    "{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}" = Microsoft Office 2007 Service Pack 3 (SP3)
    "{90120000-002A-0409-1000-0000000FF1CE}_HOMESTUDENTR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
    "{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
    "{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
    "{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
    "{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
    "{90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
    "{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
    "{90120000-0115-0409-0000-0000000FF1CE}_HOMESTUDENTR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
    "{90120000-0116-0409-1000-0000000FF1CE}_HOMESTUDENTR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
    "{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
    "{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
    "{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
    "{9244E956-5939-4B88-930C-0699D4AB2B95}" = CorelDRAW Graphics Suite X5 - WT
    "{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
    "{952C0A72-C051-4D35-BD9E-9A3239A2A0C0}_is1" = Age Of Empires 2 : Gold Edition
    "{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
    "{983F7145-CABF-4EDD-9F3D-E06B2F024BD3}" = CorelDRAW Graphics Suite X5 - FontNav
    "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
    "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
    "{A0087DDE-69D0-11E2-AD57-43CA6188709B}" = Adobe AIR
    "{A1B04B6B-25BB-48AD-8BD9-D31A86E89F3E}" = CorelDRAW Graphics Suite X5 - PHOTO-PAINT
    "{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9
    "{A85FD55B-891B-4314-97A5-EA96C0BD80B5}" = Windows Live Messenger
    "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
    "{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}" = Microsoft Visual Studio Tools for Applications 2.0 - ENU
    "{AC76BA86-1033-FFFF-7760-000000000006}" = Adobe Acrobat XI Pro
    "{AC76BA86-7AD7-1033-7B44-A93000000001}" = Adobe Reader 9.3.4
    "{AFBAB9A0-DDE8-49AE-8C17-A01B61BEE64B}" = Garmin MapSource
    "{B399C91E-96F2-4265-9884-1C9A10E9FCF4}" = CorelDRAW Graphics Suite X5
    "{B630320B-4B6A-4623-A05D-80DAA4C73CE9}" = QuickShare
    "{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
    "{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}" = Norton Online Backup
    "{CA3861BA-1D96-4D66-B577-318E1602C4F3}" = CorelDRAW Graphics Suite X5 - Common
    "{CE54DCE1-E00A-4D91-ACB9-A2D916C24051}" = CorelDRAW Graphics Suite X5 - Setup Files
    "{D596EEA2-C6C8-45D3-89DF-FA2DBE99F829}" = Visual Basic for Applications (R) Core - English
    "{D642FF8D-438D-4545-A1D5-2EDB4BCAE3BA}" = CorelDRAW Graphics Suite X5 - Photozoom Plugin
    "{D6C75F0B-3BC1-4FC9-B8C5-3F7E8ED059CA}" = Windows Live Photo Gallery
    "{DE6CBC04-8673-4DBA-BA81-07F1639CEB5F}" = CorelDRAW Graphics Suite X5 - IPM
    "{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update
    "{E34C6AA4-AE8E-4677-912A-92FC2E039DD9}" = CorelDRAW Graphics Suite X5 - EN
    "{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}" = Microsoft Office Suite Activation Assistant
    "{EDB98D5A-A6FB-425C-BFB7-51A0924B762D}" = CorelDRAW Graphics Suite X5 - Capture
    "{EE171732-BEB4-4576-887D-CB62727F01CA}" = Acer Updater
    "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
    "{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
    "{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Graphics Media Accelerator Driver
    "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
    "{F6BD194C-4190-4D73-B1B1-C48C99921BFE}" = Windows Live Call
    "{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center
    "{FE4B83DE-85CF-4DE5-90CE-A2735A0E1F21}" = CorelDRAW Graphics Suite X5 - VideoBrowser
    "Acer Registration" = Acer Registration
    "Acer Screensaver" = Acer ScreenSaver
    "Acer Welcome Center" = Welcome Center
    "Adobe AIR" = Adobe AIR
    "Adobe Digital Editions 2.0" = Adobe Digital Editions 2.0
    "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
    "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
    "Any Video Converter_is1" = Any Video Converter 3.3.0
    "Audacity_is1" = Audacity 2.0.3
    "bi_uninstaller" = Bundled software uninstaller
    "com.adobe.downloadassistant.AdobeDownloadAssistant" = Adobe Download Assistant
    "conduitEngine" = Conduit Engine
    "DAEMON Tools Ultra" = DAEMON Tools Ultra
    "dBpoweramp CD Writer" = dBpoweramp CD Writer
    "dBpoweramp Music Converter" = dBpoweramp Music Converter
    "delta" = Delta toolbar
    "Delta Chrome Toolbar" = Delta Chrome Toolbar
    "eMusic Promotion" = 50 FREE MP3s +1 Free Audiobook!
    "Exact Audio Copy" = Exact Audio Copy 1.0beta3
    "FBReader for Windows" = FBReader for Windows
    "FilesFrog Update Checker" = FilesFrog Update Checker
    "FLAC" = FLAC 1.2.1b (remove only)
    "FoxyLyrics@SHBRT.co" = FoxyLyrics
    "GasTurb_is1" = GasTurb 11 Entry Level Version
    "Google Chrome" = Google Chrome
    "HiDownload Platinum_is1" = HiDownloadPlatinum
    "HOMESTUDENTR" = Microsoft Office Home and Student 2007
    "Identity Card" = Identity Card
    "iLivid" = iLivid
    "ilividtoolbargaw" = Search-Results Toolbar
    "IMBoosterARP" = Iminent
    "InstallShield_{12EFA1A4-AC3B-443C-8143-237EDE760403}" = NTI Backup Now 5
    "InstallShield_{15D967B5-A4BE-42AE-9E84-64CD062B25AA}" = eSobi v2
    "InstallShield_{2413930C-8309-47A6-BC61-5EF27A4222BC}" = NTI Media Maker 8
    "InstallShield_{72B776E5-4530-4C4B-9453-751DF87D9D93}" = Acer Backup Manager
    "InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9
    "InterActual Player" = InterActual Player
    "KLiteCodecPack_is1" = K-Lite Codec Pack 7.6.0 (Basic)
    "LManager" = Launch Manager
    "Magic ISO Maker v5.5 (build 0281)" = Magic ISO Maker v5.5 (build 0281)
    "MagicDisc 2.7.106" = MagicDisc 2.7.106
    "Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300
    "Mobile Partner" = Mobile Partner
    "Mozilla Firefox 22.0 (x86 en-GB)" = Mozilla Firefox 22.0 (x86 en-GB)
    "MozillaMaintenanceService" = Mozilla Maintenance Service
    "O2 Broadband" = O2 Broadband
    "Optimizer Pro_is1" = Optimizer Pro v3.1
    "Orbit_is1" = Orbit Downloader
    "Picasa 3" = Picasa 3
    "uTorrent" = µTorrent
    "uTorrentBar Toolbar" = uTorrentBar Toolbar
    "VLC media player" = VLC media player 2.0.5
    "WD Link" = WD Link
    "Winamp" = Winamp
    "Winamp Toolbar" = Winamp Toolbar
    "WinLiveSuite_Wave3" = Windows Live Essentials
    "WinPcapInst" = WinPcap 4.1.3
    "WinRAR archiver" = WinRAR archiver

    ========== HKEY_CURRENT_USER Uninstall List ==========

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
    "BartVPN" = BartVPN
    "Torch" = Torch

    ========== Last 20 Event Log Errors ==========

    [ Application Events ]
    Error - 21/04/2013 12:39:44 | Computer Name = Finnian-PC | Source = Application Error | ID = 1000
    Description = Faulting application name: Iminent.exe, version: 6.14.22.0, time stamp:
    0x515afa16 Faulting module name: KERNELBASE.dll, version: 6.1.7600.17206, time stamp:
    0x50e6605e Exception code: 0xe0434352 Fault offset: 0x0000c41f Faulting process id:
    0xa50 Faulting application start time: 0x01ce3eaeca652697 Faulting application path:
    C:\Program Files (x86)\Iminent\Iminent.exe Faulting module path: C:\Windows\syswow64\KERNELBASE.dll
    Report
    Id: 11a80341-aaa2-11e2-a76c-863dd52a77e9

    Error - 21/04/2013 12:47:13 | Computer Name = Finnian-PC | Source = Application Error | ID = 1000
    Description = Faulting application name: taskeng.exe, version: 6.1.7600.16699, time
    stamp: 0x4ccf7f10 Faulting module name: ntdll.dll, version: 6.1.7600.16915, time
    stamp: 0x4ec4b137 Exception code: 0xc0000005 Fault offset: 0x000000000009c524 Faulting
    process id: 0x6ac Faulting application start time: 0x01ce3eafd887ec04 Faulting application
    path: C:\Windows\system32\taskeng.exe Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
    Report
    Id: 1d4efabc-aaa3-11e2-9f3e-8803220dd7c8

    Error - 21/04/2013 12:47:13 | Computer Name = Finnian-PC | Source = Application Error | ID = 1000
    Description = Faulting application name: Dwm.exe, version: 6.1.7600.16385, time
    stamp: 0x4a5bc541 Faulting module name: ntdll.dll, version: 6.1.7600.16915, time
    stamp: 0x4ec4b137 Exception code: 0xc0000005 Fault offset: 0x000000000009c524 Faulting
    process id: 0x7e0 Faulting application start time: 0x01ce3eafd958f7b7 Faulting application
    path: C:\Windows\system32\Dwm.exe Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
    Report
    Id: 1d4ed3ac-aaa3-11e2-9f3e-8803220dd7c8

    Error - 22/04/2013 12:44:52 | Computer Name = Finnian-PC | Source = Application Error | ID = 1000
    Description = Faulting application name: ePowerTray.exe, version: 5.0.3000.0, time
    stamp: 0x4b544a12 Faulting module name: ntdll.dll, version: 6.1.7600.16915, time
    stamp: 0x4ec4b137 Exception code: 0xc0000005 Fault offset: 0x000000000009c524 Faulting
    process id: 0x924 Faulting application start time: 0x01ce3f78b298e326 Faulting application
    path: C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe Faulting module
    path: C:\Windows\SYSTEM32\ntdll.dll Report Id: f3842e46-ab6b-11e2-a7e3-c4d460dc9df4

    Error - 22/04/2013 12:57:47 | Computer Name = Finnian-PC | Source = Application Error | ID = 1000
    Description = Faulting application name: wermgr.exe, version: 6.1.7600.16385, time
    stamp: 0x4a5bc5f9 Faulting module name: ntdll.dll, version: 6.1.7600.16915, time
    stamp: 0x4ec4b137 Exception code: 0xc0000005 Fault offset: 0x000000000009c524 Faulting
    process id: 0x1450 Faulting application start time: 0x01ce3f7a826d9d49 Faulting application
    path: C:\Windows\system32\wermgr.exe Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
    Report
    Id: c1c43e7a-ab6d-11e2-a7e3-c4d460dc9df4

    Error - 23/04/2013 06:16:24 | Computer Name = Finnian-PC | Source = Application Error | ID = 1000
    Description = Faulting application name: SndVol.exe, version: 6.1.7600.16385, time
    stamp: 0x4a5bcf26 Faulting module name: ntdll.dll, version: 6.1.7600.16915, time
    stamp: 0x4ec4b137 Exception code: 0xc0000005 Fault offset: 0x000000000009c524 Faulting
    process id: 0xac4 Faulting application start time: 0x01ce400b9aeda56c Faulting application
    path: C:\Windows\system32\SndVol.exe Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
    Report
    Id: d9b96fc9-abfe-11e2-a7ac-95fb0be7a4f8

    Error - 23/04/2013 07:20:32 | Computer Name = Finnian-PC | Source = Application Error | ID = 1000
    Description = Faulting application name: SearchProtocolHost.exe, version: 7.0.7600.16808,
    time stamp: 0x4dc0d14c Faulting module name: ntdll.dll, version: 6.1.7600.16915,
    time stamp: 0x4ec4b137 Exception code: 0xc0000005 Fault offset: 0x000000000009c524
    Faulting
    process id: 0x144c Faulting application start time: 0x01ce401490a966fb Faulting application
    path: C:\Windows\system32\SearchProtocolHost.exe Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
    Report
    Id: cf0fde5d-ac07-11e2-a7ac-95fb0be7a4f8

    Error - 23/04/2013 07:35:59 | Computer Name = Finnian-PC | Source = SideBySide | ID = 16842787
    Description = Activation context generation failed for "c:\program files (x86)\windows
    live\photo gallery\MovieMaker.Exe".Error in manifest or policy file "c:\program
    files (x86)\windows live\photo gallery\WLMFDS.DLL" on line 8. Component identity
    found in manifest does not match the identity of the component requested. Reference
    is WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1". Definition
    is WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1". Please use
    sxstrace.exe for detailed diagnosis.

    Error - 23/04/2013 07:40:17 | Computer Name = Finnian-PC | Source = System Restore | ID = 8193
    Description =

    Error - 23/04/2013 07:40:17 | Computer Name = Finnian-PC | Source = System Restore | ID = 8211
    Description =

    [ System Events ]
    Error - 24/07/2013 16:02:56 | Computer Name = Finnian-PC | Source = Service Control Manager | ID = 7000
    Description = The Windows Search service failed to start due to the following error:
    %%1053

    Error - 26/07/2013 04:53:38 | Computer Name = Finnian-PC | Source = Service Control Manager | ID = 7043
    Description = The Windows Update service did not shut down properly after receiving
    a preshutdown control.

    Error - 26/07/2013 04:54:23 | Computer Name = Finnian-PC | Source = Microsoft-Windows-Service Pack Installer | ID = 8
    Description = Service Pack installation failed with error code 0x80010108.

    Error - 26/07/2013 04:58:17 | Computer Name = Finnian-PC | Source = DCOM | ID = 10005
    Description =

    Error - 26/07/2013 04:58:17 | Computer Name = Finnian-PC | Source = Service Control Manager | ID = 7009
    Description = A timeout was reached (30000 milliseconds) while waiting for the iPod
    Service service to connect.

    Error - 26/07/2013 04:58:17 | Computer Name = Finnian-PC | Source = Service Control Manager | ID = 7000
    Description = The iPod Service service failed to start due to the following error:
    %%1053

    Error - 26/07/2013 08:49:58 | Computer Name = Finnian-PC | Source = Service Control Manager | ID = 7011
    Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
    response from the WwanSvc service.

    Error - 01/08/2013 16:49:30 | Computer Name = Finnian-PC | Source = EventLog | ID = 6008
    Description = The previous system shutdown at 02:58:30 on ?30/?07/?2013 was unexpected.

    Error - 01/08/2013 17:07:17 | Computer Name = Finnian-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
    Description = Installation Failure: Windows failed to install the following update
    with error 0x8024200d: Windows 7 Service Pack 1 for x64-based Systems (KB976932).

    Error - 01/08/2013 17:22:42 | Computer Name = Finnian-PC | Source = volsnap | ID = 393252
    Description = The shadow copies of volume C: were aborted because the shadow copy
    storage could not grow due to a user imposed limit.


    < End of report >


    Here is the OTL file

    OTL logfile created on: 01/08/2013 23:01:11 - Run 1
    OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Áine\Downloads
    64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
    Internet Explorer (Version = 9.0.8112.16421)
    Locale: 00000809 | Country: Ireland | Language: ENI | Date Format: dd/MM/yyyy

    2.74 Gb Total Physical Memory | 1.59 Gb Available Physical Memory | 58.15% Memory free
    5.48 Gb Paging File | 3.81 Gb Available in Paging File | 69.62% Paging File free
    Paging file location(s): ?:\pagefile.sys [binary data]

    %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
    Drive C: | 285.99 Gb Total Space | 3.85 Gb Free Space | 1.35% Space Free | Partition Type: NTFS
    Drive D: | 4.32 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF
    Drive E: | 1.67 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: CDFS
    Drive G: | 429.35 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

    Computer Name: FINNIAN-PC | User Name: Áine | Logged in as Administrator.
    Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
    Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

    ========== Processes (SafeList) ==========

    PRC - [2013/08/01 22:53:49 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Áine\Downloads\OTL.exe
    PRC - [2013/07/12 14:37:18 | 003,289,472 | ---- | M] (Skype Technologies S.A.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
    PRC - [2013/07/08 10:25:24 | 000,080,064 | ---- | M] () -- C:\Users\Áine\AppData\Local\BartVPN\BartVPNService.exe
    PRC - [2013/06/26 20:37:57 | 002,723,368 | ---- | M] (Iminent) -- C:\Program Files (x86)\Common Files\Umbrella\umbrella.exe
    PRC - [2013/06/16 15:56:50 | 000,020,248 | ---- | M] (Smartbar) -- C:\Users\Áine\AppData\Local\Smartbar\Application\QuickShare.exe
    PRC - [2013/06/07 18:48:44 | 000,903,160 | ---- | M] (PC Utilities Pro) -- C:\Program Files (x86)\Optimizer Pro\OptProReminder.exe
    PRC - [2013/06/07 18:48:44 | 000,418,808 | ---- | M] (PC Utilities Pro) -- C:\Program Files (x86)\Optimizer Pro\OptProSmartScan.exe
    PRC - [2013/04/02 16:35:26 | 001,074,736 | ---- | M] (Iminent) -- C:\Program Files (x86)\Iminent\Iminent.exe
    PRC - [2013/04/02 16:35:26 | 000,884,784 | ---- | M] (Iminent) -- C:\Program Files (x86)\Iminent\Iminent.Messengers.exe
    PRC - [2013/03/06 13:15:38 | 000,580,672 | ---- | M] (Disc Soft Ltd) -- C:\Program Files (x86)\DAEMON Tools Ultra\DiscSoftBusService.exe
    PRC - [2013/02/07 13:19:12 | 001,683,456 | ---- | M] (Bandoo Media Inc) -- C:\Program Files (x86)\Search Results Toolbar\Datamngr\datamngrUI.exe
    PRC - [2013/01/31 15:10:00 | 000,201,808 | ---- | M] (Somoto) -- C:\Program Files (x86)\FilesFrog Update Checker\update_checker.exe
    PRC - [2012/09/23 20:43:48 | 003,477,640 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
    PRC - [2012/09/23 20:43:36 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    PRC - [2012/02/06 18:54:04 | 000,255,376 | ---- | M] (Acer Incorporated) -- C:\Program Files\Acer\Acer Updater\UpdaterService.exe
    PRC - [2011/01/17 19:08:58 | 011,322,880 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
    PRC - [2011/01/17 19:08:58 | 011,314,688 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
    PRC - [2010/12/09 11:45:58 | 000,074,752 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\Winamp\winampa.exe
    PRC - [2010/01/22 09:10:50 | 001,287,760 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LManager.exe
    PRC - [2010/01/22 09:10:50 | 000,310,352 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe
    PRC - [2010/01/22 09:10:50 | 000,268,368 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LMworker.exe
    PRC - [2010/01/13 03:25:10 | 000,265,984 | ---- | M] (NewTech Infosystems, Inc.) -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
    PRC - [2010/01/07 02:50:02 | 000,255,744 | ---- | M] (NewTech Infosystems, Inc.) -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
    PRC - [2009/12/24 02:39:04 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
    PRC - [2009/12/24 02:39:02 | 000,284,696 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
    PRC - [2009/12/22 10:17:04 | 000,225,280 | ---- | M] () -- C:\ProgramData\DatacardService\DCService.exe
    PRC - [2009/12/22 10:13:06 | 000,241,664 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\ProgramData\DatacardService\DCSHelper.exe
    PRC - [2009/12/09 09:48:26 | 002,320,920 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
    PRC - [2009/12/09 09:48:24 | 000,268,824 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
    PRC - [2009/09/10 14:42:30 | 000,349,480 | ---- | M] (Egis Technology Inc.) -- C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
    PRC - [2009/08/28 10:38:58 | 001,150,496 | ---- | M] (Acer Incorporated) -- C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
    PRC - [2009/08/04 06:09:34 | 000,199,464 | ---- | M] (Egis Technology Inc.) -- C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe
    PRC - [2009/07/24 20:38:50 | 000,189,728 | ---- | M] (Protexis Inc.) -- c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe


    ========== Modules (No Company Name) ==========

    MOD - [2013/06/16 15:57:42 | 000,021,272 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.Resources.Utilities.dll
    MOD - [2013/06/16 15:57:36 | 000,025,368 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll
    MOD - [2013/06/16 15:57:34 | 000,019,736 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.Resources.SideBySide.dll
    MOD - [2013/06/16 15:57:28 | 000,013,592 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.Resources.ProcessDownMonitor.dll
    MOD - [2013/06/16 15:57:26 | 000,245,528 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.Resources.NetSeer.dll
    MOD - [2013/06/16 15:57:26 | 000,051,480 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll
    MOD - [2013/06/16 15:57:24 | 000,111,896 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll
    MOD - [2013/06/16 15:57:14 | 000,053,016 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.Resources.AutomaticUpdates.dll
    MOD - [2013/06/16 15:57:10 | 000,078,104 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.Personalization.BusinessLogic.dll
    MOD - [2013/06/16 15:57:10 | 000,016,152 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll
    MOD - [2013/06/16 15:57:06 | 000,149,784 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll
    MOD - [2013/06/16 15:57:04 | 000,057,112 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll
    MOD - [2013/06/16 15:57:00 | 000,012,568 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.EventManager.dll
    MOD - [2013/06/16 15:56:58 | 000,032,024 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll
    MOD - [2013/06/16 15:56:58 | 000,013,592 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll
    MOD - [2013/06/16 15:56:56 | 000,014,104 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.GUI.Multimedia.Loader.dll
    MOD - [2013/06/16 15:56:54 | 001,710,872 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll
    MOD - [2013/06/16 15:56:52 | 000,722,712 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll
    MOD - [2013/06/16 15:56:52 | 000,081,176 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll
    MOD - [2013/06/16 15:55:40 | 000,047,384 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\MACTrackBarLib.dll
    MOD - [2013/05/29 19:16:52 | 000,220,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\24ab5f14e55ae0dec23141f6e59a577c\CustomMarshalers.ni.dll
    MOD - [2013/05/29 19:13:38 | 000,997,888 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\ee4683cbfd60ee35d95e2e6d32fc3981\System.Management.ni.dll
    MOD - [2013/05/29 18:59:13 | 003,325,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\82a4c4666ad83c3a375210247e69646b\WindowsBase.ni.dll
    MOD - [2013/05/29 18:58:46 | 012,433,920 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\05682429807d34d6ff05a77ea153935f\System.Windows.Forms.ni.dll
    MOD - [2013/05/29 18:58:27 | 001,840,640 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\9e64c6dea847aec2685eec4da29ea9b0\System.Web.Services.ni.dll
    MOD - [2013/05/29 18:58:23 | 000,628,224 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\2b54822a40e9b08479a79cce0e196af1\System.EnterpriseServices.ni.dll
    MOD - [2013/05/29 18:58:23 | 000,627,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\00038bb019bb7e4470d3962b58b1926f\System.Transactions.ni.dll
    MOD - [2013/05/29 18:58:22 | 006,618,624 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\d0dd051976a66e08325379754531421c\System.Data.ni.dll
    MOD - [2013/05/29 18:58:15 | 001,592,832 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\e2ee5d77ebe0bd025e7a7a317a43d677\System.Drawing.ni.dll
    MOD - [2013/05/29 18:58:12 | 011,824,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\a00aab40bdf5aed84b4d4294965cf20d\System.Web.ni.dll
    MOD - [2013/05/29 18:58:02 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\01b47a246b4ec7bfec31bf4503aceda1\System.Runtime.Remoting.ni.dll
    MOD - [2013/05/29 18:57:52 | 005,453,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\10aba2c167cc1119b80159fd9ac71ca8\System.Xml.ni.dll
    MOD - [2013/05/29 18:57:48 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\96a3b737db1e72adaf32d2b350e50c23\System.Configuration.ni.dll
    MOD - [2013/05/29 18:57:46 | 007,974,400 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\c54750e64ba10d0fb7b6a636fb3695ca\System.ni.dll
    MOD - [2013/05/29 18:57:30 | 011,490,816 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\b0b8554c05f194f546a8ed531320760b\mscorlib.ni.dll
    MOD - [2013/04/21 21:44:32 | 000,087,952 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
    MOD - [2013/04/21 21:44:04 | 001,242,952 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
    MOD - [2013/04/08 19:16:37 | 000,911,432 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Data.SQLite\1.0.66.0__db937bc2d44ff139\System.Data.SQLite.dll
    MOD - [2013/04/08 19:16:36 | 000,139,264 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\Interop.SHDocVw\1.1.0.0__84542ff99aed6a4d\Interop.SHDocVw.dll
    MOD - [2013/03/26 10:58:33 | 002,232,272 | ---- | M] () -- c:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll
    MOD - [2013/02/16 23:06:06 | 000,148,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\32ecd6bef90d6da4b2b33850c3ce99e1\System.Configuration.Install.ni.dll
    MOD - [2013/02/16 16:19:56 | 013,199,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\806c4ba7d696ab586ffd774a31f1a66b\System.Windows.Forms.ni.dll
    MOD - [2013/01/15 19:16:06 | 001,885,696 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Web.Services\511f6e31e7eff4ab3d9194cf9b1c51c1\System.Web.Services.ni.dll
    MOD - [2013/01/15 19:15:56 | 018,080,256 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\e464dc608a88955a0edccba917d207de\System.ServiceModel.ni.dll
    MOD - [2013/01/15 19:15:30 | 001,078,272 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\8e092d89921648308ac103bb08bfd370\System.IdentityModel.ni.dll
    MOD - [2013/01/15 19:13:53 | 000,787,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\d340a103e8f063a3771cbeaaec58d157\System.EnterpriseServices.ni.dll
    MOD - [2013/01/15 19:13:53 | 000,236,032 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\d340a103e8f063a3771cbeaaec58d157\System.EnterpriseServices.Wrapper.dll
    MOD - [2013/01/15 19:13:52 | 001,021,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\22c60ca3c2b18e041ebff2578c90cba3\System.Runtime.DurableInstancing.ni.dll
    MOD - [2013/01/15 19:13:52 | 000,649,728 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\9253eb314ef2f5adada0d5fdf1d4a839\System.Transactions.ni.dll
    MOD - [2013/01/15 19:13:51 | 000,143,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\62d047ff6c2865139d95eb19545b1cc6\SMDiagnostics.ni.dll
    MOD - [2013/01/15 19:13:50 | 002,647,040 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\48ee0e1de873152ec7e85d7456c1cc09\System.Runtime.Serialization.ni.dll
    MOD - [2013/01/15 19:13:47 | 001,801,728 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\cbb7db665b3ba25a931258eb702527f5\System.Xaml.ni.dll
    MOD - [2013/01/15 00:26:29 | 018,002,944 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\f28a346ae10e2eec581608f591cf7116\PresentationFramework.ni.dll
    MOD - [2013/01/15 00:25:59 | 011,451,904 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\8983c040161b34c64474f195bff5e2de\PresentationCore.ni.dll
    MOD - [2013/01/15 00:25:54 | 006,815,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data\8167f7d08668a5859e76aa9a1124a42f\System.Data.ni.dll
    MOD - [2013/01/15 00:25:47 | 007,069,696 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\08bebcf66ad666dfdf2a4a934d79c0f9\System.Core.ni.dll
    MOD - [2013/01/15 00:25:42 | 005,617,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\d884c684ee3f738a60e3c50dd5d88caa\System.Xml.ni.dll
    MOD - [2013/01/15 00:25:42 | 003,858,944 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\5dbabea688adfc665e3453561736699a\WindowsBase.ni.dll
    MOD - [2013/01/15 00:25:40 | 001,667,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\b83993cc955262507c8ead67567c8060\System.Drawing.ni.dll
    MOD - [2013/01/15 00:25:37 | 000,982,528 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\cb72ac8478a5ea7e2d570bb710ecb1c1\System.Configuration.ni.dll
    MOD - [2013/01/15 00:25:35 | 009,094,656 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\df418085cedae9fa2efee87e20a419a4\System.ni.dll
    MOD - [2013/01/15 00:25:22 | 014,413,824 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\60c214b6ad5691e368a16ec65d127c27\mscorlib.ni.dll
    MOD - [2011/10/12 16:21:34 | 000,985,088 | ---- | M] () -- C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
    MOD - [2010/01/16 04:42:46 | 008,007,680 | ---- | M] () -- C:\Windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll
    MOD - [2010/01/07 02:46:56 | 000,465,576 | ---- | M] () -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll
    MOD - [2009/06/10 22:23:19 | 000,261,632 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    MOD - [2009/06/10 22:23:17 | 002,933,248 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    MOD - [2009/06/10 22:22:50 | 000,069,120 | ---- | M] () -- C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    MOD - [2009/05/20 07:02:04 | 000,072,200 | ---- | M] () -- C:\Program Files (x86)\Launch Manager\CdDirIo.dll


    ========== Services (SafeList) ==========

    SRV:64bit: - [2012/02/06 18:54:04 | 000,255,376 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files\Acer\Acer Updater\UpdaterService.exe -- (Updater Service)
    SRV:64bit: - [2012/02/06 18:54:04 | 000,255,376 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files\Acer\Acer Updater\UpdaterService.exe -- (Live Updater Service)
    SRV:64bit: - [2010/01/18 20:55:46 | 000,842,784 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe -- (ePowerSvc)
    SRV:64bit: - [2009/07/14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
    SRV - [2013/07/12 14:37:18 | 003,289,472 | ---- | M] (Skype Technologies S.A.) [Auto | Running] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service)
    SRV - [2013/07/08 10:25:24 | 000,080,064 | ---- | M] () [Auto | Running] -- C:\Users\Áine\AppData\Local\BartVPN\BartVPNService.exe -- (BartVPNService)
    SRV - [2013/07/03 19:54:33 | 000,117,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
    SRV - [2013/06/26 20:37:57 | 002,723,368 | ---- | M] (Iminent) [Auto | Running] -- C:\Program Files (x86)\Common Files\Umbrella\umbrella.exe -- (SProtection)
    SRV - [2013/06/21 09:53:36 | 000,162,408 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
    SRV - [2013/06/18 18:55:27 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
    SRV - [2013/03/06 13:15:38 | 000,580,672 | ---- | M] (Disc Soft Ltd) [On_Demand | Running] -- C:\Program Files (x86)\DAEMON Tools Ultra\DiscSoftBusService.exe -- (Disc Soft Bus Service)
    SRV - [2013/03/01 02:48:58 | 000,118,520 | ---- | M] (Riverbed Technology, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WinPcap\rpcapd.exe -- (rpcapd)
    SRV - [2012/09/23 20:43:36 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
    SRV - [2010/03/18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
    SRV - [2010/01/22 09:10:50 | 000,310,352 | ---- | M] (Dritek System Inc.) [Auto | Running] -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe -- (DsiWMIService)
    SRV - [2010/01/07 02:50:02 | 000,255,744 | ---- | M] (NewTech Infosystems, Inc.) [Auto | Running] -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe -- (NTI IScheduleSvc)
    SRV - [2009/12/24 02:39:04 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
    SRV - [2009/12/22 10:17:04 | 000,225,280 | ---- | M] () [Auto | Running] -- C:\ProgramData\DatacardService\DCService.exe -- (DCService.exe)
    SRV - [2009/12/09 09:48:26 | 002,320,920 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
    SRV - [2009/12/09 09:48:24 | 000,268,824 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
    SRV - [2009/09/10 14:42:46 | 000,305,448 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe -- (MWLService)
    SRV - [2009/08/28 10:38:58 | 001,150,496 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files (x86)\Acer\Registration\GregHSRW.exe -- (Greg_Service)
    SRV - [2009/07/24 20:38:50 | 000,189,728 | ---- | M] (Protexis Inc.) [Auto | Running] -- c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)
    SRV - [2009/06/10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


    ========== Driver Services (SafeList) ==========

    DRV:64bit: - [2013/03/27 22:39:08 | 000,029,696 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dtscsibus.sys -- (dtscsibus)
    DRV:64bit: - [2013/03/06 08:30:54 | 000,031,232 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tap0901.sys -- (tap0901)
    DRV:64bit: - [2013/03/01 02:49:12 | 000,036,600 | ---- | M] (Riverbed Technology, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\npf.sys -- (NPF)
    DRV:64bit: - [2013/02/12 15:02:24 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx)
    DRV:64bit: - [2012/12/15 12:03:17 | 000,009,216 | ---- | M] (SpeedJet Technology INC.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SjtWinIo.sys -- (SjtWinIo)
    DRV:64bit: - [2012/12/13 13:50:36 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
    DRV:64bit: - [2012/09/10 10:41:06 | 000,022,528 | ---- | M] (Apple Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netaapl64.sys -- (Netaapl)
    DRV:64bit: - [2012/08/21 13:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys


  • Advertisement
  • Options
    #7
    jsa112
    Registered Users Posts: 840 ✭✭✭jsa112


    bit of work to do sadly


    try uninstall these from control panel

    "iLivid" = iLivid
    "ilividtoolbargaw" = Search-Results Toolbar


    then run adwcleaner and post its log here

    http://www.bleepingcomputer.com/download/adwcleaner/


    then open OTL copy and paste this into the box


    :OTL
    IE:64bit: - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-results.com/sr?src...q={searchTerms}
    IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-results.com/sr?src...q={searchTerms}
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www.delta-search.com/?affID=1...F8C417FEDCF954
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?babsrc=HP...19357&tsp=4953
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013
    IE - HKCU\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013
    IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={search...19357&tsp=4953
    FF - prefs.js..browser.search.defaultenginename: "Search Results"
    FF - prefs.js..browser.search.order.1: "Search Results"
    FF - prefs.js..browser.search.selectedEngine: "Web Search"
    FF - prefs.js..browser.startup.homepage: "http://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=IE&userid=4321731e-450c-41fa-8c8f-f1721e45e917&searchtype=hp&installDate=08/04/2013&quot;
    FF - prefs.js..keyword.URL: "http://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=IE&userid=4321731e-450c-41fa-8c8f-f1721e45e917&searchtype=ds&installDate=08/04/2013&q=&quot;
    [2013/02/11 23:30:18 | 000,000,000 | ---D | M] (Search-Results Toolbar) -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\extensions\{377e5d4d-77e5-476a-8716-7e70a9272da0}
    [2013/03/27 22:40:27 | 000,000,000 | ---D | M] (Delta Toolbar) -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\extensions\ffxtlbr@delta.com
    [2013/07/24 20:32:50 | 000,006,507 | ---- | M] () -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\searchplugins\babylon.xml
    [2013/07/24 20:33:22 | 000,001,294 | ---- | M] () -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\searchplugins\delta.xml
    [2013/08/01 21:52:43 | 000,022,910 | ---- | M] () -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\searchplugins\Web Search.xml
    [2013/02/11 23:30:13 | 000,002,687 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\Search_Results.xml
    CHR - default_search_provider: Babylon (Enabled)
    CHR - default_search_provider: search_url = http://search.babylon.com/?q={search...19357&tsp=4953
    CHR - homepage: http://search.babylon.com/?babsrc=HP...19357&tsp=4953
    O2:64bit: - BHO: (DataMngr) - {C1ED9DA0-AFD0-4b90-AC6A-D3874F591014} - C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\BrowserConnection.dll (Bandoo Media Inc)
    O2 - BHO: (Search-Results Toolbar) - {377e5d4d-77e5-476a-8716-7e70a9272da0} - C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\searchresultsDx.dll (APN LLC)
    O2 - BHO: (delta Helper Object) - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.21.5\bh\delta.dll (Delta-search.com)
    O3 - HKLM\..\Toolbar: (Search-Results Toolbar) - {377e5d4d-77e5-476a-8716-7e70a9272da0} - C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\searchresultsDx.dll (APN LLC)
    O3 - HKLM\..\Toolbar: (Delta Toolbar) - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.21.5\deltaTlbr.dll (Delta-search.com)
    O4 - HKLM..\Run: [DATAMNGR] C:\Program Files (x86)\Search Results Toolbar\Datamngr\datamngrUI.exe (Bandoo Media Inc)
    O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\SEARCH~1\Datamngr\x64\datamngr.dll) - C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\datamngr.dll (Bandoo Media Inc)
    O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\SEARCH~1\Datamngr\x64\IEBHO.dll) - C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\IEBHO.dll (Bandoo Media Inc)
    O32 - AutoRun File - [2005/08/01 17:44:27 | 000,000,225 | R--- | M] () - E:\Autorun.inf -- [ CDFS ]
    O32 - AutoRun File - [2005/09/16 21:51:12 | 000,999,424 | R--- | M] (Microsoft Corporation) - E:\autorun.exe -- [ CDFS ]
    O32 - AutoRun File - [2013/01/03 16:15:15 | 000,000,063 | R--- | M] () - G:\autorun.inf -- [ CDFS ]
    O33 - MountPoints2\{09a4b0da-9709-11e2-83c0-80769500a8fb}\Shell - "" = AutoRun
    O33 - MountPoints2\{09a4b0da-9709-11e2-83c0-80769500a8fb}\Shell\AutoRun\command - "" = G:\AW-2012_Issues.exe -- [2011/07/20 10:09:40 | 001,508,864 | R--- | M] (Linasoft)
    O33 - MountPoints2\{483dc2d3-a38c-11e2-9e36-bbcbd1f4c210}\Shell - "" = AutoRun
    O33 - MountPoints2\{483dc2d3-a38c-11e2-9e36-bbcbd1f4c210}\Shell\AutoRun\command - "" = P:\ialaunch.exe id= ver=1.0.0.0
    O33 - MountPoints2\{a7fcbca0-9ef3-11e2-8122-ba18b1d23d4c}\Shell - "" = AutoRun
    O33 - MountPoints2\{a7fcbca0-9ef3-11e2-8122-ba18b1d23d4c}\Shell\AutoRun\command - "" = F:\AW-2012_Issues.exe
    O33 - MountPoints2\{c55ee43e-c4f8-11df-b58e-705ab646f6a0}\Shell - "" = AutoRun
    O33 - MountPoints2\{c55ee43e-c4f8-11df-b58e-705ab646f6a0}\Shell\AutoRun\command - "" = F:\AutoRun.exe
    O33 - MountPoints2\G\Shell - "" = AutoRun
    O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\AW-2012_Issues.exe -- [2011/07/20 10:09:40 | 001,508,864 | R--- | M] (Linasoft)
    [2013/03/27 22:40:06 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Babylon
    [2012/07/16 19:24:30 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Iqezt
    [2012/03/10 21:33:05 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Vso
    [2012/07/11 22:27:25 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Vyes

    :Commands
    [PURITY]
    [EMPTYTEMP]
    [EMPTYFLASH]
    [RESETHOSTS]
    [EMPTYJAVA]
    [CREATERESTOREPOINT]
    [Reboot]
    :Files
    ipconfig /flushdns /c


    click run fix post the log it gives.


  • Options
    #8
    Prizen
    Registered Users Posts: 44 ✭Prizen


    jsa112 wrote: »
    bit of work to do sadly


    try uninstall these from control panel

    "iLivid" = iLivid
    "ilividtoolbargaw" = Search-Results Toolbar


    then run adwcleaner and post its log here

    http://www.bleepingcomputer.com/download/adwcleaner/


    then open OTL copy and paste this into the box


    :OTL
    IE:64bit: - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-results.com/sr?src...q={searchTerms}
    IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-results.com/sr?src...q={searchTerms}
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www.delta-search.com/?affID=1...F8C417FEDCF954
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?babsrc=HP...19357&tsp=4953
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013
    IE - HKCU\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013
    IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={search...19357&tsp=4953
    FF - prefs.js..browser.search.defaultenginename: "Search Results"
    FF - prefs.js..browser.search.order.1: "Search Results"
    FF - prefs.js..browser.search.selectedEngine: "Web Search"
    FF - prefs.js..browser.startup.homepage: "http://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=IE&userid=4321731e-450c-41fa-8c8f-f1721e45e917&searchtype=hp&installDate=08/04/2013&quot;
    FF - prefs.js..keyword.URL: "http://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=IE&userid=4321731e-450c-41fa-8c8f-f1721e45e917&searchtype=ds&installDate=08/04/2013&q=&quot;
    [2013/02/11 23:30:18 | 000,000,000 | ---D | M] (Search-Results Toolbar) -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\extensions\{377e5d4d-77e5-476a-8716-7e70a9272da0}
    [2013/03/27 22:40:27 | 000,000,000 | ---D | M] (Delta Toolbar) -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\extensions\ffxtlbr@delta.com
    [2013/07/24 20:32:50 | 000,006,507 | ---- | M] () -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\searchplugins\babylon.xml
    [2013/07/24 20:33:22 | 000,001,294 | ---- | M] () -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\searchplugins\delta.xml
    [2013/08/01 21:52:43 | 000,022,910 | ---- | M] () -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\searchplugins\Web Search.xml
    [2013/02/11 23:30:13 | 000,002,687 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\Search_Results.xml
    CHR - default_search_provider: Babylon (Enabled)
    CHR - default_search_provider: search_url = http://search.babylon.com/?q={search...19357&tsp=4953
    CHR - homepage: http://search.babylon.com/?babsrc=HP...19357&tsp=4953
    O2:64bit: - BHO: (DataMngr) - {C1ED9DA0-AFD0-4b90-AC6A-D3874F591014} - C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\BrowserConnection.dll (Bandoo Media Inc)
    O2 - BHO: (Search-Results Toolbar) - {377e5d4d-77e5-476a-8716-7e70a9272da0} - C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\searchresultsDx.dll (APN LLC)
    O2 - BHO: (delta Helper Object) - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.21.5\bh\delta.dll (Delta-search.com)
    O3 - HKLM\..\Toolbar: (Search-Results Toolbar) - {377e5d4d-77e5-476a-8716-7e70a9272da0} - C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\searchresultsDx.dll (APN LLC)
    O3 - HKLM\..\Toolbar: (Delta Toolbar) - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.21.5\deltaTlbr.dll (Delta-search.com)
    O4 - HKLM..\Run: [DATAMNGR] C:\Program Files (x86)\Search Results Toolbar\Datamngr\datamngrUI.exe (Bandoo Media Inc)
    O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\SEARCH~1\Datamngr\x64\datamngr.dll) - C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\datamngr.dll (Bandoo Media Inc)
    O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\SEARCH~1\Datamngr\x64\IEBHO.dll) - C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\IEBHO.dll (Bandoo Media Inc)
    O32 - AutoRun File - [2005/08/01 17:44:27 | 000,000,225 | R--- | M] () - E:\Autorun.inf -- [ CDFS ]
    O32 - AutoRun File - [2005/09/16 21:51:12 | 000,999,424 | R--- | M] (Microsoft Corporation) - E:\autorun.exe -- [ CDFS ]
    O32 - AutoRun File - [2013/01/03 16:15:15 | 000,000,063 | R--- | M] () - G:\autorun.inf -- [ CDFS ]
    O33 - MountPoints2\{09a4b0da-9709-11e2-83c0-80769500a8fb}\Shell - "" = AutoRun
    O33 - MountPoints2\{09a4b0da-9709-11e2-83c0-80769500a8fb}\Shell\AutoRun\command - "" = G:\AW-2012_Issues.exe -- [2011/07/20 10:09:40 | 001,508,864 | R--- | M] (Linasoft)
    O33 - MountPoints2\{483dc2d3-a38c-11e2-9e36-bbcbd1f4c210}\Shell - "" = AutoRun
    O33 - MountPoints2\{483dc2d3-a38c-11e2-9e36-bbcbd1f4c210}\Shell\AutoRun\command - "" = P:\ialaunch.exe id= ver=1.0.0.0
    O33 - MountPoints2\{a7fcbca0-9ef3-11e2-8122-ba18b1d23d4c}\Shell - "" = AutoRun
    O33 - MountPoints2\{a7fcbca0-9ef3-11e2-8122-ba18b1d23d4c}\Shell\AutoRun\command - "" = F:\AW-2012_Issues.exe
    O33 - MountPoints2\{c55ee43e-c4f8-11df-b58e-705ab646f6a0}\Shell - "" = AutoRun
    O33 - MountPoints2\{c55ee43e-c4f8-11df-b58e-705ab646f6a0}\Shell\AutoRun\command - "" = F:\AutoRun.exe
    O33 - MountPoints2\G\Shell - "" = AutoRun
    O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\AW-2012_Issues.exe -- [2011/07/20 10:09:40 | 001,508,864 | R--- | M] (Linasoft)
    [2013/03/27 22:40:06 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Babylon
    [2012/07/16 19:24:30 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Iqezt
    [2012/03/10 21:33:05 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Vso
    [2012/07/11 22:27:25 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Vyes

    :Commands
    [PURITY]
    [EMPTYTEMP]
    [EMPTYFLASH]
    [RESETHOSTS]
    [EMPTYJAVA]
    [CREATERESTOREPOINT]
    [Reboot]
    :Files
    ipconfig /flushdns /c


    click run fix post the log it gives.

    heres the otl log after fix

    All processes killed
    Error: Unable to interpret <IE:64bit: - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-results.com/sr?src...q={searchTerms}> in the current context!
    Error: Unable to interpret <IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-results.com/sr?src...q={searchTerms}> in the current context!
    Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www.delta-search.com/?affID=1...F8C417FEDCF954> in the current context!
    Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013> in the current context!
    Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013> in the current context!
    Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?babsrc=HP...19357&tsp=4953> in the current context!
    Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013> in the current context!
    Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013> in the current context!
    Error: Unable to interpret <IE - HKCU\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013> in the current context!
    Error: Unable to interpret <IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={search...19357&tsp=4953> in the current context!
    Error: Unable to interpret <FF - prefs.js..browser.search.defaultenginename: "Search Results"> in the current context!
    Error: Unable to interpret <FF - prefs.js..browser.search.order.1: "Search Results"> in the current context!
    Error: Unable to interpret <FF - prefs.js..browser.search.selectedEngine: "Web Search"> in the current context!
    Error: Unable to interpret <FF - prefs.js..browser.startup.homepage: "http://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=IE&userid=4321731e-450c-41fa-8c8f-f1721e45e917&searchtype=hp&installDate=08/04/2013"&gt; in the current context!
    Error: Unable to interpret <FF - prefs.js..keyword.URL: "http://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=IE&userid=4321731e-450c-41fa-8c8f-f1721e45e917&searchtype=ds&installDate=08/04/2013&q="&gt; in the current context!
    Error: Unable to interpret <[2013/02/11 23:30:18 | 000,000,000 | ---D | M] (Search-Results Toolbar) -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\extensions\{377e5d4d-77e5-476a-8716-7e70a9272da0}> in the current context!
    Error: Unable to interpret <[2013/03/27 22:40:27 | 000,000,000 | ---D | M] (Delta Toolbar) -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\extensions\ffxtlbr@delta.com> in the current context!
    Error: Unable to interpret <[2013/07/24 20:32:50 | 000,006,507 | ---- | M] () -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\searchplugins\babylon.xml> in the current context!
    Error: Unable to interpret <[2013/07/24 20:33:22 | 000,001,294 | ---- | M] () -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\searchplugins\delta.xml> in the current context!
    Error: Unable to interpret <[2013/08/01 21:52:43 | 000,022,910 | ---- | M] () -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\searchplugins\Web Search.xml> in the current context!
    Error: Unable to interpret <[2013/02/11 23:30:13 | 000,002,687 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\Search_Results.xml> in the current context!
    Error: Unable to interpret <CHR - default_search_provider: Babylon (Enabled)> in the current context!
    Error: Unable to interpret <CHR - default_search_provider: search_url = http://search.babylon.com/?q={search...19357&tsp=4953> in the current context!
    Error: Unable to interpret <CHR - homepage: http://search.babylon.com/?babsrc=HP...19357&tsp=4953> in the current context!
    Error: Unable to interpret <O2:64bit: - BHO: (DataMngr) - {C1ED9DA0-AFD0-4b90-AC6A-D3874F591014} - C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\BrowserConnection.dll (Bandoo Media Inc)> in the current context!
    Error: Unable to interpret <O2 - BHO: (Search-Results Toolbar) - {377e5d4d-77e5-476a-8716-7e70a9272da0} - C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\searchresultsDx.dll (APN LLC)> in the current context!
    Error: Unable to interpret <O2 - BHO: (delta Helper Object) - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.21.5\bh\delta.dll (Delta-search.com)> in the current context!
    Error: Unable to interpret <O3 - HKLM\..\Toolbar: (Search-Results Toolbar) - {377e5d4d-77e5-476a-8716-7e70a9272da0} - C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\searchresultsDx.dll (APN LLC)> in the current context!
    Error: Unable to interpret <O3 - HKLM\..\Toolbar: (Delta Toolbar) - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.21.5\deltaTlbr.dll (Delta-search.com)> in the current context!
    Error: Unable to interpret <O4 - HKLM..\Run: [DATAMNGR] C:\Program Files (x86)\Search Results Toolbar\Datamngr\datamngrUI.exe (Bandoo Media Inc)> in the current context!
    Error: Unable to interpret <O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\SEARCH~1\Datamngr\x64\datamngr.dll) - C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\datamngr.dll (Bandoo Media Inc)> in the current context!
    Error: Unable to interpret <O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\SEARCH~1\Datamngr\x64\IEBHO.dll) - C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\IEBHO.dll (Bandoo Media Inc)> in the current context!
    Error: Unable to interpret <O32 - AutoRun File - [2005/08/01 17:44:27 | 000,000,225 | R--- | M] () - E:\Autorun.inf -- [ CDFS ]> in the current context!
    Error: Unable to interpret <O32 - AutoRun File - [2005/09/16 21:51:12 | 000,999,424 | R--- | M] (Microsoft Corporation) - E:\autorun.exe -- [ CDFS ]> in the current context!
    Error: Unable to interpret <O32 - AutoRun File - [2013/01/03 16:15:15 | 000,000,063 | R--- | M] () - G:\autorun.inf -- [ CDFS ]> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{09a4b0da-9709-11e2-83c0-80769500a8fb}\Shell - "" = AutoRun> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{09a4b0da-9709-11e2-83c0-80769500a8fb}\Shell\AutoRun\command - "" = G:\AW-2012_Issues.exe -- [2011/07/20 10:09:40 | 001,508,864 | R--- | M] (Linasoft)> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{483dc2d3-a38c-11e2-9e36-bbcbd1f4c210}\Shell - "" = AutoRun> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{483dc2d3-a38c-11e2-9e36-bbcbd1f4c210}\Shell\AutoRun\command - "" = P:\ialaunch.exe id= ver=1.0.0.0> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{a7fcbca0-9ef3-11e2-8122-ba18b1d23d4c}\Shell - "" = AutoRun> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{a7fcbca0-9ef3-11e2-8122-ba18b1d23d4c}\Shell\AutoRun\command - "" = F:\AW-2012_Issues.exe> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{c55ee43e-c4f8-11df-b58e-705ab646f6a0}\Shell - "" = AutoRun> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{c55ee43e-c4f8-11df-b58e-705ab646f6a0}\Shell\AutoRun\command - "" = F:\AutoRun.exe> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\G\Shell - "" = AutoRun> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\AW-2012_Issues.exe -- [2011/07/20 10:09:40 | 001,508,864 | R--- | M] (Linasoft)> in the current context!
    Error: Unable to interpret <[2013/03/27 22:40:06 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Babylon> in the current context!
    Error: Unable to interpret <[2012/07/16 19:24:30 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Iqezt> in the current context!
    Error: Unable to interpret <[2012/03/10 21:33:05 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Vso> in the current context!
    Error: Unable to interpret <[2012/07/11 22:27:25 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Vyes> in the current context!
    ========== COMMANDS ==========

    [EMPTYTEMP]

    User: All Users

    User: Default
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 33170 bytes
    ->Flash cache emptied: 57472 bytes

    User: Default User
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->Flash cache emptied: 0 bytes

    User: Finnian
    ->Temp folder emptied: 185732217 bytes
    ->Temporary Internet Files folder emptied: 120892003 bytes
    ->Java cache emptied: 0 bytes
    ->FireFox cache emptied: 67561023 bytes
    ->Google Chrome cache emptied: 365640421 bytes
    ->Flash cache emptied: 128075 bytes

    User: Guest
    ->Temp folder emptied: 853375228 bytes
    ->Temporary Internet Files folder emptied: 74739846 bytes
    ->Java cache emptied: 5388 bytes
    ->FireFox cache emptied: 47498815 bytes
    ->Google Chrome cache emptied: 15087805 bytes
    ->Flash cache emptied: 13912 bytes

    User: Public

    User: Áine
    ->Temp folder emptied: 6150353245 bytes
    ->Temporary Internet Files folder emptied: 304742812 bytes
    ->Java cache emptied: 1 bytes
    ->FireFox cache emptied: 118220238 bytes
    ->Google Chrome cache emptied: 10190219 bytes
    ->Flash cache emptied: 8196715 bytes

    %systemdrive% .tmp files removed: 0 bytes
    %systemroot% .tmp files removed: 0 bytes
    %systemroot%\System32 .tmp files removed: 0 bytes
    %systemroot%\System32 (64bit) .tmp files removed: 0 bytes
    %systemroot%\System32\drivers .tmp files removed: 0 bytes
    Windows Temp folder emptied: 340970365 bytes
    %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 36068535 bytes
    RecycleBin emptied: 4298367122 bytes

    Total Files Cleaned = 12,396.00 mb


    [EMPTYFLASH]

    User: All Users

    User: Default
    ->Flash cache emptied: 0 bytes

    User: Default User
    ->Flash cache emptied: 0 bytes

    User: Finnian
    ->Flash cache emptied: 0 bytes

    User: Guest
    ->Flash cache emptied: 0 bytes

    User: Public

    User: Áine
    ->Flash cache emptied: 0 bytes

    Total Flash Files Cleaned = 0.00 mb

    C:\Windows\System32\drivers\etc\Hosts moved successfully.
    HOSTS file reset successfully

    [EMPTYJAVA]

    User: All Users

    User: Default

    User: Default User

    User: Finnian
    ->Java cache emptied: 0 bytes

    User: Guest
    ->Java cache emptied: 0 bytes

    User: Public

    User: Áine
    ->Java cache emptied: 0 bytes

    Total Java Files Cleaned = 0.00 mb

    Restore point Set: OTL Restore Point
    ========== FILES ==========
    < ipconfig /flushdns /c >
    No captured output from command...
    C:\Users\Áine\Downloads\cmd.bat deleted successfully.

    OTL by OldTimer - Version 3.2.69.0 log created on 08042013_174908

    Files\Folders moved on Reboot...
    C:\Users\Áine\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
    File move failed. C:\Windows\temp\dsiwmis.log scheduled to be moved on reboot.

    PendingFileRenameOperations files...

    Registry entries deleted on Reboot...


  • Options
    #9
    Prizen
    Registered Users Posts: 44 ✭Prizen


    Prizen wrote: »
    heres the otl log after fix

    All processes killed
    Error: Unable to interpret <IE:64bit: - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-results.com/sr?src...q={searchTerms}> in the current context!
    Error: Unable to interpret <IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-results.com/sr?src...q={searchTerms}> in the current context!
    Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www.delta-search.com/?affID=1...F8C417FEDCF954> in the current context!
    Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013> in the current context!
    Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013> in the current context!
    Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?babsrc=HP...19357&tsp=4953> in the current context!
    Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013> in the current context!
    Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013> in the current context!
    Error: Unable to interpret <IE - HKCU\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013> in the current context!
    Error: Unable to interpret <IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={search...19357&tsp=4953> in the current context!
    Error: Unable to interpret <FF - prefs.js..browser.search.defaultenginename: "Search Results"> in the current context!
    Error: Unable to interpret <FF - prefs.js..browser.search.order.1: "Search Results"> in the current context!
    Error: Unable to interpret <FF - prefs.js..browser.search.selectedEngine: "Web Search"> in the current context!
    Error: Unable to interpret <FF - prefs.js..browser.startup.homepage: "http://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=IE&userid=4321731e-450c-41fa-8c8f-f1721e45e917&searchtype=hp&installDate=08/04/2013"&gt; in the current context!
    Error: Unable to interpret <FF - prefs.js..keyword.URL: "http://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=IE&userid=4321731e-450c-41fa-8c8f-f1721e45e917&searchtype=ds&installDate=08/04/2013&q="&gt; in the current context!
    Error: Unable to interpret <[2013/02/11 23:30:18 | 000,000,000 | ---D | M] (Search-Results Toolbar) -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\extensions\{377e5d4d-77e5-476a-8716-7e70a9272da0}> in the current context!
    Error: Unable to interpret <[2013/03/27 22:40:27 | 000,000,000 | ---D | M] (Delta Toolbar) -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\extensions\ffxtlbr@delta.com> in the current context!
    Error: Unable to interpret <[2013/07/24 20:32:50 | 000,006,507 | ---- | M] () -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\searchplugins\babylon.xml> in the current context!
    Error: Unable to interpret <[2013/07/24 20:33:22 | 000,001,294 | ---- | M] () -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\searchplugins\delta.xml> in the current context!
    Error: Unable to interpret <[2013/08/01 21:52:43 | 000,022,910 | ---- | M] () -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\searchplugins\Web Search.xml> in the current context!
    Error: Unable to interpret <[2013/02/11 23:30:13 | 000,002,687 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\Search_Results.xml> in the current context!
    Error: Unable to interpret <CHR - default_search_provider: Babylon (Enabled)> in the current context!
    Error: Unable to interpret <CHR - default_search_provider: search_url = http://search.babylon.com/?q={search...19357&tsp=4953> in the current context!
    Error: Unable to interpret <CHR - homepage: http://search.babylon.com/?babsrc=HP...19357&tsp=4953> in the current context!
    Error: Unable to interpret <O2:64bit: - BHO: (DataMngr) - {C1ED9DA0-AFD0-4b90-AC6A-D3874F591014} - C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\BrowserConnection.dll (Bandoo Media Inc)> in the current context!
    Error: Unable to interpret <O2 - BHO: (Search-Results Toolbar) - {377e5d4d-77e5-476a-8716-7e70a9272da0} - C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\searchresultsDx.dll (APN LLC)> in the current context!
    Error: Unable to interpret <O2 - BHO: (delta Helper Object) - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.21.5\bh\delta.dll (Delta-search.com)> in the current context!
    Error: Unable to interpret <O3 - HKLM\..\Toolbar: (Search-Results Toolbar) - {377e5d4d-77e5-476a-8716-7e70a9272da0} - C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\searchresultsDx.dll (APN LLC)> in the current context!
    Error: Unable to interpret <O3 - HKLM\..\Toolbar: (Delta Toolbar) - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.21.5\deltaTlbr.dll (Delta-search.com)> in the current context!
    Error: Unable to interpret <O4 - HKLM..\Run: [DATAMNGR] C:\Program Files (x86)\Search Results Toolbar\Datamngr\datamngrUI.exe (Bandoo Media Inc)> in the current context!
    Error: Unable to interpret <O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\SEARCH~1\Datamngr\x64\datamngr.dll) - C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\datamngr.dll (Bandoo Media Inc)> in the current context!
    Error: Unable to interpret <O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\SEARCH~1\Datamngr\x64\IEBHO.dll) - C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\IEBHO.dll (Bandoo Media Inc)> in the current context!
    Error: Unable to interpret <O32 - AutoRun File - [2005/08/01 17:44:27 | 000,000,225 | R--- | M] () - E:\Autorun.inf -- [ CDFS ]> in the current context!
    Error: Unable to interpret <O32 - AutoRun File - [2005/09/16 21:51:12 | 000,999,424 | R--- | M] (Microsoft Corporation) - E:\autorun.exe -- [ CDFS ]> in the current context!
    Error: Unable to interpret <O32 - AutoRun File - [2013/01/03 16:15:15 | 000,000,063 | R--- | M] () - G:\autorun.inf -- [ CDFS ]> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{09a4b0da-9709-11e2-83c0-80769500a8fb}\Shell - "" = AutoRun> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{09a4b0da-9709-11e2-83c0-80769500a8fb}\Shell\AutoRun\command - "" = G:\AW-2012_Issues.exe -- [2011/07/20 10:09:40 | 001,508,864 | R--- | M] (Linasoft)> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{483dc2d3-a38c-11e2-9e36-bbcbd1f4c210}\Shell - "" = AutoRun> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{483dc2d3-a38c-11e2-9e36-bbcbd1f4c210}\Shell\AutoRun\command - "" = P:\ialaunch.exe id= ver=1.0.0.0> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{a7fcbca0-9ef3-11e2-8122-ba18b1d23d4c}\Shell - "" = AutoRun> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{a7fcbca0-9ef3-11e2-8122-ba18b1d23d4c}\Shell\AutoRun\command - "" = F:\AW-2012_Issues.exe> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{c55ee43e-c4f8-11df-b58e-705ab646f6a0}\Shell - "" = AutoRun> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{c55ee43e-c4f8-11df-b58e-705ab646f6a0}\Shell\AutoRun\command - "" = F:\AutoRun.exe> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\G\Shell - "" = AutoRun> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\AW-2012_Issues.exe -- [2011/07/20 10:09:40 | 001,508,864 | R--- | M] (Linasoft)> in the current context!
    Error: Unable to interpret <[2013/03/27 22:40:06 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Babylon> in the current context!
    Error: Unable to interpret <[2012/07/16 19:24:30 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Iqezt> in the current context!
    Error: Unable to interpret <[2012/03/10 21:33:05 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Vso> in the current context!
    Error: Unable to interpret <[2012/07/11 22:27:25 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Vyes> in the current context!
    ========== COMMANDS ==========

    [EMPTYTEMP]

    User: All Users

    User: Default
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 33170 bytes
    ->Flash cache emptied: 57472 bytes

    User: Default User
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->Flash cache emptied: 0 bytes

    User: Finnian
    ->Temp folder emptied: 185732217 bytes
    ->Temporary Internet Files folder emptied: 120892003 bytes
    ->Java cache emptied: 0 bytes
    ->FireFox cache emptied: 67561023 bytes
    ->Google Chrome cache emptied: 365640421 bytes
    ->Flash cache emptied: 128075 bytes

    User: Guest
    ->Temp folder emptied: 853375228 bytes
    ->Temporary Internet Files folder emptied: 74739846 bytes
    ->Java cache emptied: 5388 bytes
    ->FireFox cache emptied: 47498815 bytes
    ->Google Chrome cache emptied: 15087805 bytes
    ->Flash cache emptied: 13912 bytes

    User: Public

    User: Áine
    ->Temp folder emptied: 6150353245 bytes
    ->Temporary Internet Files folder emptied: 304742812 bytes
    ->Java cache emptied: 1 bytes
    ->FireFox cache emptied: 118220238 bytes
    ->Google Chrome cache emptied: 10190219 bytes
    ->Flash cache emptied: 8196715 bytes

    %systemdrive% .tmp files removed: 0 bytes
    %systemroot% .tmp files removed: 0 bytes
    %systemroot%\System32 .tmp files removed: 0 bytes
    %systemroot%\System32 (64bit) .tmp files removed: 0 bytes
    %systemroot%\System32\drivers .tmp files removed: 0 bytes
    Windows Temp folder emptied: 340970365 bytes
    %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 36068535 bytes
    RecycleBin emptied: 4298367122 bytes

    Total Files Cleaned = 12,396.00 mb


    [EMPTYFLASH]

    User: All Users

    User: Default
    ->Flash cache emptied: 0 bytes

    User: Default User
    ->Flash cache emptied: 0 bytes

    User: Finnian
    ->Flash cache emptied: 0 bytes

    User: Guest
    ->Flash cache emptied: 0 bytes

    User: Public

    User: Áine
    ->Flash cache emptied: 0 bytes

    Total Flash Files Cleaned = 0.00 mb

    C:\Windows\System32\drivers\etc\Hosts moved successfully.
    HOSTS file reset successfully

    [EMPTYJAVA]

    User: All Users

    User: Default

    User: Default User

    User: Finnian
    ->Java cache emptied: 0 bytes

    User: Guest
    ->Java cache emptied: 0 bytes

    User: Public

    User: Áine
    ->Java cache emptied: 0 bytes

    Total Java Files Cleaned = 0.00 mb

    Restore point Set: OTL Restore Point
    ========== FILES ==========
    < ipconfig /flushdns /c >
    No captured output from command...
    C:\Users\Áine\Downloads\cmd.bat deleted successfully.

    OTL by OldTimer - Version 3.2.69.0 log created on 08042013_174908

    Files\Folders moved on Reboot...
    C:\Users\Áine\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
    File move failed. C:\Windows\temp\dsiwmis.log scheduled to be moved on reboot.

    PendingFileRenameOperations files...

    Registry entries deleted on Reboot...

    and here is the adware cleaner log

    # AdwCleaner v2.306 - Logfile created 08/05/2013 at 20:59:36
    # Updated 19/07/2013 by Xplode
    # Operating system : Windows 7 Home Premium (64 bits)
    # User : Áine - FINNIAN-PC
    # Boot Mode : Normal
    # Running from : C:\Users\Áine\Downloads\AdwCleaner.exe
    # Option [Search]


    ***** [Services] *****

    Found : SProtection

    ***** [Files / Folders] *****

    File Found : C:\Program Files (x86)\Mozilla Firefox\defaults\pref\all-iminent.js
    File Found : C:\Program Files (x86)\Mozilla FireFox\searchplugins\Search_Results.xml
    File Found : C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\extensions\webbooster@iminent.com.xpi
    File Found : C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\searchplugins\Babylon.xml
    File Found : C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\searchplugins\Web Search.xml
    File Found : C:\Users\Áine\Desktop\Check for Updates.lnk
    File Found : C:\Users\Áine\Desktop\Optimizer Pro.lnk
    File Found : C:\Users\Finnian\AppData\Roaming\Mozilla\Firefox\Profiles\9ja47w74.default\extensions\webbooster@iminent.com.xpi
    Folder Found : C:\Program Files (x86)\Ask.com
    Folder Found : C:\Program Files (x86)\Common Files\Umbrella
    Folder Found : C:\Program Files (x86)\Conduit
    Folder Found : C:\Program Files (x86)\ConduitEngine
    Folder Found : C:\Program Files (x86)\delta
    Folder Found : C:\Program Files (x86)\FilesFrog Update Checker
    Folder Found : C:\Program Files (x86)\Iminent
    Folder Found : C:\Program Files (x86)\LyricsTube
    Folder Found : C:\Program Files (x86)\Mozilla Firefox\extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}
    Folder Found : C:\Program Files (x86)\optimizer pro
    Folder Found : C:\Program Files (x86)\Search Results Toolbar
    Folder Found : C:\Program Files (x86)\SingAlong
    Folder Found : C:\Program Files (x86)\uTorrentBar
    Folder Found : C:\Program Files (x86)\Winamp Toolbar
    Folder Found : C:\ProgramData\Babylon
    Folder Found : C:\ProgramData\boost_interprocess
    Folder Found : C:\ProgramData\BrowserProtect
    Folder Found : C:\ProgramData\Iminent
    Folder Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Iminent
    Folder Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\optimizer pro
    Folder Found : C:\ProgramData\Partner
    Folder Found : C:\ProgramData\Tarma Installer
    Folder Found : C:\ProgramData\Winamp Toolbar
    Folder Found : C:\Users\Áine\AppData\Local\Bundled software uninstaller
    Folder Found : C:\Users\Áine\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl
    Folder Found : C:\Users\Áine\AppData\Local\Red Sky
    Folder Found : C:\Users\Áine\AppData\Local\Smartbar
    Folder Found : C:\Users\Áine\AppData\Local\Winamp Toolbar
    Folder Found : C:\Users\Áine\AppData\LocalLow\AskToolbar
    Folder Found : C:\Users\Áine\AppData\LocalLow\Conduit
    Folder Found : C:\Users\Áine\AppData\LocalLow\ConduitEngine
    Folder Found : C:\Users\Áine\AppData\LocalLow\delta
    Folder Found : C:\Users\Áine\AppData\LocalLow\PriceGong
    Folder Found : C:\Users\Áine\AppData\LocalLow\searchresultstb
    Folder Found : C:\Users\Áine\AppData\LocalLow\Smartbar
    Folder Found : C:\Users\Áine\AppData\LocalLow\uTorrentBar
    Folder Found : C:\Users\Áine\AppData\Roaming\BabSolution
    Folder Found : C:\Users\Áine\AppData\Roaming\Babylon
    Folder Found : C:\Users\Áine\AppData\Roaming\delta
    Folder Found : C:\Users\Áine\AppData\Roaming\Iminent
    Folder Found : C:\Users\Áine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker
    Folder Found : C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\extensions\{1fd91a9c-410c-4090-bbcc-55d3450ef433}
    Folder Found : C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\extensions\ffxtlbr@babylon.com
    Folder Found : C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\extensions\ffxtlbr@delta.com
    Folder Found : C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\extensions\plugin@getwebcake.com
    Folder Found : C:\Users\Áine\AppData\Roaming\optimizer pro
    Folder Found : C:\Users\Finnian\AppData\Local\AskToolbar
    Folder Found : C:\Users\Finnian\AppData\Local\Winamp Toolbar
    Folder Found : C:\Users\Finnian\AppData\LocalLow\AskToolbar
    Folder Found : C:\Users\Finnian\AppData\LocalLow\Conduit
    Folder Found : C:\Users\Finnian\AppData\LocalLow\ConduitEngine
    Folder Found : C:\Users\Finnian\AppData\LocalLow\PriceGong
    Folder Found : C:\Users\Finnian\AppData\LocalLow\uTorrentBar
    Folder Found : C:\Users\Finnian\AppData\Roaming\Mozilla\Firefox\Profiles\9ja47w74.default\Conduit
    Folder Found : C:\Users\Finnian\AppData\Roaming\Mozilla\Firefox\Profiles\9ja47w74.default\ConduitEngine
    Folder Found : C:\Users\Finnian\AppData\Roaming\Mozilla\Firefox\Profiles\9ja47w74.default\CT2786678
    Folder Found : C:\Users\Finnian\AppData\Roaming\Mozilla\Firefox\Profiles\9ja47w74.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
    Folder Found : C:\Users\Finnian\AppData\Roaming\Mozilla\Firefox\Profiles\9ja47w74.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
    Folder Found : C:\Users\Finnian\AppData\Roaming\Mozilla\Firefox\Profiles\9ja47w74.default\extensions\engine@conduit.com
    Folder Found : C:\Users\Finnian\AppData\Roaming\Mozilla\Firefox\Profiles\9ja47w74.default\extensions\staged
    Folder Found : C:\Users\Finnian\AppData\Roaming\Mozilla\Firefox\Profiles\9ja47w74.default\WinampToolbarData
    Folder Found : C:\Users\INE~1\AppData\Local\Temp\boost_interprocess
    Folder Found : C:\Users\INE~1\AppData\Local\Temp\Smartbar
    Folder Found : C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

    ***** [Registry] *****

    Data Found : [x64] HKLM\..\Windows [AppInit_DLLs] = C:\PROGRA~2\SEARCH~1\Datamngr\x64\datamngr.dll
    Data Found : [x64] HKLM\..\Windows [AppInit_DLLs] = C:\PROGRA~2\SEARCH~1\Datamngr\x64\IEBHO.dll
    Data Found : [x64] HKLM\..\Windows [AppInit_DLLs] = C:\PROGRA~3\Wincert\WIN64C~1.DLL
    Data Found : HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\browse~1\261125~1.80\{c16c1~1\browse~1.dll
    Data Found : HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\wincert\win32c~1.dll
    Key Found : HKCU\Software\APN DTX
    Key Found : HKCU\Software\AppDataLow\Software\AskToolbar
    Key Found : HKCU\Software\AppDataLow\Software\Conduit
    Key Found : HKCU\Software\AppDataLow\Software\conduitEngine
    Key Found : HKCU\Software\AppDataLow\Software\conduitEngine
    Key Found : HKCU\Software\AppDataLow\Software\PriceGong
    Key Found : HKCU\Software\AppDataLow\Software\uTorrentBar
    Key Found : HKCU\Software\BabSolution
    Key Found : HKCU\Software\BI
    Key Found : HKCU\Software\DataMngr
    Key Found : HKCU\Software\DataMngr_Toolbar
    Key Found : HKCU\Software\Delta
    Key Found : HKCU\Software\Google\Chrome\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl
    Key Found : HKCU\Software\ilivid
    Key Found : HKCU\Software\Iminent
    Key Found : HKCU\Software\InstallCore
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{377E5D4D-77E5-476A-8716-7E70A9272DA0}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6492E171-2427-4932-B414-33574A089F5E}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{377E5D4D-77E5-476A-8716-7E70A9272DA0}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4750F804-201E-4B6D-A2B5-A952CD965525}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6492E171-2427-4932-B414-33574A089F5E}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1ED9DA0-AFD0-4B90-AC6A-D3874F591014}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}
    Key Found : HKCU\Software\Optimizer Pro
    Key Found : HKCU\Software\SmartBar
    Key Found : HKCU\Software\SmartbarBackup
    Key Found : HKCU\Software\SmartbarLog
    Key Found : HKCU\Software\Somoto
    Key Found : HKCU\Software\Winamp Toolbar
    Key Found : HKCU\Software\5ae88d1b538ed12
    Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
    Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
    Key Found : HKLM\Software\Babylon
    Key Found : HKLM\SOFTWARE\Classes\AppID\{01994268-3C10-4044-A1EA-7A9C1B739A11}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{7169BBB3-3289-4696-B35D-4A88BCF6FB12}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{B27D9527-3762-4D71-963D-FB7A94FDD678}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{D97A8234-F2A2-4AD4-91D5-FECDB2C553AF}
    Key Found : HKLM\SOFTWARE\Classes\AppID\BrowserConnection.dll
    Key Found : HKLM\SOFTWARE\Classes\AppID\escort.DLL
    Key Found : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
    Key Found : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
    Key Found : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
    Key Found : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
    Key Found : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
    Key Found : HKLM\SOFTWARE\Classes\AppID\Iminent.WebBooster.InternetExplorer.DLL
    Key Found : HKLM\SOFTWARE\Classes\AppID\winamptbServer.exe
    Key Found : HKLM\SOFTWARE\Classes\Applications\ilividsetup.exe
    Key Found : HKLM\SOFTWARE\Classes\Conduit.Engine
    Key Found : HKLM\SOFTWARE\Classes\delta.deltaappCore
    Key Found : HKLM\SOFTWARE\Classes\delta.deltaappCore.1
    Key Found : HKLM\SOFTWARE\Classes\delta.deltadskBnd
    Key Found : HKLM\SOFTWARE\Classes\delta.deltadskBnd.1
    Key Found : HKLM\SOFTWARE\Classes\delta.deltaHlpr
    Key Found : HKLM\SOFTWARE\Classes\delta.deltaHlpr.1
    Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane
    Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
    Key Found : HKLM\SOFTWARE\Classes\esrv.deltaESrvc
    Key Found : HKLM\SOFTWARE\Classes\esrv.deltaESrvc.1
    Key Found : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
    Key Found : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
    Key Found : HKLM\SOFTWARE\Classes\IESmartBar.BandObjectAttribute
    Key Found : HKLM\SOFTWARE\Classes\IESmartBar.BHO
    Key Found : HKLM\SOFTWARE\Classes\IESmartBar.DockingPanel
    Key Found : HKLM\SOFTWARE\Classes\IESmartBar.IESmartBar
    Key Found : HKLM\SOFTWARE\Classes\IESmartBar.IESmartBarBandObject
    Key Found : HKLM\SOFTWARE\Classes\IESmartBar.SmartbarDisplayState
    Key Found : HKLM\SOFTWARE\Classes\IESmartBar.SmartbarMenuForm
    Key Found : HKLM\SOFTWARE\Classes\iLividIEHelper.DNSGuard
    Key Found : HKLM\SOFTWARE\Classes\iLividIEHelper.DNSGuard.1
    Key Found : HKLM\SOFTWARE\Classes\Iminent
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.DownloadArgs
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.LinkToPromoteArgs
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.RawDataArgs
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.TinyUrlArgs
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.ViralLinkArgs
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.ClientCallback
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.ContractBase
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.AddToUserContentCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.CheckLoginStatusCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.CleanCacheCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GameOverCallback
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetCreditCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetInstallationContextCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetLoginStatusCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetLoginStatusResult
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetVariableCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetVariableResult
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.InstallationContextResult
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LoadContentCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LoadContentCommandResult
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LoginCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LoginStatusChangedCallback
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LogoutCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.MergeIdentityCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.MyAccountCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.PlayContentCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.PostContentCallback
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.RecycleViewsCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.SetVariableCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.ShowBrowserWindowCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.ShowControlCenterCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.ShowPluginWindowCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.TestContentCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.UserContentChangedCallback
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.VariableChangedCallback
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.WarmUpCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.WelcomeCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.ServerCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.ServerResult
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.LightContent
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.LightUri
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.MediatorServiceProxy
    Key Found : HKLM\SOFTWARE\Classes\IminentWebBooster.ActiveContentHandle.1
    Key Found : HKLM\SOFTWARE\Classes\IminentWebBooster.ActiveContentHandler
    Key Found : HKLM\SOFTWARE\Classes\IminentWebBooster.BrowserHelperObject
    Key Found : HKLM\SOFTWARE\Classes\IminentWebBooster.BrowserHelperObject.1
    Key Found : HKLM\SOFTWARE\Classes\IminentWebBooster.ScriptExtender
    Key Found : HKLM\SOFTWARE\Classes\IminentWebBooster.ScriptExtender.1
    Key Found : HKLM\SOFTWARE\Classes\IminentWebBooster.TinyUrlHandler
    Key Found : HKLM\SOFTWARE\Classes\IminentWebBooster.TinyUrlHandler.1
    Key Found : HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
    Key Found : HKLM\Software\Classes\Installer\Features\ACFD5B980E184AE4A8A0F404781ADD00
    Key Found : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
    Key Found : HKLM\Software\Classes\Installer\Products\ACFD5B980E184AE4A8A0F404781ADD00
    Key Found : HKLM\SOFTWARE\Classes\Prod.cap
    Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT2786678
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{538CD77C-BFDD-49B0-9562-77419CAB89D1}
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{75E8DA27-44AF-40AE-927C-F2EEC99D65B1}
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{A9CAF365-EA35-45DA-BD8B-2EFA09D374AC}
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
    Key Found : HKLM\SOFTWARE\Classes\WinampTb.AOLTBSearch
    Key Found : HKLM\SOFTWARE\Classes\WinampTb.AOLTBSearch.1
    Key Found : HKLM\SOFTWARE\Classes\WinampTb.AOLToolBand
    Key Found : HKLM\SOFTWARE\Classes\WinampTb.AOLToolBand.1
    Key Found : HKLM\SOFTWARE\Classes\WinampTb.Downloader
    Key Found : HKLM\SOFTWARE\Classes\WinampTb.Downloader.1
    Key Found : HKLM\SOFTWARE\Classes\WinampTb.ToolbarInfo
    Key Found : HKLM\SOFTWARE\Classes\WinampTb.ToolbarInfo.1
    Key Found : HKLM\SOFTWARE\Classes\WinampTb.ToolbarParams
    Key Found : HKLM\SOFTWARE\Classes\WinampTb.ToolbarParams.1
    Key Found : HKLM\SOFTWARE\Classes\WinampTbServer.AolToolbarHelper
    Key Found : HKLM\SOFTWARE\Classes\WinampTbServer.AolToolbarHelper.1
    Key Found : HKLM\Software\Conduit
    Key Found : HKLM\Software\conduitEngine
    Key Found : HKLM\Software\conduitEngine
    Key Found : HKLM\Software\DataMngr
    Key Found : HKLM\Software\Delta
    Key Found : HKLM\Software\iLividSRTB
    Key Found : HKLM\Software\Iminent
    Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASAPI32
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASMANCS
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\iLividMediaBar_RASAPI32
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\iLividMediaBar_RASMANCS
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetup_RASAPI32
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetup_RASMANCS
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASAPI32
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASMANCS
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASAPI32
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASMANCS
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4750F804-201E-4B6D-A2B5-A952CD965525}
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{AF6B0594-6008-4327-93E5-608AD710A6FA}
    Key Found : HKLM\Software\Umbrella
    Key Found : HKLM\Software\uTorrentBar
    Key Found : HKLM\Software\Winamp Toolbar
    Key Found : HKLM\SOFTWARE\Wow6432Node\5ae88d1b538ed12
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{01A602A0-D0B9-445B-8081-719E4177C4A7}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{02C9C7B0-C7C8-4AAC-A9E4-55295BF60F8F}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{0398B101-6DA7-473F-A290-17D2FBC88CC0}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{0CC36196-8589-4B80-A771-D659411D7F90}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{143D96F9-EB64-48B3-B192-91C2C41A1F43}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{14F7D91F-F669-45C9-9F42-BACBFDB86EAD}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{187A6488-6E71-4A2A-B118-7BEFBFE58257}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{26C9BBE4-6D45-4AB6-A5B4-E068C9F5EF6D}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2D065204-A024-4C39-8A38-EE7078EC7ACF}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{30F5476C-677B-4DB0-B397-51F5BFD86840}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3223F2FB-D9B9-45FC-9D66-CD717FFA4EE5}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{351798B1-C1D2-45AB-92B4-4D6C2D6AB5AF}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{377E5D4D-77E5-476A-8716-7E70A9272DA0}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3AEA1BEF-6195-46F4-ACA2-0ED14F7EFA1B}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3D7F9AC3-BAC3-4E51-81D7-D121D79E550A}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4498C5E9-93C6-4142-B6BE-F0C6DC48B77A}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4750F804-201E-4B6D-A2B5-A952CD965525}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{479BF2D6-E362-4A99-B1AB-BC764D7B97AE}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{492A108F-51D0-4BD8-899D-AD4AB2893064}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4B6D6E60-FBD2-4E79-BF4B-886BC98F1797}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{57BCA5FA-5DBB-45A2-B558-1755C3F6253B}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{5C176BA0-6FC0-4EBD-8ACF-24AC592506B6}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{60893E02-2E5B-43F9-A93A-BAD60C2DF6EF}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{6D39931F-451E-4BDD-BAF4-37FB96DBBA5D}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{6EF4E91D-DDD5-4478-BCA7-DA04435934C0}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{76C684D2-C35D-4284-976A-D862F53ADB81}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{796D822A-C3F9-4A97-BAAB-42FE7628EA63}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{79EF3691-EC1A-4705-A01A-D2E36EC11758}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{82F41418-8E64-47EB-A7F1-4702A974D289}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{841FD004-57A2-4B49-BBDB-5897394619DB}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{85D920CE-63A7-46DC-8992-41D1D2E07FAD}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{895ED5E8-ABB4-40C3-A0CA-2571964268E2}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{8AAC123A-1959-4A45-BFC5-E2D50783098A}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{9FF9AE6F-4553-41A7-B645-B0E88850EABF}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A07956CD-81F8-4A03-B524-5D87E690DC83}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AF6B0594-6008-4327-93E5-608AD710A6FA}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B38D6EDE-390B-4620-8365-29E16459EBDA}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B5E3B26B-6E5C-4865-A63D-58D04B10E245}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B84D2DC5-42B2-4E5E-BF61-7B48152FF8EF}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B89D5309-0367-4494-A92F-3D4C94F88307}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C014EBF8-8854-448B-B5A4-557C4090EDCE}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C31191DB-2F64-464C-B97C-6AC81ACB7AAC}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C342C7A7-F622-4EF3-8B7F-ABB9FBE73F14}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C4765B07-BC2F-477B-925C-B2BF24887823}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C875C0A1-09E3-48D5-9F8E-BD337796FD14}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CD126DA6-FF5B-4181-AC13-54A62240D2FA}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CE4DB5A3-58E6-41F1-8761-47238DF4F468}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D8F01233-2DE6-4EE7-8988-37263F00651B}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DD438708-AAB4-422D-A322-B619589F5680}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DF84E609-C3A4-49CB-A160-61767DAF8899}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E1164984-B567-47BD-A7FF-240C2594404A}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E812AE43-7799-4E67-8CF8-4104297A2D16}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F0BAAEC7-9AE0-49FF-9C4B-86E774FF397F}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F20F11FD-203E-45A9-B7BB-AFC1B4FEA7A6}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F92193FD-2243-4401-9ACC-49FF30885898}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FD21B8A2-910B-45AC-9C10-45E6A8B84984}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FE178B09-C8AA-4734-804D-1849BCCA0C29}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0F54B66A-21CF-4548-AE59-A6B83EE6676F}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{51A971CA-D36E-4D13-A799-2CF0A491D04D}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{56FBEA9F-EF93-4318-B75F-A96FC7C7BD7B}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{78B3C85E-44FF-4DC8-B3AD-156F39DC75E5}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{841FD004-57A2-4B49-BBDB-5897394619DB}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ACA608DB-A210-4253-B799-3FD24E9A7BF5}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DF84E609-C3A4-49CB-A160-61767DAF8899}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E1164984-B567-47BD-A7FF-240C2594404A}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E19FDA06-5BDF-43C2-B794-BCD8A4C2051F}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FAB076F5-E4DD-4EA4-AFEE-F18BF972B057}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0AF350D9-3916-454B-AC53-0B0B65F41301}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{377E5D4D-77E5-476A-8716-7E70A9272DA0}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{982F5F20-AA06-4A60-A323-A66852BA252B}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C386F054-C58A-4CB3-81FE-C288B4C0252D}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4DC8-84D1-F5D7BAF2DB0C}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{377E5D4D-77E5-476A-8716-7E70A9272DA0}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{89B5DFCA-81E0-4EA4-8A0A-4F4087A1DD00}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Delta
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Delta Chrome Toolbar
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\FilesFrog Update Checker
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Search Results Toolbar
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\uTorrentBar Toolbar
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Winamp Toolbar
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{9FF9AE6F-4553-41A7-B645-B0E88850EABF}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{C1ED9DA0-AFD0-4B90-AC6A-D3874F591014}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{CE4DB5A3-58E6-41F1-8761-47238DF4F468}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{0F54B66A-21CF-4548-AE59-A6B83EE6676F}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{51A971CA-D36E-4D13-A799-2CF0A491D04D}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{56FBEA9F-EF93-4318-B75F-A96FC7C7BD7B}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{78B3C85E-44FF-4DC8-B3AD-156F39DC75E5}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{841FD004-57A2-4B49-BBDB-5897394619DB}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{ACA608DB-A210-4253-B799-3FD24E9A7BF5}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{DF84E609-C3A4-49CB-A160-61767DAF8899}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{E1164984-B567-47BD-A7FF-240C2594404A}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{E19FDA06-5BDF-43C2-B794-BCD8A4C2051F}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{FAB076F5-E4DD-4EA4-AFEE-F18BF972B057}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
    Key Found : HKLM\SOFTWARE\DataMngr
    Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1ED9DA0-AFD0-4B90-AC6A-D3874F591014}
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C4ED781C-7394-4906-AAFF-D6AB64FF7C38}
    Key Found : HKLM\SOFTWARE\Tarma Installer
    Key Found : HKU\S-1-5-21-2128128642-1423321494-1282847144-1005\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
    Key Found : HKU\S-1-5-21-2128128642-1423321494-1282847144-1005\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
    Value Found : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
    Value Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
    Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{30F9B915-B755-4826-820B-08FBA6BD249D}]
    Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{30F9B915-B755-4826-820B-08FBA6BD249D}]
    Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}]
    Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
    Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}]
    Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Browser Infrastructure Helper]
    Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Optimizer Pro]
    Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [SDP]
    Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{57BCA5FA-5DBB-45A2-B558-1755C3F6253B}]
    Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}]
    Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [DataMngr]
    Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Iminent]
    Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [IminentMessenger]
    Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [webbooster@iminent.com]
    Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{30F9B915-B755-4826-820B-08FBA6BD249D}]
    Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{30F9B915-B755-4826-820B-08FBA6BD249D}]
    Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{377E5D4D-77E5-476A-8716-7E70A9272DA0}]
    Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{82E1477C-B154-48D3-9891-33D83C26BCD3}]
    Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
    Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}]
    Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
    Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}]
    Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [10]
    Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
    Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [10]

    ***** [Internet Browsers] *****

    -\\ Internet Explorer v9.0.8112.16476

    [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.babylon.com/?babsrc=HP_ss_sps&mntrId=18F8C417FEDCF954&affID=119357&tsp=4953
    [HKCU\Software\Microsoft\Internet Explorer\Main - bProtector Start Page] = hxxp://www.delta-search.com/?affID=119816&babsrc=HP_ss&mntrId=18F8C417FEDCF954

    -\\ Mozilla Firefox v22.0 (en-GB)

    File : C:\Users\Finnian\AppData\Roaming\Mozilla\Firefox\Profiles\9ja47w74.default\prefs.js

    Found : user_pref("CT2786678..clientLogIsEnabled", true);
    Found : user_pref("CT2786678..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
    Found : user_pref("CT2786678..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
    Found : user_pref("CT2786678.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
    Found : user_pref("CT2786678.CTID", "CT2786678");
    Found : user_pref("CT2786678.CurrentServerDate", "17-1-2012");
    Found : user_pref("CT2786678.DialogsAlignMode", "LTR");
    Found : user_pref("CT2786678.DownloadReferralCookieData", "");
    Found : user_pref("CT2786678.EMailNotifierPollDate", "Wed Jan 18 2012 22:25:04 GMT+0000 (GMT Standard Time)"[...]
    Found : user_pref("CT2786678.FeedLastCount5690698542593514850", 550);
    Found : user_pref("CT2786678.FeedPollDate129301619375443753", "Thu Jul 28 2011 19:59:59 GMT+0100 (GMT Daylig[...]
    Found : user_pref("CT2786678.FeedPollDate129301619375443759", "Thu Jul 28 2011 19:59:59 GMT+0100 (GMT Daylig[...]
    Found : user_pref("CT2786678.FeedPollDate129301619375444699", "Thu Jul 28 2011 19:59:58 GMT+0100 (GMT Daylig[...]
    Found : user_pref("CT2786678.FeedPollDate129301619375444705", "Thu Jul 28 2011 19:59:58 GMT+0100 (GMT Daylig[...]
    Found : user_pref("CT2786678.FeedPollDate129301619375444711", "Thu Jul 28 2011 19:59:58 GMT+0100 (GMT Daylig[...]
    Found : user_pref("CT2786678.FeedPollDate129301619375444717", "Thu Jul 28 2011 19:59:58 GMT+0100 (GMT Daylig[...]
    Found : user_pref("CT2786678.FeedPollDate129301619375444723", "Thu Jul 28 2011 19:59:59 GMT+0100 (GMT Daylig[...]
    Found : user_pref("CT2786678.FeedPollDate129301619375444729", "Thu Jul 28 2011 19:59:59 GMT+0100 (GMT Daylig[...]
    Found : user_pref("CT2786678.FeedPollDate129301619375444735", "Thu Jul 28 2011 19:59:59 GMT+0100 (GMT Daylig[...]
    Found : user_pref("CT2786678.FeedPollDate129301619375444741", "Thu Jul 28 2011 19:59:59 GMT+0100 (GMT Daylig[...]
    Found : user_pref("CT2786678.FeedPollDate129301619375444747", "Thu Jul 28 2011 19:59:59 GMT+0100 (GMT Daylig[...]
    Found : user_pref("CT2786678.FeedPollDate2429156812186649977", "Wed Jan 18 2012


  • Options
    #10
    jsa112
    Registered Users Posts: 840 ✭✭✭jsa112


    let adwcleaner delete what it finds.


    can you do the OTL step again as it didn't work properly. You need to include this part at the start


    :OTL


    also run combofix and post its log then tell me how the pc is running

    http://www.bleepingcomputer.com/combofix/how-to-use-combofix


Advertisement