Advertisement
Help Keep Boards Alive. Support us by going ad free today. See here: https://subscriptions.boards.ie/.
https://www.boards.ie/group/1878-subscribers-forum

Private Group for paid up members of Boards.ie. Join the club.
Hi all, please see this major site announcement: https://www.boards.ie/discussion/2058427594/boards-ie-2026

Browser keeps adding Hyperlinks!

  • 24-07-2013 09:11PM
    #1
    Prizen
    Registered Users, Registered Users 2 Posts: 44 ✭


    Hi All,

    I am running Win7 and use Chrome and Firefox browsers. Lately I have a lot of annoying popups continually appear. Also, certain words are incorrectly hyperlinked with popup ads beside them.

    I have tried to resolve this issue using Malwarebytes Anti Malware as per sticky in this forum, but to no avail.

    Please can somebody help?

    Thanks


Comments

  • #2
    uch
    Registered Users, Registered Users 2 Posts: 7,034 ✭✭✭uch


    Did you run an update for MBAM ?

    22/25



  • #3
    pennypitstop
    Banned (with Prison Access) Posts: 86 ✭✭pennypitstop


    Prizen wrote: »
    Hi All,

    Lately I have a lot of annoying popups continually appear. Also, certain words are incorrectly hyperlinked with popup ads beside them.

    I have tried to resolve this issue using Malwarebytes Anti Malware as per sticky in this forum, but to no avail.

    Please can somebody help?

    Thanks

    Well described :D
    I had the same problem but only when using Chrome. I Uninstalled it and then re-installed it. This seemed to solve the problem for a few weeks but I have just noticed it happening again this evening!


  • #4
    ASJ112
    Site Banned Posts: 1,167 ✭✭✭ASJ112


    run this

    Download OTL to your Desktop
    • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
    • Click the Quick Scan button. Do not change any settings. The scan wont take long.
    • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
    • Please copy (Edit->Select All, Edit->Copy) the contents of these files here


  • #5
    Kent Brockman
    Registered Users, Registered Users 2 Posts: 1,282 ✭✭✭Kent Brockman


    Sounds like you have picked up 'coupondropdown' add on or plugin. I think there is an option to disable and unsubscribe if you go to their faq page.


  • #6
    Prizen
    Registered Users, Registered Users 2 Posts: 44 ✭Prizen


    ASJ112 wrote: »
    run this

    Download OTL to your Desktop
    • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
    • Click the Quick Scan button. Do not change any settings. The scan wont take long.
    • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
    • Please copy (Edit->Select All, Edit->Copy) the contents of these files here

    Thanks a mil, here's the extras file

    OTL Extras logfile created on: 01/08/2013 23:01:11 - Run 1
    OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Áine\Downloads
    64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
    Internet Explorer (Version = 9.0.8112.16421)
    Locale: 00000809 | Country: Ireland | Language: ENI | Date Format: dd/MM/yyyy

    2.74 Gb Total Physical Memory | 1.59 Gb Available Physical Memory | 58.15% Memory free
    5.48 Gb Paging File | 3.81 Gb Available in Paging File | 69.62% Paging File free
    Paging file location(s): ?:\pagefile.sys [binary data]

    %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
    Drive C: | 285.99 Gb Total Space | 3.85 Gb Free Space | 1.35% Space Free | Partition Type: NTFS
    Drive D: | 4.32 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF
    Drive E: | 1.67 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: CDFS
    Drive G: | 429.35 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

    Computer Name: FINNIAN-PC | User Name: Áine | Logged in as Administrator.
    Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
    Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

    ========== Extra Registry (SafeList) ==========


    ========== File Associations ==========

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
    .html[@ = ChromeHTML] -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
    .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
    .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
    .html [@ = ChromeHTML] -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)

    [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
    .html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

    ========== Shell Spawning ==========

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
    batfile [open] -- "%1" %*
    cmdfile [open] -- "%1" %*
    comfile [open] -- "%1" %*
    exefile [open] -- "%1" %*
    helpfile [open] -- Reg Error: Key error.
    http [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
    https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
    inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
    InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
    InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
    piffile [open] -- "%1" %*
    regfile [merge] -- Reg Error: Key error.
    scrfile [config] -- "%1"
    scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
    scrfile [open] -- "%1" /S
    txtfile [edit] -- Reg Error: Key error.
    Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
    Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
    Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
    Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
    Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
    Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
    Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
    Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
    Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
    Folder [explore] -- Reg Error: Value error.
    Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
    batfile [open] -- "%1" %*
    cmdfile [open] -- "%1" %*
    comfile [open] -- "%1" %*
    cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
    exefile [open] -- "%1" %*
    helpfile [open] -- Reg Error: Key error.
    http [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
    https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
    inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
    piffile [open] -- "%1" %*
    regfile [merge] -- Reg Error: Key error.
    scrfile [config] -- "%1"
    scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
    scrfile [open] -- "%1" /S
    txtfile [edit] -- Reg Error: Key error.
    Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
    Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
    Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
    Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
    Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
    Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
    Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
    Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
    Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
    Folder [explore] -- Reg Error: Value error.
    Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

    ========== Security Center Settings ==========

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
    "cval" = 1

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
    "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
    "AntiVirusOverride" = 0
    "AntiSpywareOverride" = 0
    "FirewallOverride" = 0

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

    ========== Firewall Settings ==========

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
    "EnableFirewall" = 1
    "DisableNotifications" = 0

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
    "EnableFirewall" = 1
    "DisableNotifications" = 0

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
    "EnableFirewall" = 1
    "DisableNotifications" = 0

    ========== Authorized Applications List ==========

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
    "C:\Program Files (x86)\Orbitdownloader\orbitdm.exe" = C:\Program Files (x86)\Orbitdownloader\orbitdm.exe:*:Enabled:Orbit -- (Orbitdownloader.com)
    "C:\Program Files (x86)\Orbitdownloader\orbitnet.exe" = C:\Program Files (x86)\Orbitdownloader\orbitnet.exe:*:Enabled:Orbit -- (Orbitdownloader.com)
    "C:\Program Files (x86)\Orbitdownloader\orbitdm.exe" = C:\Program Files (x86)\Orbitdownloader\orbitdm.exe:*:Enabled:Orbit -- (Orbitdownloader.com)
    "C:\Program Files (x86)\Orbitdownloader\orbitnet.exe" = C:\Program Files (x86)\Orbitdownloader\orbitnet.exe:*:Enabled:Orbit -- (Orbitdownloader.com)


    ========== Vista Active Open Ports Exception List ==========

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
    "{00C0F269-9EB9-48A8-A47D-375091722C94}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
    "{09CE5EB0-18A8-467C-9C3B-CC79BE3C1849}" = rport=137 | protocol=17 | dir=out | app=system |
    "{0C5EC697-068E-4061-B246-7F2211D49CF9}" = lport=10243 | protocol=6 | dir=in | app=system |
    "{1CEE1893-0A1F-47FA-8FFE-CE387101F00C}" = rport=10243 | protocol=6 | dir=out | app=system |
    "{2D92EB96-7A6A-40A3-BB3F-B1B0D1978E11}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
    "{41EEF65C-708A-4DFF-886C-E9524AD55C3C}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
    "{50E37427-02F9-4207-A409-E0A979A42308}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
    "{5C06F52F-BA58-4D4B-8705-E95CC9FDDEEF}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
    "{61A1A1D3-124A-4FF2-B413-4E0AD48D4646}" = rport=139 | protocol=6 | dir=out | app=system |
    "{68C0016A-1BB5-4F12-9281-747544533884}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
    "{6C885453-C448-4AEE-AFBD-267775F4EAA7}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
    "{78536585-5911-45B4-B56C-6C5FC2FFB69D}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
    "{82425E26-C0EC-4478-8A35-FC8EEC0E0951}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
    "{87B613FD-E367-4E05-9F8D-149BFEA4078F}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
    "{8EC137F9-008D-4411-ABCE-E5D5367B45D7}" = lport=138 | protocol=17 | dir=in | app=system |
    "{9A93C320-D8C3-4B4F-B693-6F1920C52999}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
    "{A1289338-DDC7-4AB0-A619-B6D342753BFE}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
    "{A82106CE-AF03-4C6B-9CC8-AA05F7D889F8}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
    "{B0759F59-1F41-4189-BED0-4ACD4487162A}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
    "{B1862BC3-B9A6-4546-8037-BE1BE2BF9216}" = lport=139 | protocol=6 | dir=in | app=system |
    "{B79CE31B-5B6F-4807-8657-885F27DFD19F}" = rport=445 | protocol=6 | dir=out | app=system |
    "{B9310B70-8797-4526-97C0-D5A2BBB6182E}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
    "{BD74A4DF-9E46-439F-BBD3-00F560057804}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
    "{C3A304C9-E1A7-4555-9726-F3F1E8741B37}" = rport=138 | protocol=17 | dir=out | app=system |
    "{D850D2AA-2D6D-4BD2-84C0-D66776E65256}" = lport=2869 | protocol=6 | dir=in | app=system |
    "{EADE363E-15E1-4C57-A406-C0A372197796}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
    "{EC157CF5-5FED-4381-B46A-5D5B4509B96A}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
    "{F83465B6-E726-4D03-A2F4-2C8D3DD745FA}" = lport=445 | protocol=6 | dir=in | app=system |
    "{FC51B86F-23A3-44E0-BA16-D213F28B248C}" = lport=137 | protocol=17 | dir=in | app=system |

    ========== Vista Active Application Exception List ==========

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
    "{03BC00DD-BA80-43C9-8A5C-BE43C59AA07F}" = dir=in | app=c:\users\áine\appdata\local\torch\plugins\torrent\torchtorrent.exe |
    "{0C9E3C9E-ACA7-4D78-ADFF-F63F645731C3}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
    "{10984CE9-7342-4F6C-B3E5-9D222937C1FB}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
    "{143CAA3B-7F3B-40B6-A073-6407AEBC7BC8}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
    "{1B753645-68B8-4584-8241-22C8E5F22320}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
    "{1BD80DA4-5EAC-40B8-8DB1-D0FA2DDD837C}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
    "{2DEDF911-CB5F-4B4C-BECA-2DEF5835D512}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe |
    "{2FC112EF-8EA9-47ED-A9AB-0D5B3E435A27}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
    "{303ECABF-FE00-4B5A-B647-331CC7F4DC1C}" = protocol=17 | dir=in | app=c:\program files (x86)\search results toolbar\datamngr\srtool~1\dtuser.exe |
    "{31377BCB-293F-4D2F-A646-1DA0BF06402B}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
    "{34CA3F51-196F-4DC3-B7D2-047DA2ACFE10}" = protocol=6 | dir=in | app=c:\program files (x86)\search results toolbar\datamngr\srtool~1\dtuser.exe |
    "{3EEE1E12-93C7-43B6-80BD-CC6808B6F13B}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
    "{43F5C6DB-9B54-473B-8881-007471997440}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
    "{441BCB52-AF48-437C-88FE-5361A7F98E50}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
    "{6D066678-04CE-4CA9-83DE-63977E094EC8}" = dir=in | app=c:\program files (x86)\iminent\iminent.exe |
    "{6E65F07A-0D0C-45C3-B3A5-4392FB0F7C8B}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
    "{6F90E41F-CA62-46E1-AC02-E4AAF01ABC2B}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
    "{7EF0FD4D-9C86-46FF-B422-6DC535F7165F}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
    "{88444F8F-E90B-42F7-BE2B-238AF9BBD7A4}" = dir=in | app=c:\program files (x86)\iminent\iminent.messengers.exe |
    "{9A4EF65F-11B9-4B6B-87A9-162679DD0322}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
    "{9FB3B1C6-7F77-40A5-8E31-D6ADE7912DAD}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
    "{A07A5950-8DA7-48F1-8B82-77906EBABB77}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
    "{AE313927-8807-441F-8C14-766DB38A2648}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
    "{AEC6AAEC-03EE-4E91-AE76-B1B341C5F467}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
    "{B362B9A1-0CE6-4E86-8E56-EE803639B23E}" = protocol=6 | dir=out | app=system |
    "{C22E9CEF-2E19-43B4-8084-DD9FD0917086}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
    "{D38E1FDE-FF61-456E-8B6A-E5D1595B139A}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
    "{D8D7E740-701E-4CE4-BFF9-BAC8868467C6}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
    "{DC644440-7EF0-448E-AEDD-1417336A08E5}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
    "{DEDF2C48-8267-47FC-8044-77073C0BCC1A}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
    "{E85BCE0D-0853-41DB-A399-704E2C3F2931}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
    "{E97E1DD3-A88D-45E6-964D-5F391C2DA8C6}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
    "TCP Query User{5063AC63-138C-42F3-9BA2-667B78AD3896}C:\program files (x86)\utorrent\utorrent.exe" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
    "TCP Query User{5D20082F-0146-4126-8859-5A2ED98117D0}C:\windows\syswow64\svchost.exe" = protocol=6 | dir=in | app=c:\windows\syswow64\svchost.exe |
    "TCP Query User{60B84A60-C597-4023-83BB-17A4BD23696F}C:\windows\syswow64\svchost.exe" = protocol=6 | dir=in | app=c:\windows\syswow64\svchost.exe |
    "TCP Query User{6771E5BD-633C-4587-8E64-8654422C3DE4}C:\program files (x86)\orbitdownloader\orbitnet.exe" = protocol=6 | dir=in | app=c:\program files (x86)\orbitdownloader\orbitnet.exe |
    "TCP Query User{68D2ABB7-B245-458D-AABC-3E42C64A251D}C:\program files (x86)\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
    "TCP Query User{71401164-A691-49DB-AC3C-42B3BFF00F0D}C:\program files (x86)\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
    "TCP Query User{AD738F5D-FEFF-4AC1-A570-F2E84A2FA78B}C:\users\áine\appdata\roaming\iqezt\dimemoo.exe" = protocol=6 | dir=in | app=c:\users\áine\appdata\roaming\iqezt\dimemoo.exe |
    "TCP Query User{C22AD959-879C-4D07-8E3E-551B8F059C93}C:\users\áine\appdata\roaming\iqezt\dimemoo.exe" = protocol=6 | dir=in | app=c:\users\áine\appdata\roaming\iqezt\dimemoo.exe |
    "UDP Query User{1DD85567-1380-4B28-ADBC-B1D6983F368D}C:\program files (x86)\orbitdownloader\orbitnet.exe" = protocol=17 | dir=in | app=c:\program files (x86)\orbitdownloader\orbitnet.exe |
    "UDP Query User{370755BE-F5F7-4A34-8FAB-0EC414F644D6}C:\program files (x86)\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |
    "UDP Query User{9829CDBB-A89C-49BA-BE50-8750E2366403}C:\windows\syswow64\svchost.exe" = protocol=17 | dir=in | app=c:\windows\syswow64\svchost.exe |
    "UDP Query User{B0B08420-F4CC-4405-943E-B0219B242E93}C:\windows\syswow64\svchost.exe" = protocol=17 | dir=in | app=c:\windows\syswow64\svchost.exe |
    "UDP Query User{B58DCF19-E99B-4518-A9AB-1E2A4A7AB46A}C:\program files (x86)\utorrent\utorrent.exe" = protocol=17 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
    "UDP Query User{BBFCB87C-8CF6-4819-A92A-2B1AD42C1752}C:\users\áine\appdata\roaming\iqezt\dimemoo.exe" = protocol=17 | dir=in | app=c:\users\áine\appdata\roaming\iqezt\dimemoo.exe |
    "UDP Query User{DF59D8AB-7265-466B-B522-26D74DAEC8ED}C:\users\áine\appdata\roaming\iqezt\dimemoo.exe" = protocol=17 | dir=in | app=c:\users\áine\appdata\roaming\iqezt\dimemoo.exe |
    "UDP Query User{EAC497FC-CE15-4732-A933-76575CC51A9E}C:\program files (x86)\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files (x86)\winamp\winamp.exe |

    ========== HKEY_LOCAL_MACHINE Uninstall List ==========

    64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
    "{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
    "{2F72F540-1F60-4266-9506-952B21D6640D}" = Apple Mobile Device Support
    "{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
    "{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
    "{66C10F29-31F0-4A9B-B2CF-465F488AE086}" = CorelDRAW Graphics Suite X5 - Windows Shell Extension 64 Bit
    "{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
    "{76FF0F03-B707-4332-B5D1-A56C8303514E}" = iTunes
    "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
    "{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
    "{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007
    "{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
    "{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
    "{A84DB02B-9C2B-4272-9D2D-A80E00A56513}" = Broadcom Gigabit NetLink Controller
    "{C4ED781C-7394-4906-AAFF-D6AB64FF7C38}" = WebCake 3.00
    "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
    "24DA573F901348FFDFF7717497830D45BE0C362E" = Windows Driver Package - Dynastream Innovations (libusb0) LibUsbDevices (07/07/2009 1.12.2)
    "49CF605F02C7954F4E139D18828DE298CD59217C" = Windows Driver Package - Garmin (grmnusb) GARMIN Devices (06/03/2009 2.3.0.0)
    "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
    "SynTPDeinstKey" = Synaptics Pointing Device Driver

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
    "_{51DD370C-6690-424E-9674-5F14468B323F}" = Corel Graphics - Windows Shell Extension
    "_{CE54DCE1-E00A-4D91-ACB9-A2D916C24051}" = CorelDRAW(R) Graphics Suite X5
    "{12EFA1A4-AC3B-443C-8143-237EDE760403}" = NTI Backup Now Standard
    "{13E92303-C1AC-4012-9E22-54EACBF54888}" = MCCI(r)Firmware Update Driver for MTK
    "{15D967B5-A4BE-42AE-9E84-64CD062B25AA}" = eSobi v2
    "{178832DE-9DE0-4C87-9F82-9315A9B03985}" = Windows Live Writer
    "{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
    "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
    "{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
    "{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
    "{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
    "{2413930C-8309-47A6-BC61-5EF27A4222BC}" = NTI Media Maker 8
    "{24D9A3E0-D086-4B62-AF93-63CF6B05CB48}" = CorelDRAW Graphics Suite X5 - Custom Data
    "{260ED378-2B8C-4831-ADAE-D0712D119AC5}" = CorelDRAW Graphics Suite X5 - VSTA
    "{26945917-E053-45F6-AF98-309730CFC318}" = Visual Basic for Applications (R) Core
    "{26A24AE4-039D-4CA4-87B4-2F83216022F0}" = Java(TM) 6 Update 22
    "{26A24AE4-039D-4CA4-87B4-2F83216026FF}" = Java(TM) 6 Update 26
    "{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
    "{299C0434-4F4E-341F-A916-4E07AEB35E79}" = Microsoft Visual Studio Tools for Applications 2.0 Runtime
    "{2A3A4BD6-6CE0-4E2A-80D2-1D0FF6ACBFBA}" = LG United Mobile Driver
    "{342126E1-173C-4585-BFBE-3EBDD20E3E9E}" = Mobipocket Reader 6.2
    "{3472C84E-2FD0-439F-B27F-C290C1E4CD8B}" = CorelDRAW Graphics Suite X5 - Filters
    "{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
    "{3D5044A5-97B8-45C0-B956-BB2376569188}" = Windows Live Movie Maker
    "{3D6878FF-FAF4-4C27-903C-0D07FBBB92F9}" = Garmin Training Center
    "{3DB0448D-AD82-4923-B305-D001E521A964}" = Acer ePower Management
    "{3E1ECEEC-814C-4B53-9E08-9B1F2FA83434}" = Easy MP3 Sound Recorder 2.01
    "{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
    "{45338B07-A236-4270-9A77-EBB4115517B5}" = Windows Live Sign-in Assistant
    "{468D22C0-8080-11E2-B86E-B8AC6F98CCE3}" = Google Earth
    "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
    "{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.6
    "{510D2239-6C2E-457B-9590-485EC552D94D}" = Garmin USB Drivers
    "{51DD370C-6690-424E-9674-5F14468B323F}" = Corel Graphics - Windows Shell Extension
    "{51F026FA-5146-4232-A8BA-1364740BD053}" = Acer Crystal Eye webcam
    "{54B8F4A1-02B0-4D32-8F37-925526C0EEC6}" = CorelDRAW Graphics Suite X5 - Connect
    "{57400C1E-BC51-4ECE-AD2A-A6096204DDEC}" = CorelDRAW Graphics Suite X5 - VBA
    "{59123CCF-FED2-46FF-9293-D1DC80042219}" = CorelDRAW Graphics Suite X5 - Redist
    "{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}" = Apple Application Support
    "{5E21B617-F52E-BB10-92F9-C8AB2C799A8A}" = Adobe Download Assistant
    "{62978C1C-FE2E-4A4E-851D-3EB406C9EBC2}" = CorelDRAW Graphics Suite X5 - Draw
    "{6412CECE-8172-4BE5-935B-6CECACD2CA87}" = Windows Live Mail
    "{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
    "{67E03279-F703-408F-B4BF-46B5FC8D70CD}" = Microsoft Works
    "{68301905-2DEA-41CE-A4D4-E8B443B099BA}" = MyWinLocker
    "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
    "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
    "{72B776E5-4530-4C4B-9453-751DF87D9D93}" = Backup Manager Basic
    "{739126B3-1C80-4F1F-8D59-312A19633E1A}_is1" = Epub reader
    "{76C24F39-B161-498F-BD8B-C64789812D13}_is1" = ConvertXtoDVD 3.1.0.24
    "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
    "{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
    "{7A03BEDC-6390-440E-8D13-721A22F0BD1F}" = PhoenixRC
    "{7D42B43A-EA63-4234-B00A-757C15B2B185}_is1" = Leawo AVI Converter version 4.1.0.1
    "{7F811A54-5A09-4579-90E1-C93498E230D9}" = Acer eRecovery Management
    "{81128EE8-8EAD-4DB0-85C6-17C2CE50FF71}" = Windows Live Essentials
    "{82AF3E91-57E1-4754-84D0-40A46E2479AB}" = OpenOffice.org 3.3
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110209593}" = Chicken Invaders 2
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110551697}" = Granny In Paradise
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112662477}" = Merriam Websters Spell Jam
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11273477}" = Amazonia
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112920767}" = Alice Greenfingers
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113786380}" = Heroes of Hellas
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113832110}" = Dream Day First Home
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115053100}" = Dairy Dash
    "{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11531173}" = Farm Frenzy 2
    "{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}" = Windows Live Sync
    "{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
    "{89B5DFCA-81E0-4EA4-8A0A-4F4087A1DD00}" = Iminent
    "{8EB62C87-AAA6-4850-A5BC-64155884B973}" = SketchUp 8
    "{8ed9688e-4f79-4308-91ca-f1c37ca142b4}_is1" = Acer GameZone Console
    "{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
    "{90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
    "{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
    "{90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
    "{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
    "{90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
    "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
    "{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
    "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
    "{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
    "{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
    "{90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
    "{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
    "{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}" = Microsoft Office 2007 Service Pack 3 (SP3)
    "{90120000-002A-0409-1000-0000000FF1CE}_HOMESTUDENTR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
    "{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
    "{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
    "{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
    "{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
    "{90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
    "{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
    "{90120000-0115-0409-0000-0000000FF1CE}_HOMESTUDENTR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
    "{90120000-0116-0409-1000-0000000FF1CE}_HOMESTUDENTR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
    "{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
    "{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
    "{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
    "{9244E956-5939-4B88-930C-0699D4AB2B95}" = CorelDRAW Graphics Suite X5 - WT
    "{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
    "{952C0A72-C051-4D35-BD9E-9A3239A2A0C0}_is1" = Age Of Empires 2 : Gold Edition
    "{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
    "{983F7145-CABF-4EDD-9F3D-E06B2F024BD3}" = CorelDRAW Graphics Suite X5 - FontNav
    "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
    "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
    "{A0087DDE-69D0-11E2-AD57-43CA6188709B}" = Adobe AIR
    "{A1B04B6B-25BB-48AD-8BD9-D31A86E89F3E}" = CorelDRAW Graphics Suite X5 - PHOTO-PAINT
    "{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9
    "{A85FD55B-891B-4314-97A5-EA96C0BD80B5}" = Windows Live Messenger
    "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
    "{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}" = Microsoft Visual Studio Tools for Applications 2.0 - ENU
    "{AC76BA86-1033-FFFF-7760-000000000006}" = Adobe Acrobat XI Pro
    "{AC76BA86-7AD7-1033-7B44-A93000000001}" = Adobe Reader 9.3.4
    "{AFBAB9A0-DDE8-49AE-8C17-A01B61BEE64B}" = Garmin MapSource
    "{B399C91E-96F2-4265-9884-1C9A10E9FCF4}" = CorelDRAW Graphics Suite X5
    "{B630320B-4B6A-4623-A05D-80DAA4C73CE9}" = QuickShare
    "{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
    "{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}" = Norton Online Backup
    "{CA3861BA-1D96-4D66-B577-318E1602C4F3}" = CorelDRAW Graphics Suite X5 - Common
    "{CE54DCE1-E00A-4D91-ACB9-A2D916C24051}" = CorelDRAW Graphics Suite X5 - Setup Files
    "{D596EEA2-C6C8-45D3-89DF-FA2DBE99F829}" = Visual Basic for Applications (R) Core - English
    "{D642FF8D-438D-4545-A1D5-2EDB4BCAE3BA}" = CorelDRAW Graphics Suite X5 - Photozoom Plugin
    "{D6C75F0B-3BC1-4FC9-B8C5-3F7E8ED059CA}" = Windows Live Photo Gallery
    "{DE6CBC04-8673-4DBA-BA81-07F1639CEB5F}" = CorelDRAW Graphics Suite X5 - IPM
    "{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update
    "{E34C6AA4-AE8E-4677-912A-92FC2E039DD9}" = CorelDRAW Graphics Suite X5 - EN
    "{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}" = Microsoft Office Suite Activation Assistant
    "{EDB98D5A-A6FB-425C-BFB7-51A0924B762D}" = CorelDRAW Graphics Suite X5 - Capture
    "{EE171732-BEB4-4576-887D-CB62727F01CA}" = Acer Updater
    "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
    "{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
    "{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Graphics Media Accelerator Driver
    "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
    "{F6BD194C-4190-4D73-B1B1-C48C99921BFE}" = Windows Live Call
    "{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center
    "{FE4B83DE-85CF-4DE5-90CE-A2735A0E1F21}" = CorelDRAW Graphics Suite X5 - VideoBrowser
    "Acer Registration" = Acer Registration
    "Acer Screensaver" = Acer ScreenSaver
    "Acer Welcome Center" = Welcome Center
    "Adobe AIR" = Adobe AIR
    "Adobe Digital Editions 2.0" = Adobe Digital Editions 2.0
    "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
    "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
    "Any Video Converter_is1" = Any Video Converter 3.3.0
    "Audacity_is1" = Audacity 2.0.3
    "bi_uninstaller" = Bundled software uninstaller
    "com.adobe.downloadassistant.AdobeDownloadAssistant" = Adobe Download Assistant
    "conduitEngine" = Conduit Engine
    "DAEMON Tools Ultra" = DAEMON Tools Ultra
    "dBpoweramp CD Writer" = dBpoweramp CD Writer
    "dBpoweramp Music Converter" = dBpoweramp Music Converter
    "delta" = Delta toolbar
    "Delta Chrome Toolbar" = Delta Chrome Toolbar
    "eMusic Promotion" = 50 FREE MP3s +1 Free Audiobook!
    "Exact Audio Copy" = Exact Audio Copy 1.0beta3
    "FBReader for Windows" = FBReader for Windows
    "FilesFrog Update Checker" = FilesFrog Update Checker
    "FLAC" = FLAC 1.2.1b (remove only)
    "FoxyLyrics@SHBRT.co" = FoxyLyrics
    "GasTurb_is1" = GasTurb 11 Entry Level Version
    "Google Chrome" = Google Chrome
    "HiDownload Platinum_is1" = HiDownloadPlatinum
    "HOMESTUDENTR" = Microsoft Office Home and Student 2007
    "Identity Card" = Identity Card
    "iLivid" = iLivid
    "ilividtoolbargaw" = Search-Results Toolbar
    "IMBoosterARP" = Iminent
    "InstallShield_{12EFA1A4-AC3B-443C-8143-237EDE760403}" = NTI Backup Now 5
    "InstallShield_{15D967B5-A4BE-42AE-9E84-64CD062B25AA}" = eSobi v2
    "InstallShield_{2413930C-8309-47A6-BC61-5EF27A4222BC}" = NTI Media Maker 8
    "InstallShield_{72B776E5-4530-4C4B-9453-751DF87D9D93}" = Acer Backup Manager
    "InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9
    "InterActual Player" = InterActual Player
    "KLiteCodecPack_is1" = K-Lite Codec Pack 7.6.0 (Basic)
    "LManager" = Launch Manager
    "Magic ISO Maker v5.5 (build 0281)" = Magic ISO Maker v5.5 (build 0281)
    "MagicDisc 2.7.106" = MagicDisc 2.7.106
    "Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300
    "Mobile Partner" = Mobile Partner
    "Mozilla Firefox 22.0 (x86 en-GB)" = Mozilla Firefox 22.0 (x86 en-GB)
    "MozillaMaintenanceService" = Mozilla Maintenance Service
    "O2 Broadband" = O2 Broadband
    "Optimizer Pro_is1" = Optimizer Pro v3.1
    "Orbit_is1" = Orbit Downloader
    "Picasa 3" = Picasa 3
    "uTorrent" = µTorrent
    "uTorrentBar Toolbar" = uTorrentBar Toolbar
    "VLC media player" = VLC media player 2.0.5
    "WD Link" = WD Link
    "Winamp" = Winamp
    "Winamp Toolbar" = Winamp Toolbar
    "WinLiveSuite_Wave3" = Windows Live Essentials
    "WinPcapInst" = WinPcap 4.1.3
    "WinRAR archiver" = WinRAR archiver

    ========== HKEY_CURRENT_USER Uninstall List ==========

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
    "BartVPN" = BartVPN
    "Torch" = Torch

    ========== Last 20 Event Log Errors ==========

    [ Application Events ]
    Error - 21/04/2013 12:39:44 | Computer Name = Finnian-PC | Source = Application Error | ID = 1000
    Description = Faulting application name: Iminent.exe, version: 6.14.22.0, time stamp:
    0x515afa16 Faulting module name: KERNELBASE.dll, version: 6.1.7600.17206, time stamp:
    0x50e6605e Exception code: 0xe0434352 Fault offset: 0x0000c41f Faulting process id:
    0xa50 Faulting application start time: 0x01ce3eaeca652697 Faulting application path:
    C:\Program Files (x86)\Iminent\Iminent.exe Faulting module path: C:\Windows\syswow64\KERNELBASE.dll
    Report
    Id: 11a80341-aaa2-11e2-a76c-863dd52a77e9

    Error - 21/04/2013 12:47:13 | Computer Name = Finnian-PC | Source = Application Error | ID = 1000
    Description = Faulting application name: taskeng.exe, version: 6.1.7600.16699, time
    stamp: 0x4ccf7f10 Faulting module name: ntdll.dll, version: 6.1.7600.16915, time
    stamp: 0x4ec4b137 Exception code: 0xc0000005 Fault offset: 0x000000000009c524 Faulting
    process id: 0x6ac Faulting application start time: 0x01ce3eafd887ec04 Faulting application
    path: C:\Windows\system32\taskeng.exe Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
    Report
    Id: 1d4efabc-aaa3-11e2-9f3e-8803220dd7c8

    Error - 21/04/2013 12:47:13 | Computer Name = Finnian-PC | Source = Application Error | ID = 1000
    Description = Faulting application name: Dwm.exe, version: 6.1.7600.16385, time
    stamp: 0x4a5bc541 Faulting module name: ntdll.dll, version: 6.1.7600.16915, time
    stamp: 0x4ec4b137 Exception code: 0xc0000005 Fault offset: 0x000000000009c524 Faulting
    process id: 0x7e0 Faulting application start time: 0x01ce3eafd958f7b7 Faulting application
    path: C:\Windows\system32\Dwm.exe Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
    Report
    Id: 1d4ed3ac-aaa3-11e2-9f3e-8803220dd7c8

    Error - 22/04/2013 12:44:52 | Computer Name = Finnian-PC | Source = Application Error | ID = 1000
    Description = Faulting application name: ePowerTray.exe, version: 5.0.3000.0, time
    stamp: 0x4b544a12 Faulting module name: ntdll.dll, version: 6.1.7600.16915, time
    stamp: 0x4ec4b137 Exception code: 0xc0000005 Fault offset: 0x000000000009c524 Faulting
    process id: 0x924 Faulting application start time: 0x01ce3f78b298e326 Faulting application
    path: C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe Faulting module
    path: C:\Windows\SYSTEM32\ntdll.dll Report Id: f3842e46-ab6b-11e2-a7e3-c4d460dc9df4

    Error - 22/04/2013 12:57:47 | Computer Name = Finnian-PC | Source = Application Error | ID = 1000
    Description = Faulting application name: wermgr.exe, version: 6.1.7600.16385, time
    stamp: 0x4a5bc5f9 Faulting module name: ntdll.dll, version: 6.1.7600.16915, time
    stamp: 0x4ec4b137 Exception code: 0xc0000005 Fault offset: 0x000000000009c524 Faulting
    process id: 0x1450 Faulting application start time: 0x01ce3f7a826d9d49 Faulting application
    path: C:\Windows\system32\wermgr.exe Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
    Report
    Id: c1c43e7a-ab6d-11e2-a7e3-c4d460dc9df4

    Error - 23/04/2013 06:16:24 | Computer Name = Finnian-PC | Source = Application Error | ID = 1000
    Description = Faulting application name: SndVol.exe, version: 6.1.7600.16385, time
    stamp: 0x4a5bcf26 Faulting module name: ntdll.dll, version: 6.1.7600.16915, time
    stamp: 0x4ec4b137 Exception code: 0xc0000005 Fault offset: 0x000000000009c524 Faulting
    process id: 0xac4 Faulting application start time: 0x01ce400b9aeda56c Faulting application
    path: C:\Windows\system32\SndVol.exe Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
    Report
    Id: d9b96fc9-abfe-11e2-a7ac-95fb0be7a4f8

    Error - 23/04/2013 07:20:32 | Computer Name = Finnian-PC | Source = Application Error | ID = 1000
    Description = Faulting application name: SearchProtocolHost.exe, version: 7.0.7600.16808,
    time stamp: 0x4dc0d14c Faulting module name: ntdll.dll, version: 6.1.7600.16915,
    time stamp: 0x4ec4b137 Exception code: 0xc0000005 Fault offset: 0x000000000009c524
    Faulting
    process id: 0x144c Faulting application start time: 0x01ce401490a966fb Faulting application
    path: C:\Windows\system32\SearchProtocolHost.exe Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
    Report
    Id: cf0fde5d-ac07-11e2-a7ac-95fb0be7a4f8

    Error - 23/04/2013 07:35:59 | Computer Name = Finnian-PC | Source = SideBySide | ID = 16842787
    Description = Activation context generation failed for "c:\program files (x86)\windows
    live\photo gallery\MovieMaker.Exe".Error in manifest or policy file "c:\program
    files (x86)\windows live\photo gallery\WLMFDS.DLL" on line 8. Component identity
    found in manifest does not match the identity of the component requested. Reference
    is WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1". Definition
    is WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1". Please use
    sxstrace.exe for detailed diagnosis.

    Error - 23/04/2013 07:40:17 | Computer Name = Finnian-PC | Source = System Restore | ID = 8193
    Description =

    Error - 23/04/2013 07:40:17 | Computer Name = Finnian-PC | Source = System Restore | ID = 8211
    Description =

    [ System Events ]
    Error - 24/07/2013 16:02:56 | Computer Name = Finnian-PC | Source = Service Control Manager | ID = 7000
    Description = The Windows Search service failed to start due to the following error:
    %%1053

    Error - 26/07/2013 04:53:38 | Computer Name = Finnian-PC | Source = Service Control Manager | ID = 7043
    Description = The Windows Update service did not shut down properly after receiving
    a preshutdown control.

    Error - 26/07/2013 04:54:23 | Computer Name = Finnian-PC | Source = Microsoft-Windows-Service Pack Installer | ID = 8
    Description = Service Pack installation failed with error code 0x80010108.

    Error - 26/07/2013 04:58:17 | Computer Name = Finnian-PC | Source = DCOM | ID = 10005
    Description =

    Error - 26/07/2013 04:58:17 | Computer Name = Finnian-PC | Source = Service Control Manager | ID = 7009
    Description = A timeout was reached (30000 milliseconds) while waiting for the iPod
    Service service to connect.

    Error - 26/07/2013 04:58:17 | Computer Name = Finnian-PC | Source = Service Control Manager | ID = 7000
    Description = The iPod Service service failed to start due to the following error:
    %%1053

    Error - 26/07/2013 08:49:58 | Computer Name = Finnian-PC | Source = Service Control Manager | ID = 7011
    Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
    response from the WwanSvc service.

    Error - 01/08/2013 16:49:30 | Computer Name = Finnian-PC | Source = EventLog | ID = 6008
    Description = The previous system shutdown at 02:58:30 on ?30/?07/?2013 was unexpected.

    Error - 01/08/2013 17:07:17 | Computer Name = Finnian-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
    Description = Installation Failure: Windows failed to install the following update
    with error 0x8024200d: Windows 7 Service Pack 1 for x64-based Systems (KB976932).

    Error - 01/08/2013 17:22:42 | Computer Name = Finnian-PC | Source = volsnap | ID = 393252
    Description = The shadow copies of volume C: were aborted because the shadow copy
    storage could not grow due to a user imposed limit.


    < End of report >


    Here is the OTL file

    OTL logfile created on: 01/08/2013 23:01:11 - Run 1
    OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Áine\Downloads
    64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
    Internet Explorer (Version = 9.0.8112.16421)
    Locale: 00000809 | Country: Ireland | Language: ENI | Date Format: dd/MM/yyyy

    2.74 Gb Total Physical Memory | 1.59 Gb Available Physical Memory | 58.15% Memory free
    5.48 Gb Paging File | 3.81 Gb Available in Paging File | 69.62% Paging File free
    Paging file location(s): ?:\pagefile.sys [binary data]

    %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
    Drive C: | 285.99 Gb Total Space | 3.85 Gb Free Space | 1.35% Space Free | Partition Type: NTFS
    Drive D: | 4.32 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF
    Drive E: | 1.67 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: CDFS
    Drive G: | 429.35 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

    Computer Name: FINNIAN-PC | User Name: Áine | Logged in as Administrator.
    Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
    Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

    ========== Processes (SafeList) ==========

    PRC - [2013/08/01 22:53:49 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Áine\Downloads\OTL.exe
    PRC - [2013/07/12 14:37:18 | 003,289,472 | ---- | M] (Skype Technologies S.A.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
    PRC - [2013/07/08 10:25:24 | 000,080,064 | ---- | M] () -- C:\Users\Áine\AppData\Local\BartVPN\BartVPNService.exe
    PRC - [2013/06/26 20:37:57 | 002,723,368 | ---- | M] (Iminent) -- C:\Program Files (x86)\Common Files\Umbrella\umbrella.exe
    PRC - [2013/06/16 15:56:50 | 000,020,248 | ---- | M] (Smartbar) -- C:\Users\Áine\AppData\Local\Smartbar\Application\QuickShare.exe
    PRC - [2013/06/07 18:48:44 | 000,903,160 | ---- | M] (PC Utilities Pro) -- C:\Program Files (x86)\Optimizer Pro\OptProReminder.exe
    PRC - [2013/06/07 18:48:44 | 000,418,808 | ---- | M] (PC Utilities Pro) -- C:\Program Files (x86)\Optimizer Pro\OptProSmartScan.exe
    PRC - [2013/04/02 16:35:26 | 001,074,736 | ---- | M] (Iminent) -- C:\Program Files (x86)\Iminent\Iminent.exe
    PRC - [2013/04/02 16:35:26 | 000,884,784 | ---- | M] (Iminent) -- C:\Program Files (x86)\Iminent\Iminent.Messengers.exe
    PRC - [2013/03/06 13:15:38 | 000,580,672 | ---- | M] (Disc Soft Ltd) -- C:\Program Files (x86)\DAEMON Tools Ultra\DiscSoftBusService.exe
    PRC - [2013/02/07 13:19:12 | 001,683,456 | ---- | M] (Bandoo Media Inc) -- C:\Program Files (x86)\Search Results Toolbar\Datamngr\datamngrUI.exe
    PRC - [2013/01/31 15:10:00 | 000,201,808 | ---- | M] (Somoto) -- C:\Program Files (x86)\FilesFrog Update Checker\update_checker.exe
    PRC - [2012/09/23 20:43:48 | 003,477,640 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
    PRC - [2012/09/23 20:43:36 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    PRC - [2012/02/06 18:54:04 | 000,255,376 | ---- | M] (Acer Incorporated) -- C:\Program Files\Acer\Acer Updater\UpdaterService.exe
    PRC - [2011/01/17 19:08:58 | 011,322,880 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
    PRC - [2011/01/17 19:08:58 | 011,314,688 | ---- | M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
    PRC - [2010/12/09 11:45:58 | 000,074,752 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files (x86)\Winamp\winampa.exe
    PRC - [2010/01/22 09:10:50 | 001,287,760 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LManager.exe
    PRC - [2010/01/22 09:10:50 | 000,310,352 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe
    PRC - [2010/01/22 09:10:50 | 000,268,368 | ---- | M] (Dritek System Inc.) -- C:\Program Files (x86)\Launch Manager\LMworker.exe
    PRC - [2010/01/13 03:25:10 | 000,265,984 | ---- | M] (NewTech Infosystems, Inc.) -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
    PRC - [2010/01/07 02:50:02 | 000,255,744 | ---- | M] (NewTech Infosystems, Inc.) -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
    PRC - [2009/12/24 02:39:04 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
    PRC - [2009/12/24 02:39:02 | 000,284,696 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
    PRC - [2009/12/22 10:17:04 | 000,225,280 | ---- | M] () -- C:\ProgramData\DatacardService\DCService.exe
    PRC - [2009/12/22 10:13:06 | 000,241,664 | ---- | M] (Huawei Technologies Co., Ltd.) -- C:\ProgramData\DatacardService\DCSHelper.exe
    PRC - [2009/12/09 09:48:26 | 002,320,920 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
    PRC - [2009/12/09 09:48:24 | 000,268,824 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
    PRC - [2009/09/10 14:42:30 | 000,349,480 | ---- | M] (Egis Technology Inc.) -- C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
    PRC - [2009/08/28 10:38:58 | 001,150,496 | ---- | M] (Acer Incorporated) -- C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
    PRC - [2009/08/04 06:09:34 | 000,199,464 | ---- | M] (Egis Technology Inc.) -- C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe
    PRC - [2009/07/24 20:38:50 | 000,189,728 | ---- | M] (Protexis Inc.) -- c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe


    ========== Modules (No Company Name) ==========

    MOD - [2013/06/16 15:57:42 | 000,021,272 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.Resources.Utilities.dll
    MOD - [2013/06/16 15:57:36 | 000,025,368 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll
    MOD - [2013/06/16 15:57:34 | 000,019,736 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.Resources.SideBySide.dll
    MOD - [2013/06/16 15:57:28 | 000,013,592 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.Resources.ProcessDownMonitor.dll
    MOD - [2013/06/16 15:57:26 | 000,245,528 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.Resources.NetSeer.dll
    MOD - [2013/06/16 15:57:26 | 000,051,480 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll
    MOD - [2013/06/16 15:57:24 | 000,111,896 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll
    MOD - [2013/06/16 15:57:14 | 000,053,016 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.Resources.AutomaticUpdates.dll
    MOD - [2013/06/16 15:57:10 | 000,078,104 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.Personalization.BusinessLogic.dll
    MOD - [2013/06/16 15:57:10 | 000,016,152 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll
    MOD - [2013/06/16 15:57:06 | 000,149,784 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll
    MOD - [2013/06/16 15:57:04 | 000,057,112 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll
    MOD - [2013/06/16 15:57:00 | 000,012,568 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.EventManager.dll
    MOD - [2013/06/16 15:56:58 | 000,032,024 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll
    MOD - [2013/06/16 15:56:58 | 000,013,592 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll
    MOD - [2013/06/16 15:56:56 | 000,014,104 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.GUI.Multimedia.Loader.dll
    MOD - [2013/06/16 15:56:54 | 001,710,872 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll
    MOD - [2013/06/16 15:56:52 | 000,722,712 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll
    MOD - [2013/06/16 15:56:52 | 000,081,176 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll
    MOD - [2013/06/16 15:55:40 | 000,047,384 | ---- | M] () -- C:\Users\Áine\AppData\Local\Smartbar\Application\MACTrackBarLib.dll
    MOD - [2013/05/29 19:16:52 | 000,220,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\24ab5f14e55ae0dec23141f6e59a577c\CustomMarshalers.ni.dll
    MOD - [2013/05/29 19:13:38 | 000,997,888 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\ee4683cbfd60ee35d95e2e6d32fc3981\System.Management.ni.dll
    MOD - [2013/05/29 18:59:13 | 003,325,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\82a4c4666ad83c3a375210247e69646b\WindowsBase.ni.dll
    MOD - [2013/05/29 18:58:46 | 012,433,920 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\05682429807d34d6ff05a77ea153935f\System.Windows.Forms.ni.dll
    MOD - [2013/05/29 18:58:27 | 001,840,640 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\9e64c6dea847aec2685eec4da29ea9b0\System.Web.Services.ni.dll
    MOD - [2013/05/29 18:58:23 | 000,628,224 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\2b54822a40e9b08479a79cce0e196af1\System.EnterpriseServices.ni.dll
    MOD - [2013/05/29 18:58:23 | 000,627,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\00038bb019bb7e4470d3962b58b1926f\System.Transactions.ni.dll
    MOD - [2013/05/29 18:58:22 | 006,618,624 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\d0dd051976a66e08325379754531421c\System.Data.ni.dll
    MOD - [2013/05/29 18:58:15 | 001,592,832 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\e2ee5d77ebe0bd025e7a7a317a43d677\System.Drawing.ni.dll
    MOD - [2013/05/29 18:58:12 | 011,824,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\a00aab40bdf5aed84b4d4294965cf20d\System.Web.ni.dll
    MOD - [2013/05/29 18:58:02 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\01b47a246b4ec7bfec31bf4503aceda1\System.Runtime.Remoting.ni.dll
    MOD - [2013/05/29 18:57:52 | 005,453,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\10aba2c167cc1119b80159fd9ac71ca8\System.Xml.ni.dll
    MOD - [2013/05/29 18:57:48 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\96a3b737db1e72adaf32d2b350e50c23\System.Configuration.ni.dll
    MOD - [2013/05/29 18:57:46 | 007,974,400 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\c54750e64ba10d0fb7b6a636fb3695ca\System.ni.dll
    MOD - [2013/05/29 18:57:30 | 011,490,816 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\b0b8554c05f194f546a8ed531320760b\mscorlib.ni.dll
    MOD - [2013/04/21 21:44:32 | 000,087,952 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
    MOD - [2013/04/21 21:44:04 | 001,242,952 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
    MOD - [2013/04/08 19:16:37 | 000,911,432 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Data.SQLite\1.0.66.0__db937bc2d44ff139\System.Data.SQLite.dll
    MOD - [2013/04/08 19:16:36 | 000,139,264 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\Interop.SHDocVw\1.1.0.0__84542ff99aed6a4d\Interop.SHDocVw.dll
    MOD - [2013/03/26 10:58:33 | 002,232,272 | ---- | M] () -- c:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll
    MOD - [2013/02/16 23:06:06 | 000,148,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\32ecd6bef90d6da4b2b33850c3ce99e1\System.Configuration.Install.ni.dll
    MOD - [2013/02/16 16:19:56 | 013,199,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\806c4ba7d696ab586ffd774a31f1a66b\System.Windows.Forms.ni.dll
    MOD - [2013/01/15 19:16:06 | 001,885,696 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Web.Services\511f6e31e7eff4ab3d9194cf9b1c51c1\System.Web.Services.ni.dll
    MOD - [2013/01/15 19:15:56 | 018,080,256 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\e464dc608a88955a0edccba917d207de\System.ServiceModel.ni.dll
    MOD - [2013/01/15 19:15:30 | 001,078,272 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\8e092d89921648308ac103bb08bfd370\System.IdentityModel.ni.dll
    MOD - [2013/01/15 19:13:53 | 000,787,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\d340a103e8f063a3771cbeaaec58d157\System.EnterpriseServices.ni.dll
    MOD - [2013/01/15 19:13:53 | 000,236,032 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\d340a103e8f063a3771cbeaaec58d157\System.EnterpriseServices.Wrapper.dll
    MOD - [2013/01/15 19:13:52 | 001,021,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\22c60ca3c2b18e041ebff2578c90cba3\System.Runtime.DurableInstancing.ni.dll
    MOD - [2013/01/15 19:13:52 | 000,649,728 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\9253eb314ef2f5adada0d5fdf1d4a839\System.Transactions.ni.dll
    MOD - [2013/01/15 19:13:51 | 000,143,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\62d047ff6c2865139d95eb19545b1cc6\SMDiagnostics.ni.dll
    MOD - [2013/01/15 19:13:50 | 002,647,040 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\48ee0e1de873152ec7e85d7456c1cc09\System.Runtime.Serialization.ni.dll
    MOD - [2013/01/15 19:13:47 | 001,801,728 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\cbb7db665b3ba25a931258eb702527f5\System.Xaml.ni.dll
    MOD - [2013/01/15 00:26:29 | 018,002,944 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\f28a346ae10e2eec581608f591cf7116\PresentationFramework.ni.dll
    MOD - [2013/01/15 00:25:59 | 011,451,904 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\8983c040161b34c64474f195bff5e2de\PresentationCore.ni.dll
    MOD - [2013/01/15 00:25:54 | 006,815,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data\8167f7d08668a5859e76aa9a1124a42f\System.Data.ni.dll
    MOD - [2013/01/15 00:25:47 | 007,069,696 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\08bebcf66ad666dfdf2a4a934d79c0f9\System.Core.ni.dll
    MOD - [2013/01/15 00:25:42 | 005,617,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\d884c684ee3f738a60e3c50dd5d88caa\System.Xml.ni.dll
    MOD - [2013/01/15 00:25:42 | 003,858,944 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\5dbabea688adfc665e3453561736699a\WindowsBase.ni.dll
    MOD - [2013/01/15 00:25:40 | 001,667,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\b83993cc955262507c8ead67567c8060\System.Drawing.ni.dll
    MOD - [2013/01/15 00:25:37 | 000,982,528 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\cb72ac8478a5ea7e2d570bb710ecb1c1\System.Configuration.ni.dll
    MOD - [2013/01/15 00:25:35 | 009,094,656 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\df418085cedae9fa2efee87e20a419a4\System.ni.dll
    MOD - [2013/01/15 00:25:22 | 014,413,824 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\60c214b6ad5691e368a16ec65d127c27\mscorlib.ni.dll
    MOD - [2011/10/12 16:21:34 | 000,985,088 | ---- | M] () -- C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
    MOD - [2010/01/16 04:42:46 | 008,007,680 | ---- | M] () -- C:\Windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll
    MOD - [2010/01/07 02:46:56 | 000,465,576 | ---- | M] () -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll
    MOD - [2009/06/10 22:23:19 | 000,261,632 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
    MOD - [2009/06/10 22:23:17 | 002,933,248 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    MOD - [2009/06/10 22:22:50 | 000,069,120 | ---- | M] () -- C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
    MOD - [2009/05/20 07:02:04 | 000,072,200 | ---- | M] () -- C:\Program Files (x86)\Launch Manager\CdDirIo.dll


    ========== Services (SafeList) ==========

    SRV:64bit: - [2012/02/06 18:54:04 | 000,255,376 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files\Acer\Acer Updater\UpdaterService.exe -- (Updater Service)
    SRV:64bit: - [2012/02/06 18:54:04 | 000,255,376 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files\Acer\Acer Updater\UpdaterService.exe -- (Live Updater Service)
    SRV:64bit: - [2010/01/18 20:55:46 | 000,842,784 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe -- (ePowerSvc)
    SRV:64bit: - [2009/07/14 02:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
    SRV - [2013/07/12 14:37:18 | 003,289,472 | ---- | M] (Skype Technologies S.A.) [Auto | Running] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service)
    SRV - [2013/07/08 10:25:24 | 000,080,064 | ---- | M] () [Auto | Running] -- C:\Users\Áine\AppData\Local\BartVPN\BartVPNService.exe -- (BartVPNService)
    SRV - [2013/07/03 19:54:33 | 000,117,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
    SRV - [2013/06/26 20:37:57 | 002,723,368 | ---- | M] (Iminent) [Auto | Running] -- C:\Program Files (x86)\Common Files\Umbrella\umbrella.exe -- (SProtection)
    SRV - [2013/06/21 09:53:36 | 000,162,408 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
    SRV - [2013/06/18 18:55:27 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
    SRV - [2013/03/06 13:15:38 | 000,580,672 | ---- | M] (Disc Soft Ltd) [On_Demand | Running] -- C:\Program Files (x86)\DAEMON Tools Ultra\DiscSoftBusService.exe -- (Disc Soft Bus Service)
    SRV - [2013/03/01 02:48:58 | 000,118,520 | ---- | M] (Riverbed Technology, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\WinPcap\rpcapd.exe -- (rpcapd)
    SRV - [2012/09/23 20:43:36 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
    SRV - [2010/03/18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
    SRV - [2010/01/22 09:10:50 | 000,310,352 | ---- | M] (Dritek System Inc.) [Auto | Running] -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe -- (DsiWMIService)
    SRV - [2010/01/07 02:50:02 | 000,255,744 | ---- | M] (NewTech Infosystems, Inc.) [Auto | Running] -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe -- (NTI IScheduleSvc)
    SRV - [2009/12/24 02:39:04 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
    SRV - [2009/12/22 10:17:04 | 000,225,280 | ---- | M] () [Auto | Running] -- C:\ProgramData\DatacardService\DCService.exe -- (DCService.exe)
    SRV - [2009/12/09 09:48:26 | 002,320,920 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS)
    SRV - [2009/12/09 09:48:24 | 000,268,824 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
    SRV - [2009/09/10 14:42:46 | 000,305,448 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe -- (MWLService)
    SRV - [2009/08/28 10:38:58 | 001,150,496 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files (x86)\Acer\Registration\GregHSRW.exe -- (Greg_Service)
    SRV - [2009/07/24 20:38:50 | 000,189,728 | ---- | M] (Protexis Inc.) [Auto | Running] -- c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)
    SRV - [2009/06/10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


    ========== Driver Services (SafeList) ==========

    DRV:64bit: - [2013/03/27 22:39:08 | 000,029,696 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dtscsibus.sys -- (dtscsibus)
    DRV:64bit: - [2013/03/06 08:30:54 | 000,031,232 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tap0901.sys -- (tap0901)
    DRV:64bit: - [2013/03/01 02:49:12 | 000,036,600 | ---- | M] (Riverbed Technology, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\npf.sys -- (NPF)
    DRV:64bit: - [2013/02/12 15:02:24 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usb8023x.sys -- (usb_rndisx)
    DRV:64bit: - [2012/12/15 12:03:17 | 000,009,216 | ---- | M] (SpeedJet Technology INC.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SjtWinIo.sys -- (SjtWinIo)
    DRV:64bit: - [2012/12/13 13:50:36 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
    DRV:64bit: - [2012/09/10 10:41:06 | 000,022,528 | ---- | M] (Apple Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netaapl64.sys -- (Netaapl)
    DRV:64bit: - [2012/08/21 13:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys


  • Advertisement
  • #7
    jsa112
    Registered Users, Registered Users 2 Posts: 840 ✭✭✭jsa112


    bit of work to do sadly


    try uninstall these from control panel

    "iLivid" = iLivid
    "ilividtoolbargaw" = Search-Results Toolbar


    then run adwcleaner and post its log here

    http://www.bleepingcomputer.com/download/adwcleaner/


    then open OTL copy and paste this into the box


    :OTL
    IE:64bit: - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-results.com/sr?src...q={searchTerms}
    IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-results.com/sr?src...q={searchTerms}
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www.delta-search.com/?affID=1...F8C417FEDCF954
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?babsrc=HP...19357&tsp=4953
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013
    IE - HKCU\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013
    IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={search...19357&tsp=4953
    FF - prefs.js..browser.search.defaultenginename: "Search Results"
    FF - prefs.js..browser.search.order.1: "Search Results"
    FF - prefs.js..browser.search.selectedEngine: "Web Search"
    FF - prefs.js..browser.startup.homepage: "http://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=IE&userid=4321731e-450c-41fa-8c8f-f1721e45e917&searchtype=hp&installDate=08/04/2013&quot;
    FF - prefs.js..keyword.URL: "http://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=IE&userid=4321731e-450c-41fa-8c8f-f1721e45e917&searchtype=ds&installDate=08/04/2013&q=&quot;
    [2013/02/11 23:30:18 | 000,000,000 | ---D | M] (Search-Results Toolbar) -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\extensions\{377e5d4d-77e5-476a-8716-7e70a9272da0}
    [2013/03/27 22:40:27 | 000,000,000 | ---D | M] (Delta Toolbar) -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\extensions\ffxtlbr@delta.com
    [2013/07/24 20:32:50 | 000,006,507 | ---- | M] () -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\searchplugins\babylon.xml
    [2013/07/24 20:33:22 | 000,001,294 | ---- | M] () -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\searchplugins\delta.xml
    [2013/08/01 21:52:43 | 000,022,910 | ---- | M] () -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\searchplugins\Web Search.xml
    [2013/02/11 23:30:13 | 000,002,687 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\Search_Results.xml
    CHR - default_search_provider: Babylon (Enabled)
    CHR - default_search_provider: search_url = http://search.babylon.com/?q={search...19357&tsp=4953
    CHR - homepage: http://search.babylon.com/?babsrc=HP...19357&tsp=4953
    O2:64bit: - BHO: (DataMngr) - {C1ED9DA0-AFD0-4b90-AC6A-D3874F591014} - C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\BrowserConnection.dll (Bandoo Media Inc)
    O2 - BHO: (Search-Results Toolbar) - {377e5d4d-77e5-476a-8716-7e70a9272da0} - C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\searchresultsDx.dll (APN LLC)
    O2 - BHO: (delta Helper Object) - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.21.5\bh\delta.dll (Delta-search.com)
    O3 - HKLM\..\Toolbar: (Search-Results Toolbar) - {377e5d4d-77e5-476a-8716-7e70a9272da0} - C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\searchresultsDx.dll (APN LLC)
    O3 - HKLM\..\Toolbar: (Delta Toolbar) - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.21.5\deltaTlbr.dll (Delta-search.com)
    O4 - HKLM..\Run: [DATAMNGR] C:\Program Files (x86)\Search Results Toolbar\Datamngr\datamngrUI.exe (Bandoo Media Inc)
    O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\SEARCH~1\Datamngr\x64\datamngr.dll) - C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\datamngr.dll (Bandoo Media Inc)
    O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\SEARCH~1\Datamngr\x64\IEBHO.dll) - C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\IEBHO.dll (Bandoo Media Inc)
    O32 - AutoRun File - [2005/08/01 17:44:27 | 000,000,225 | R--- | M] () - E:\Autorun.inf -- [ CDFS ]
    O32 - AutoRun File - [2005/09/16 21:51:12 | 000,999,424 | R--- | M] (Microsoft Corporation) - E:\autorun.exe -- [ CDFS ]
    O32 - AutoRun File - [2013/01/03 16:15:15 | 000,000,063 | R--- | M] () - G:\autorun.inf -- [ CDFS ]
    O33 - MountPoints2\{09a4b0da-9709-11e2-83c0-80769500a8fb}\Shell - "" = AutoRun
    O33 - MountPoints2\{09a4b0da-9709-11e2-83c0-80769500a8fb}\Shell\AutoRun\command - "" = G:\AW-2012_Issues.exe -- [2011/07/20 10:09:40 | 001,508,864 | R--- | M] (Linasoft)
    O33 - MountPoints2\{483dc2d3-a38c-11e2-9e36-bbcbd1f4c210}\Shell - "" = AutoRun
    O33 - MountPoints2\{483dc2d3-a38c-11e2-9e36-bbcbd1f4c210}\Shell\AutoRun\command - "" = P:\ialaunch.exe id= ver=1.0.0.0
    O33 - MountPoints2\{a7fcbca0-9ef3-11e2-8122-ba18b1d23d4c}\Shell - "" = AutoRun
    O33 - MountPoints2\{a7fcbca0-9ef3-11e2-8122-ba18b1d23d4c}\Shell\AutoRun\command - "" = F:\AW-2012_Issues.exe
    O33 - MountPoints2\{c55ee43e-c4f8-11df-b58e-705ab646f6a0}\Shell - "" = AutoRun
    O33 - MountPoints2\{c55ee43e-c4f8-11df-b58e-705ab646f6a0}\Shell\AutoRun\command - "" = F:\AutoRun.exe
    O33 - MountPoints2\G\Shell - "" = AutoRun
    O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\AW-2012_Issues.exe -- [2011/07/20 10:09:40 | 001,508,864 | R--- | M] (Linasoft)
    [2013/03/27 22:40:06 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Babylon
    [2012/07/16 19:24:30 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Iqezt
    [2012/03/10 21:33:05 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Vso
    [2012/07/11 22:27:25 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Vyes

    :Commands
    [PURITY]
    [EMPTYTEMP]
    [EMPTYFLASH]
    [RESETHOSTS]
    [EMPTYJAVA]
    [CREATERESTOREPOINT]
    [Reboot]
    :Files
    ipconfig /flushdns /c


    click run fix post the log it gives.


  • #8
    Prizen
    Registered Users, Registered Users 2 Posts: 44 ✭Prizen


    jsa112 wrote: »
    bit of work to do sadly


    try uninstall these from control panel

    "iLivid" = iLivid
    "ilividtoolbargaw" = Search-Results Toolbar


    then run adwcleaner and post its log here

    http://www.bleepingcomputer.com/download/adwcleaner/


    then open OTL copy and paste this into the box


    :OTL
    IE:64bit: - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-results.com/sr?src...q={searchTerms}
    IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-results.com/sr?src...q={searchTerms}
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www.delta-search.com/?affID=1...F8C417FEDCF954
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?babsrc=HP...19357&tsp=4953
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013
    IE - HKCU\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013
    IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={search...19357&tsp=4953
    FF - prefs.js..browser.search.defaultenginename: "Search Results"
    FF - prefs.js..browser.search.order.1: "Search Results"
    FF - prefs.js..browser.search.selectedEngine: "Web Search"
    FF - prefs.js..browser.startup.homepage: "http://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=IE&userid=4321731e-450c-41fa-8c8f-f1721e45e917&searchtype=hp&installDate=08/04/2013&quot;
    FF - prefs.js..keyword.URL: "http://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=IE&userid=4321731e-450c-41fa-8c8f-f1721e45e917&searchtype=ds&installDate=08/04/2013&q=&quot;
    [2013/02/11 23:30:18 | 000,000,000 | ---D | M] (Search-Results Toolbar) -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\extensions\{377e5d4d-77e5-476a-8716-7e70a9272da0}
    [2013/03/27 22:40:27 | 000,000,000 | ---D | M] (Delta Toolbar) -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\extensions\ffxtlbr@delta.com
    [2013/07/24 20:32:50 | 000,006,507 | ---- | M] () -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\searchplugins\babylon.xml
    [2013/07/24 20:33:22 | 000,001,294 | ---- | M] () -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\searchplugins\delta.xml
    [2013/08/01 21:52:43 | 000,022,910 | ---- | M] () -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\searchplugins\Web Search.xml
    [2013/02/11 23:30:13 | 000,002,687 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\Search_Results.xml
    CHR - default_search_provider: Babylon (Enabled)
    CHR - default_search_provider: search_url = http://search.babylon.com/?q={search...19357&tsp=4953
    CHR - homepage: http://search.babylon.com/?babsrc=HP...19357&tsp=4953
    O2:64bit: - BHO: (DataMngr) - {C1ED9DA0-AFD0-4b90-AC6A-D3874F591014} - C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\BrowserConnection.dll (Bandoo Media Inc)
    O2 - BHO: (Search-Results Toolbar) - {377e5d4d-77e5-476a-8716-7e70a9272da0} - C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\searchresultsDx.dll (APN LLC)
    O2 - BHO: (delta Helper Object) - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.21.5\bh\delta.dll (Delta-search.com)
    O3 - HKLM\..\Toolbar: (Search-Results Toolbar) - {377e5d4d-77e5-476a-8716-7e70a9272da0} - C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\searchresultsDx.dll (APN LLC)
    O3 - HKLM\..\Toolbar: (Delta Toolbar) - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.21.5\deltaTlbr.dll (Delta-search.com)
    O4 - HKLM..\Run: [DATAMNGR] C:\Program Files (x86)\Search Results Toolbar\Datamngr\datamngrUI.exe (Bandoo Media Inc)
    O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\SEARCH~1\Datamngr\x64\datamngr.dll) - C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\datamngr.dll (Bandoo Media Inc)
    O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\SEARCH~1\Datamngr\x64\IEBHO.dll) - C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\IEBHO.dll (Bandoo Media Inc)
    O32 - AutoRun File - [2005/08/01 17:44:27 | 000,000,225 | R--- | M] () - E:\Autorun.inf -- [ CDFS ]
    O32 - AutoRun File - [2005/09/16 21:51:12 | 000,999,424 | R--- | M] (Microsoft Corporation) - E:\autorun.exe -- [ CDFS ]
    O32 - AutoRun File - [2013/01/03 16:15:15 | 000,000,063 | R--- | M] () - G:\autorun.inf -- [ CDFS ]
    O33 - MountPoints2\{09a4b0da-9709-11e2-83c0-80769500a8fb}\Shell - "" = AutoRun
    O33 - MountPoints2\{09a4b0da-9709-11e2-83c0-80769500a8fb}\Shell\AutoRun\command - "" = G:\AW-2012_Issues.exe -- [2011/07/20 10:09:40 | 001,508,864 | R--- | M] (Linasoft)
    O33 - MountPoints2\{483dc2d3-a38c-11e2-9e36-bbcbd1f4c210}\Shell - "" = AutoRun
    O33 - MountPoints2\{483dc2d3-a38c-11e2-9e36-bbcbd1f4c210}\Shell\AutoRun\command - "" = P:\ialaunch.exe id= ver=1.0.0.0
    O33 - MountPoints2\{a7fcbca0-9ef3-11e2-8122-ba18b1d23d4c}\Shell - "" = AutoRun
    O33 - MountPoints2\{a7fcbca0-9ef3-11e2-8122-ba18b1d23d4c}\Shell\AutoRun\command - "" = F:\AW-2012_Issues.exe
    O33 - MountPoints2\{c55ee43e-c4f8-11df-b58e-705ab646f6a0}\Shell - "" = AutoRun
    O33 - MountPoints2\{c55ee43e-c4f8-11df-b58e-705ab646f6a0}\Shell\AutoRun\command - "" = F:\AutoRun.exe
    O33 - MountPoints2\G\Shell - "" = AutoRun
    O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\AW-2012_Issues.exe -- [2011/07/20 10:09:40 | 001,508,864 | R--- | M] (Linasoft)
    [2013/03/27 22:40:06 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Babylon
    [2012/07/16 19:24:30 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Iqezt
    [2012/03/10 21:33:05 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Vso
    [2012/07/11 22:27:25 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Vyes

    :Commands
    [PURITY]
    [EMPTYTEMP]
    [EMPTYFLASH]
    [RESETHOSTS]
    [EMPTYJAVA]
    [CREATERESTOREPOINT]
    [Reboot]
    :Files
    ipconfig /flushdns /c


    click run fix post the log it gives.

    heres the otl log after fix

    All processes killed
    Error: Unable to interpret <IE:64bit: - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-results.com/sr?src...q={searchTerms}> in the current context!
    Error: Unable to interpret <IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-results.com/sr?src...q={searchTerms}> in the current context!
    Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www.delta-search.com/?affID=1...F8C417FEDCF954> in the current context!
    Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013> in the current context!
    Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013> in the current context!
    Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?babsrc=HP...19357&tsp=4953> in the current context!
    Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013> in the current context!
    Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013> in the current context!
    Error: Unable to interpret <IE - HKCU\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013> in the current context!
    Error: Unable to interpret <IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={search...19357&tsp=4953> in the current context!
    Error: Unable to interpret <FF - prefs.js..browser.search.defaultenginename: "Search Results"> in the current context!
    Error: Unable to interpret <FF - prefs.js..browser.search.order.1: "Search Results"> in the current context!
    Error: Unable to interpret <FF - prefs.js..browser.search.selectedEngine: "Web Search"> in the current context!
    Error: Unable to interpret <FF - prefs.js..browser.startup.homepage: "http://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=IE&userid=4321731e-450c-41fa-8c8f-f1721e45e917&searchtype=hp&installDate=08/04/2013"&gt; in the current context!
    Error: Unable to interpret <FF - prefs.js..keyword.URL: "http://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=IE&userid=4321731e-450c-41fa-8c8f-f1721e45e917&searchtype=ds&installDate=08/04/2013&q="&gt; in the current context!
    Error: Unable to interpret <[2013/02/11 23:30:18 | 000,000,000 | ---D | M] (Search-Results Toolbar) -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\extensions\{377e5d4d-77e5-476a-8716-7e70a9272da0}> in the current context!
    Error: Unable to interpret <[2013/03/27 22:40:27 | 000,000,000 | ---D | M] (Delta Toolbar) -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\extensions\ffxtlbr@delta.com> in the current context!
    Error: Unable to interpret <[2013/07/24 20:32:50 | 000,006,507 | ---- | M] () -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\searchplugins\babylon.xml> in the current context!
    Error: Unable to interpret <[2013/07/24 20:33:22 | 000,001,294 | ---- | M] () -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\searchplugins\delta.xml> in the current context!
    Error: Unable to interpret <[2013/08/01 21:52:43 | 000,022,910 | ---- | M] () -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\searchplugins\Web Search.xml> in the current context!
    Error: Unable to interpret <[2013/02/11 23:30:13 | 000,002,687 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\Search_Results.xml> in the current context!
    Error: Unable to interpret <CHR - default_search_provider: Babylon (Enabled)> in the current context!
    Error: Unable to interpret <CHR - default_search_provider: search_url = http://search.babylon.com/?q={search...19357&tsp=4953> in the current context!
    Error: Unable to interpret <CHR - homepage: http://search.babylon.com/?babsrc=HP...19357&tsp=4953> in the current context!
    Error: Unable to interpret <O2:64bit: - BHO: (DataMngr) - {C1ED9DA0-AFD0-4b90-AC6A-D3874F591014} - C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\BrowserConnection.dll (Bandoo Media Inc)> in the current context!
    Error: Unable to interpret <O2 - BHO: (Search-Results Toolbar) - {377e5d4d-77e5-476a-8716-7e70a9272da0} - C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\searchresultsDx.dll (APN LLC)> in the current context!
    Error: Unable to interpret <O2 - BHO: (delta Helper Object) - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.21.5\bh\delta.dll (Delta-search.com)> in the current context!
    Error: Unable to interpret <O3 - HKLM\..\Toolbar: (Search-Results Toolbar) - {377e5d4d-77e5-476a-8716-7e70a9272da0} - C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\searchresultsDx.dll (APN LLC)> in the current context!
    Error: Unable to interpret <O3 - HKLM\..\Toolbar: (Delta Toolbar) - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.21.5\deltaTlbr.dll (Delta-search.com)> in the current context!
    Error: Unable to interpret <O4 - HKLM..\Run: [DATAMNGR] C:\Program Files (x86)\Search Results Toolbar\Datamngr\datamngrUI.exe (Bandoo Media Inc)> in the current context!
    Error: Unable to interpret <O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\SEARCH~1\Datamngr\x64\datamngr.dll) - C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\datamngr.dll (Bandoo Media Inc)> in the current context!
    Error: Unable to interpret <O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\SEARCH~1\Datamngr\x64\IEBHO.dll) - C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\IEBHO.dll (Bandoo Media Inc)> in the current context!
    Error: Unable to interpret <O32 - AutoRun File - [2005/08/01 17:44:27 | 000,000,225 | R--- | M] () - E:\Autorun.inf -- [ CDFS ]> in the current context!
    Error: Unable to interpret <O32 - AutoRun File - [2005/09/16 21:51:12 | 000,999,424 | R--- | M] (Microsoft Corporation) - E:\autorun.exe -- [ CDFS ]> in the current context!
    Error: Unable to interpret <O32 - AutoRun File - [2013/01/03 16:15:15 | 000,000,063 | R--- | M] () - G:\autorun.inf -- [ CDFS ]> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{09a4b0da-9709-11e2-83c0-80769500a8fb}\Shell - "" = AutoRun> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{09a4b0da-9709-11e2-83c0-80769500a8fb}\Shell\AutoRun\command - "" = G:\AW-2012_Issues.exe -- [2011/07/20 10:09:40 | 001,508,864 | R--- | M] (Linasoft)> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{483dc2d3-a38c-11e2-9e36-bbcbd1f4c210}\Shell - "" = AutoRun> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{483dc2d3-a38c-11e2-9e36-bbcbd1f4c210}\Shell\AutoRun\command - "" = P:\ialaunch.exe id= ver=1.0.0.0> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{a7fcbca0-9ef3-11e2-8122-ba18b1d23d4c}\Shell - "" = AutoRun> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{a7fcbca0-9ef3-11e2-8122-ba18b1d23d4c}\Shell\AutoRun\command - "" = F:\AW-2012_Issues.exe> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{c55ee43e-c4f8-11df-b58e-705ab646f6a0}\Shell - "" = AutoRun> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{c55ee43e-c4f8-11df-b58e-705ab646f6a0}\Shell\AutoRun\command - "" = F:\AutoRun.exe> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\G\Shell - "" = AutoRun> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\AW-2012_Issues.exe -- [2011/07/20 10:09:40 | 001,508,864 | R--- | M] (Linasoft)> in the current context!
    Error: Unable to interpret <[2013/03/27 22:40:06 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Babylon> in the current context!
    Error: Unable to interpret <[2012/07/16 19:24:30 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Iqezt> in the current context!
    Error: Unable to interpret <[2012/03/10 21:33:05 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Vso> in the current context!
    Error: Unable to interpret <[2012/07/11 22:27:25 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Vyes> in the current context!
    ========== COMMANDS ==========

    [EMPTYTEMP]

    User: All Users

    User: Default
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 33170 bytes
    ->Flash cache emptied: 57472 bytes

    User: Default User
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->Flash cache emptied: 0 bytes

    User: Finnian
    ->Temp folder emptied: 185732217 bytes
    ->Temporary Internet Files folder emptied: 120892003 bytes
    ->Java cache emptied: 0 bytes
    ->FireFox cache emptied: 67561023 bytes
    ->Google Chrome cache emptied: 365640421 bytes
    ->Flash cache emptied: 128075 bytes

    User: Guest
    ->Temp folder emptied: 853375228 bytes
    ->Temporary Internet Files folder emptied: 74739846 bytes
    ->Java cache emptied: 5388 bytes
    ->FireFox cache emptied: 47498815 bytes
    ->Google Chrome cache emptied: 15087805 bytes
    ->Flash cache emptied: 13912 bytes

    User: Public

    User: Áine
    ->Temp folder emptied: 6150353245 bytes
    ->Temporary Internet Files folder emptied: 304742812 bytes
    ->Java cache emptied: 1 bytes
    ->FireFox cache emptied: 118220238 bytes
    ->Google Chrome cache emptied: 10190219 bytes
    ->Flash cache emptied: 8196715 bytes

    %systemdrive% .tmp files removed: 0 bytes
    %systemroot% .tmp files removed: 0 bytes
    %systemroot%\System32 .tmp files removed: 0 bytes
    %systemroot%\System32 (64bit) .tmp files removed: 0 bytes
    %systemroot%\System32\drivers .tmp files removed: 0 bytes
    Windows Temp folder emptied: 340970365 bytes
    %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 36068535 bytes
    RecycleBin emptied: 4298367122 bytes

    Total Files Cleaned = 12,396.00 mb


    [EMPTYFLASH]

    User: All Users

    User: Default
    ->Flash cache emptied: 0 bytes

    User: Default User
    ->Flash cache emptied: 0 bytes

    User: Finnian
    ->Flash cache emptied: 0 bytes

    User: Guest
    ->Flash cache emptied: 0 bytes

    User: Public

    User: Áine
    ->Flash cache emptied: 0 bytes

    Total Flash Files Cleaned = 0.00 mb

    C:\Windows\System32\drivers\etc\Hosts moved successfully.
    HOSTS file reset successfully

    [EMPTYJAVA]

    User: All Users

    User: Default

    User: Default User

    User: Finnian
    ->Java cache emptied: 0 bytes

    User: Guest
    ->Java cache emptied: 0 bytes

    User: Public

    User: Áine
    ->Java cache emptied: 0 bytes

    Total Java Files Cleaned = 0.00 mb

    Restore point Set: OTL Restore Point
    ========== FILES ==========
    < ipconfig /flushdns /c >
    No captured output from command...
    C:\Users\Áine\Downloads\cmd.bat deleted successfully.

    OTL by OldTimer - Version 3.2.69.0 log created on 08042013_174908

    Files\Folders moved on Reboot...
    C:\Users\Áine\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
    File move failed. C:\Windows\temp\dsiwmis.log scheduled to be moved on reboot.

    PendingFileRenameOperations files...

    Registry entries deleted on Reboot...


  • #9
    Prizen
    Registered Users, Registered Users 2 Posts: 44 ✭Prizen


    Prizen wrote: »
    heres the otl log after fix

    All processes killed
    Error: Unable to interpret <IE:64bit: - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-results.com/sr?src...q={searchTerms}> in the current context!
    Error: Unable to interpret <IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-results.com/sr?src...q={searchTerms}> in the current context!
    Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www.delta-search.com/?affID=1...F8C417FEDCF954> in the current context!
    Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013> in the current context!
    Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013> in the current context!
    Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?babsrc=HP...19357&tsp=4953> in the current context!
    Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013> in the current context!
    Error: Unable to interpret <IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013> in the current context!
    Error: Unable to interpret <IE - HKCU\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://feed.snapdo.com/?publisher=Qu...ate=08/04/2013> in the current context!
    Error: Unable to interpret <IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={search...19357&tsp=4953> in the current context!
    Error: Unable to interpret <FF - prefs.js..browser.search.defaultenginename: "Search Results"> in the current context!
    Error: Unable to interpret <FF - prefs.js..browser.search.order.1: "Search Results"> in the current context!
    Error: Unable to interpret <FF - prefs.js..browser.search.selectedEngine: "Web Search"> in the current context!
    Error: Unable to interpret <FF - prefs.js..browser.startup.homepage: "http://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=IE&userid=4321731e-450c-41fa-8c8f-f1721e45e917&searchtype=hp&installDate=08/04/2013"&gt; in the current context!
    Error: Unable to interpret <FF - prefs.js..keyword.URL: "http://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=IE&userid=4321731e-450c-41fa-8c8f-f1721e45e917&searchtype=ds&installDate=08/04/2013&q="&gt; in the current context!
    Error: Unable to interpret <[2013/02/11 23:30:18 | 000,000,000 | ---D | M] (Search-Results Toolbar) -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\extensions\{377e5d4d-77e5-476a-8716-7e70a9272da0}> in the current context!
    Error: Unable to interpret <[2013/03/27 22:40:27 | 000,000,000 | ---D | M] (Delta Toolbar) -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\extensions\ffxtlbr@delta.com> in the current context!
    Error: Unable to interpret <[2013/07/24 20:32:50 | 000,006,507 | ---- | M] () -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\searchplugins\babylon.xml> in the current context!
    Error: Unable to interpret <[2013/07/24 20:33:22 | 000,001,294 | ---- | M] () -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\searchplugins\delta.xml> in the current context!
    Error: Unable to interpret <[2013/08/01 21:52:43 | 000,022,910 | ---- | M] () -- C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\searchplugins\Web Search.xml> in the current context!
    Error: Unable to interpret <[2013/02/11 23:30:13 | 000,002,687 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\Search_Results.xml> in the current context!
    Error: Unable to interpret <CHR - default_search_provider: Babylon (Enabled)> in the current context!
    Error: Unable to interpret <CHR - default_search_provider: search_url = http://search.babylon.com/?q={search...19357&tsp=4953> in the current context!
    Error: Unable to interpret <CHR - homepage: http://search.babylon.com/?babsrc=HP...19357&tsp=4953> in the current context!
    Error: Unable to interpret <O2:64bit: - BHO: (DataMngr) - {C1ED9DA0-AFD0-4b90-AC6A-D3874F591014} - C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\BrowserConnection.dll (Bandoo Media Inc)> in the current context!
    Error: Unable to interpret <O2 - BHO: (Search-Results Toolbar) - {377e5d4d-77e5-476a-8716-7e70a9272da0} - C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\searchresultsDx.dll (APN LLC)> in the current context!
    Error: Unable to interpret <O2 - BHO: (delta Helper Object) - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.21.5\bh\delta.dll (Delta-search.com)> in the current context!
    Error: Unable to interpret <O3 - HKLM\..\Toolbar: (Search-Results Toolbar) - {377e5d4d-77e5-476a-8716-7e70a9272da0} - C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\searchresultsDx.dll (APN LLC)> in the current context!
    Error: Unable to interpret <O3 - HKLM\..\Toolbar: (Delta Toolbar) - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.21.5\deltaTlbr.dll (Delta-search.com)> in the current context!
    Error: Unable to interpret <O4 - HKLM..\Run: [DATAMNGR] C:\Program Files (x86)\Search Results Toolbar\Datamngr\datamngrUI.exe (Bandoo Media Inc)> in the current context!
    Error: Unable to interpret <O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\SEARCH~1\Datamngr\x64\datamngr.dll) - C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\datamngr.dll (Bandoo Media Inc)> in the current context!
    Error: Unable to interpret <O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\SEARCH~1\Datamngr\x64\IEBHO.dll) - C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\IEBHO.dll (Bandoo Media Inc)> in the current context!
    Error: Unable to interpret <O32 - AutoRun File - [2005/08/01 17:44:27 | 000,000,225 | R--- | M] () - E:\Autorun.inf -- [ CDFS ]> in the current context!
    Error: Unable to interpret <O32 - AutoRun File - [2005/09/16 21:51:12 | 000,999,424 | R--- | M] (Microsoft Corporation) - E:\autorun.exe -- [ CDFS ]> in the current context!
    Error: Unable to interpret <O32 - AutoRun File - [2013/01/03 16:15:15 | 000,000,063 | R--- | M] () - G:\autorun.inf -- [ CDFS ]> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{09a4b0da-9709-11e2-83c0-80769500a8fb}\Shell - "" = AutoRun> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{09a4b0da-9709-11e2-83c0-80769500a8fb}\Shell\AutoRun\command - "" = G:\AW-2012_Issues.exe -- [2011/07/20 10:09:40 | 001,508,864 | R--- | M] (Linasoft)> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{483dc2d3-a38c-11e2-9e36-bbcbd1f4c210}\Shell - "" = AutoRun> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{483dc2d3-a38c-11e2-9e36-bbcbd1f4c210}\Shell\AutoRun\command - "" = P:\ialaunch.exe id= ver=1.0.0.0> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{a7fcbca0-9ef3-11e2-8122-ba18b1d23d4c}\Shell - "" = AutoRun> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{a7fcbca0-9ef3-11e2-8122-ba18b1d23d4c}\Shell\AutoRun\command - "" = F:\AW-2012_Issues.exe> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{c55ee43e-c4f8-11df-b58e-705ab646f6a0}\Shell - "" = AutoRun> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\{c55ee43e-c4f8-11df-b58e-705ab646f6a0}\Shell\AutoRun\command - "" = F:\AutoRun.exe> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\G\Shell - "" = AutoRun> in the current context!
    Error: Unable to interpret <O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\AW-2012_Issues.exe -- [2011/07/20 10:09:40 | 001,508,864 | R--- | M] (Linasoft)> in the current context!
    Error: Unable to interpret <[2013/03/27 22:40:06 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Babylon> in the current context!
    Error: Unable to interpret <[2012/07/16 19:24:30 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Iqezt> in the current context!
    Error: Unable to interpret <[2012/03/10 21:33:05 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Vso> in the current context!
    Error: Unable to interpret <[2012/07/11 22:27:25 | 000,000,000 | ---D | M] -- C:\Users\Áine\AppData\Roaming\Vyes> in the current context!
    ========== COMMANDS ==========

    [EMPTYTEMP]

    User: All Users

    User: Default
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 33170 bytes
    ->Flash cache emptied: 57472 bytes

    User: Default User
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->Flash cache emptied: 0 bytes

    User: Finnian
    ->Temp folder emptied: 185732217 bytes
    ->Temporary Internet Files folder emptied: 120892003 bytes
    ->Java cache emptied: 0 bytes
    ->FireFox cache emptied: 67561023 bytes
    ->Google Chrome cache emptied: 365640421 bytes
    ->Flash cache emptied: 128075 bytes

    User: Guest
    ->Temp folder emptied: 853375228 bytes
    ->Temporary Internet Files folder emptied: 74739846 bytes
    ->Java cache emptied: 5388 bytes
    ->FireFox cache emptied: 47498815 bytes
    ->Google Chrome cache emptied: 15087805 bytes
    ->Flash cache emptied: 13912 bytes

    User: Public

    User: Áine
    ->Temp folder emptied: 6150353245 bytes
    ->Temporary Internet Files folder emptied: 304742812 bytes
    ->Java cache emptied: 1 bytes
    ->FireFox cache emptied: 118220238 bytes
    ->Google Chrome cache emptied: 10190219 bytes
    ->Flash cache emptied: 8196715 bytes

    %systemdrive% .tmp files removed: 0 bytes
    %systemroot% .tmp files removed: 0 bytes
    %systemroot%\System32 .tmp files removed: 0 bytes
    %systemroot%\System32 (64bit) .tmp files removed: 0 bytes
    %systemroot%\System32\drivers .tmp files removed: 0 bytes
    Windows Temp folder emptied: 340970365 bytes
    %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 36068535 bytes
    RecycleBin emptied: 4298367122 bytes

    Total Files Cleaned = 12,396.00 mb


    [EMPTYFLASH]

    User: All Users

    User: Default
    ->Flash cache emptied: 0 bytes

    User: Default User
    ->Flash cache emptied: 0 bytes

    User: Finnian
    ->Flash cache emptied: 0 bytes

    User: Guest
    ->Flash cache emptied: 0 bytes

    User: Public

    User: Áine
    ->Flash cache emptied: 0 bytes

    Total Flash Files Cleaned = 0.00 mb

    C:\Windows\System32\drivers\etc\Hosts moved successfully.
    HOSTS file reset successfully

    [EMPTYJAVA]

    User: All Users

    User: Default

    User: Default User

    User: Finnian
    ->Java cache emptied: 0 bytes

    User: Guest
    ->Java cache emptied: 0 bytes

    User: Public

    User: Áine
    ->Java cache emptied: 0 bytes

    Total Java Files Cleaned = 0.00 mb

    Restore point Set: OTL Restore Point
    ========== FILES ==========
    < ipconfig /flushdns /c >
    No captured output from command...
    C:\Users\Áine\Downloads\cmd.bat deleted successfully.

    OTL by OldTimer - Version 3.2.69.0 log created on 08042013_174908

    Files\Folders moved on Reboot...
    C:\Users\Áine\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
    File move failed. C:\Windows\temp\dsiwmis.log scheduled to be moved on reboot.

    PendingFileRenameOperations files...

    Registry entries deleted on Reboot...

    and here is the adware cleaner log

    # AdwCleaner v2.306 - Logfile created 08/05/2013 at 20:59:36
    # Updated 19/07/2013 by Xplode
    # Operating system : Windows 7 Home Premium (64 bits)
    # User : Áine - FINNIAN-PC
    # Boot Mode : Normal
    # Running from : C:\Users\Áine\Downloads\AdwCleaner.exe
    # Option [Search]


    ***** [Services] *****

    Found : SProtection

    ***** [Files / Folders] *****

    File Found : C:\Program Files (x86)\Mozilla Firefox\defaults\pref\all-iminent.js
    File Found : C:\Program Files (x86)\Mozilla FireFox\searchplugins\Search_Results.xml
    File Found : C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\extensions\webbooster@iminent.com.xpi
    File Found : C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\searchplugins\Babylon.xml
    File Found : C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\searchplugins\Web Search.xml
    File Found : C:\Users\Áine\Desktop\Check for Updates.lnk
    File Found : C:\Users\Áine\Desktop\Optimizer Pro.lnk
    File Found : C:\Users\Finnian\AppData\Roaming\Mozilla\Firefox\Profiles\9ja47w74.default\extensions\webbooster@iminent.com.xpi
    Folder Found : C:\Program Files (x86)\Ask.com
    Folder Found : C:\Program Files (x86)\Common Files\Umbrella
    Folder Found : C:\Program Files (x86)\Conduit
    Folder Found : C:\Program Files (x86)\ConduitEngine
    Folder Found : C:\Program Files (x86)\delta
    Folder Found : C:\Program Files (x86)\FilesFrog Update Checker
    Folder Found : C:\Program Files (x86)\Iminent
    Folder Found : C:\Program Files (x86)\LyricsTube
    Folder Found : C:\Program Files (x86)\Mozilla Firefox\extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}
    Folder Found : C:\Program Files (x86)\optimizer pro
    Folder Found : C:\Program Files (x86)\Search Results Toolbar
    Folder Found : C:\Program Files (x86)\SingAlong
    Folder Found : C:\Program Files (x86)\uTorrentBar
    Folder Found : C:\Program Files (x86)\Winamp Toolbar
    Folder Found : C:\ProgramData\Babylon
    Folder Found : C:\ProgramData\boost_interprocess
    Folder Found : C:\ProgramData\BrowserProtect
    Folder Found : C:\ProgramData\Iminent
    Folder Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Iminent
    Folder Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\optimizer pro
    Folder Found : C:\ProgramData\Partner
    Folder Found : C:\ProgramData\Tarma Installer
    Folder Found : C:\ProgramData\Winamp Toolbar
    Folder Found : C:\Users\Áine\AppData\Local\Bundled software uninstaller
    Folder Found : C:\Users\Áine\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl
    Folder Found : C:\Users\Áine\AppData\Local\Red Sky
    Folder Found : C:\Users\Áine\AppData\Local\Smartbar
    Folder Found : C:\Users\Áine\AppData\Local\Winamp Toolbar
    Folder Found : C:\Users\Áine\AppData\LocalLow\AskToolbar
    Folder Found : C:\Users\Áine\AppData\LocalLow\Conduit
    Folder Found : C:\Users\Áine\AppData\LocalLow\ConduitEngine
    Folder Found : C:\Users\Áine\AppData\LocalLow\delta
    Folder Found : C:\Users\Áine\AppData\LocalLow\PriceGong
    Folder Found : C:\Users\Áine\AppData\LocalLow\searchresultstb
    Folder Found : C:\Users\Áine\AppData\LocalLow\Smartbar
    Folder Found : C:\Users\Áine\AppData\LocalLow\uTorrentBar
    Folder Found : C:\Users\Áine\AppData\Roaming\BabSolution
    Folder Found : C:\Users\Áine\AppData\Roaming\Babylon
    Folder Found : C:\Users\Áine\AppData\Roaming\delta
    Folder Found : C:\Users\Áine\AppData\Roaming\Iminent
    Folder Found : C:\Users\Áine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker
    Folder Found : C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\extensions\{1fd91a9c-410c-4090-bbcc-55d3450ef433}
    Folder Found : C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\extensions\ffxtlbr@babylon.com
    Folder Found : C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\extensions\ffxtlbr@delta.com
    Folder Found : C:\Users\Áine\AppData\Roaming\Mozilla\Firefox\Profiles\aohjspm6.default\extensions\plugin@getwebcake.com
    Folder Found : C:\Users\Áine\AppData\Roaming\optimizer pro
    Folder Found : C:\Users\Finnian\AppData\Local\AskToolbar
    Folder Found : C:\Users\Finnian\AppData\Local\Winamp Toolbar
    Folder Found : C:\Users\Finnian\AppData\LocalLow\AskToolbar
    Folder Found : C:\Users\Finnian\AppData\LocalLow\Conduit
    Folder Found : C:\Users\Finnian\AppData\LocalLow\ConduitEngine
    Folder Found : C:\Users\Finnian\AppData\LocalLow\PriceGong
    Folder Found : C:\Users\Finnian\AppData\LocalLow\uTorrentBar
    Folder Found : C:\Users\Finnian\AppData\Roaming\Mozilla\Firefox\Profiles\9ja47w74.default\Conduit
    Folder Found : C:\Users\Finnian\AppData\Roaming\Mozilla\Firefox\Profiles\9ja47w74.default\ConduitEngine
    Folder Found : C:\Users\Finnian\AppData\Roaming\Mozilla\Firefox\Profiles\9ja47w74.default\CT2786678
    Folder Found : C:\Users\Finnian\AppData\Roaming\Mozilla\Firefox\Profiles\9ja47w74.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
    Folder Found : C:\Users\Finnian\AppData\Roaming\Mozilla\Firefox\Profiles\9ja47w74.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
    Folder Found : C:\Users\Finnian\AppData\Roaming\Mozilla\Firefox\Profiles\9ja47w74.default\extensions\engine@conduit.com
    Folder Found : C:\Users\Finnian\AppData\Roaming\Mozilla\Firefox\Profiles\9ja47w74.default\extensions\staged
    Folder Found : C:\Users\Finnian\AppData\Roaming\Mozilla\Firefox\Profiles\9ja47w74.default\WinampToolbarData
    Folder Found : C:\Users\INE~1\AppData\Local\Temp\boost_interprocess
    Folder Found : C:\Users\INE~1\AppData\Local\Temp\Smartbar
    Folder Found : C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

    ***** [Registry] *****

    Data Found : [x64] HKLM\..\Windows [AppInit_DLLs] = C:\PROGRA~2\SEARCH~1\Datamngr\x64\datamngr.dll
    Data Found : [x64] HKLM\..\Windows [AppInit_DLLs] = C:\PROGRA~2\SEARCH~1\Datamngr\x64\IEBHO.dll
    Data Found : [x64] HKLM\..\Windows [AppInit_DLLs] = C:\PROGRA~3\Wincert\WIN64C~1.DLL
    Data Found : HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\browse~1\261125~1.80\{c16c1~1\browse~1.dll
    Data Found : HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\wincert\win32c~1.dll
    Key Found : HKCU\Software\APN DTX
    Key Found : HKCU\Software\AppDataLow\Software\AskToolbar
    Key Found : HKCU\Software\AppDataLow\Software\Conduit
    Key Found : HKCU\Software\AppDataLow\Software\conduitEngine
    Key Found : HKCU\Software\AppDataLow\Software\conduitEngine
    Key Found : HKCU\Software\AppDataLow\Software\PriceGong
    Key Found : HKCU\Software\AppDataLow\Software\uTorrentBar
    Key Found : HKCU\Software\BabSolution
    Key Found : HKCU\Software\BI
    Key Found : HKCU\Software\DataMngr
    Key Found : HKCU\Software\DataMngr_Toolbar
    Key Found : HKCU\Software\Delta
    Key Found : HKCU\Software\Google\Chrome\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl
    Key Found : HKCU\Software\ilivid
    Key Found : HKCU\Software\Iminent
    Key Found : HKCU\Software\InstallCore
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{377E5D4D-77E5-476A-8716-7E70A9272DA0}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6492E171-2427-4932-B414-33574A089F5E}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{377E5D4D-77E5-476A-8716-7E70A9272DA0}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4750F804-201E-4B6D-A2B5-A952CD965525}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6492E171-2427-4932-B414-33574A089F5E}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1ED9DA0-AFD0-4B90-AC6A-D3874F591014}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}
    Key Found : HKCU\Software\Optimizer Pro
    Key Found : HKCU\Software\SmartBar
    Key Found : HKCU\Software\SmartbarBackup
    Key Found : HKCU\Software\SmartbarLog
    Key Found : HKCU\Software\Somoto
    Key Found : HKCU\Software\Winamp Toolbar
    Key Found : HKCU\Software\5ae88d1b538ed12
    Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
    Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
    Key Found : HKLM\Software\Babylon
    Key Found : HKLM\SOFTWARE\Classes\AppID\{01994268-3C10-4044-A1EA-7A9C1B739A11}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{7169BBB3-3289-4696-B35D-4A88BCF6FB12}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{B27D9527-3762-4D71-963D-FB7A94FDD678}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
    Key Found : HKLM\SOFTWARE\Classes\AppID\{D97A8234-F2A2-4AD4-91D5-FECDB2C553AF}
    Key Found : HKLM\SOFTWARE\Classes\AppID\BrowserConnection.dll
    Key Found : HKLM\SOFTWARE\Classes\AppID\escort.DLL
    Key Found : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
    Key Found : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
    Key Found : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
    Key Found : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
    Key Found : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
    Key Found : HKLM\SOFTWARE\Classes\AppID\Iminent.WebBooster.InternetExplorer.DLL
    Key Found : HKLM\SOFTWARE\Classes\AppID\winamptbServer.exe
    Key Found : HKLM\SOFTWARE\Classes\Applications\ilividsetup.exe
    Key Found : HKLM\SOFTWARE\Classes\Conduit.Engine
    Key Found : HKLM\SOFTWARE\Classes\delta.deltaappCore
    Key Found : HKLM\SOFTWARE\Classes\delta.deltaappCore.1
    Key Found : HKLM\SOFTWARE\Classes\delta.deltadskBnd
    Key Found : HKLM\SOFTWARE\Classes\delta.deltadskBnd.1
    Key Found : HKLM\SOFTWARE\Classes\delta.deltaHlpr
    Key Found : HKLM\SOFTWARE\Classes\delta.deltaHlpr.1
    Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane
    Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
    Key Found : HKLM\SOFTWARE\Classes\esrv.deltaESrvc
    Key Found : HKLM\SOFTWARE\Classes\esrv.deltaESrvc.1
    Key Found : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
    Key Found : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
    Key Found : HKLM\SOFTWARE\Classes\IESmartBar.BandObjectAttribute
    Key Found : HKLM\SOFTWARE\Classes\IESmartBar.BHO
    Key Found : HKLM\SOFTWARE\Classes\IESmartBar.DockingPanel
    Key Found : HKLM\SOFTWARE\Classes\IESmartBar.IESmartBar
    Key Found : HKLM\SOFTWARE\Classes\IESmartBar.IESmartBarBandObject
    Key Found : HKLM\SOFTWARE\Classes\IESmartBar.SmartbarDisplayState
    Key Found : HKLM\SOFTWARE\Classes\IESmartBar.SmartbarMenuForm
    Key Found : HKLM\SOFTWARE\Classes\iLividIEHelper.DNSGuard
    Key Found : HKLM\SOFTWARE\Classes\iLividIEHelper.DNSGuard.1
    Key Found : HKLM\SOFTWARE\Classes\Iminent
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.DownloadArgs
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.LinkToPromoteArgs
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.RawDataArgs
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.TinyUrlArgs
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.ViralLinkArgs
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.ClientCallback
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.ContractBase
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.AddToUserContentCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.CheckLoginStatusCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.CleanCacheCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GameOverCallback
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetCreditCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetInstallationContextCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetLoginStatusCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetLoginStatusResult
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetVariableCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetVariableResult
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.InstallationContextResult
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LoadContentCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LoadContentCommandResult
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LoginCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LoginStatusChangedCallback
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LogoutCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.MergeIdentityCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.MyAccountCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.PlayContentCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.PostContentCallback
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.RecycleViewsCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.SetVariableCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.ShowBrowserWindowCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.ShowControlCenterCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.ShowPluginWindowCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.TestContentCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.UserContentChangedCallback
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.VariableChangedCallback
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.WarmUpCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.WelcomeCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.ServerCommand
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.ServerResult
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.LightContent
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.LightUri
    Key Found : HKLM\SOFTWARE\Classes\Iminent.Mediator.MediatorServiceProxy
    Key Found : HKLM\SOFTWARE\Classes\IminentWebBooster.ActiveContentHandle.1
    Key Found : HKLM\SOFTWARE\Classes\IminentWebBooster.ActiveContentHandler
    Key Found : HKLM\SOFTWARE\Classes\IminentWebBooster.BrowserHelperObject
    Key Found : HKLM\SOFTWARE\Classes\IminentWebBooster.BrowserHelperObject.1
    Key Found : HKLM\SOFTWARE\Classes\IminentWebBooster.ScriptExtender
    Key Found : HKLM\SOFTWARE\Classes\IminentWebBooster.ScriptExtender.1
    Key Found : HKLM\SOFTWARE\Classes\IminentWebBooster.TinyUrlHandler
    Key Found : HKLM\SOFTWARE\Classes\IminentWebBooster.TinyUrlHandler.1
    Key Found : HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
    Key Found : HKLM\Software\Classes\Installer\Features\ACFD5B980E184AE4A8A0F404781ADD00
    Key Found : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
    Key Found : HKLM\Software\Classes\Installer\Products\ACFD5B980E184AE4A8A0F404781ADD00
    Key Found : HKLM\SOFTWARE\Classes\Prod.cap
    Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT2786678
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{538CD77C-BFDD-49B0-9562-77419CAB89D1}
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{75E8DA27-44AF-40AE-927C-F2EEC99D65B1}
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{A9CAF365-EA35-45DA-BD8B-2EFA09D374AC}
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
    Key Found : HKLM\SOFTWARE\Classes\WinampTb.AOLTBSearch
    Key Found : HKLM\SOFTWARE\Classes\WinampTb.AOLTBSearch.1
    Key Found : HKLM\SOFTWARE\Classes\WinampTb.AOLToolBand
    Key Found : HKLM\SOFTWARE\Classes\WinampTb.AOLToolBand.1
    Key Found : HKLM\SOFTWARE\Classes\WinampTb.Downloader
    Key Found : HKLM\SOFTWARE\Classes\WinampTb.Downloader.1
    Key Found : HKLM\SOFTWARE\Classes\WinampTb.ToolbarInfo
    Key Found : HKLM\SOFTWARE\Classes\WinampTb.ToolbarInfo.1
    Key Found : HKLM\SOFTWARE\Classes\WinampTb.ToolbarParams
    Key Found : HKLM\SOFTWARE\Classes\WinampTb.ToolbarParams.1
    Key Found : HKLM\SOFTWARE\Classes\WinampTbServer.AolToolbarHelper
    Key Found : HKLM\SOFTWARE\Classes\WinampTbServer.AolToolbarHelper.1
    Key Found : HKLM\Software\Conduit
    Key Found : HKLM\Software\conduitEngine
    Key Found : HKLM\Software\conduitEngine
    Key Found : HKLM\Software\DataMngr
    Key Found : HKLM\Software\Delta
    Key Found : HKLM\Software\iLividSRTB
    Key Found : HKLM\Software\Iminent
    Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASAPI32
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASMANCS
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\iLividMediaBar_RASAPI32
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\iLividMediaBar_RASMANCS
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetup_RASAPI32
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetup_RASMANCS
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASAPI32
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASMANCS
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASAPI32
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASMANCS
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4750F804-201E-4B6D-A2B5-A952CD965525}
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{AF6B0594-6008-4327-93E5-608AD710A6FA}
    Key Found : HKLM\Software\Umbrella
    Key Found : HKLM\Software\uTorrentBar
    Key Found : HKLM\Software\Winamp Toolbar
    Key Found : HKLM\SOFTWARE\Wow6432Node\5ae88d1b538ed12
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{01A602A0-D0B9-445B-8081-719E4177C4A7}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{02C9C7B0-C7C8-4AAC-A9E4-55295BF60F8F}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{0398B101-6DA7-473F-A290-17D2FBC88CC0}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{0CC36196-8589-4B80-A771-D659411D7F90}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{143D96F9-EB64-48B3-B192-91C2C41A1F43}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{14F7D91F-F669-45C9-9F42-BACBFDB86EAD}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{187A6488-6E71-4A2A-B118-7BEFBFE58257}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{26C9BBE4-6D45-4AB6-A5B4-E068C9F5EF6D}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2D065204-A024-4C39-8A38-EE7078EC7ACF}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{30F5476C-677B-4DB0-B397-51F5BFD86840}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3223F2FB-D9B9-45FC-9D66-CD717FFA4EE5}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{351798B1-C1D2-45AB-92B4-4D6C2D6AB5AF}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{377E5D4D-77E5-476A-8716-7E70A9272DA0}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3AEA1BEF-6195-46F4-ACA2-0ED14F7EFA1B}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3D7F9AC3-BAC3-4E51-81D7-D121D79E550A}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4498C5E9-93C6-4142-B6BE-F0C6DC48B77A}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4750F804-201E-4B6D-A2B5-A952CD965525}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{479BF2D6-E362-4A99-B1AB-BC764D7B97AE}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{492A108F-51D0-4BD8-899D-AD4AB2893064}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4B6D6E60-FBD2-4E79-BF4B-886BC98F1797}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{57BCA5FA-5DBB-45A2-B558-1755C3F6253B}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{5C176BA0-6FC0-4EBD-8ACF-24AC592506B6}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{60893E02-2E5B-43F9-A93A-BAD60C2DF6EF}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{6D39931F-451E-4BDD-BAF4-37FB96DBBA5D}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{6EF4E91D-DDD5-4478-BCA7-DA04435934C0}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{76C684D2-C35D-4284-976A-D862F53ADB81}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{796D822A-C3F9-4A97-BAAB-42FE7628EA63}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{79EF3691-EC1A-4705-A01A-D2E36EC11758}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{82F41418-8E64-47EB-A7F1-4702A974D289}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{841FD004-57A2-4B49-BBDB-5897394619DB}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{85D920CE-63A7-46DC-8992-41D1D2E07FAD}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{895ED5E8-ABB4-40C3-A0CA-2571964268E2}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{8AAC123A-1959-4A45-BFC5-E2D50783098A}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{9FF9AE6F-4553-41A7-B645-B0E88850EABF}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A07956CD-81F8-4A03-B524-5D87E690DC83}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AF6B0594-6008-4327-93E5-608AD710A6FA}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B38D6EDE-390B-4620-8365-29E16459EBDA}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B5E3B26B-6E5C-4865-A63D-58D04B10E245}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B84D2DC5-42B2-4E5E-BF61-7B48152FF8EF}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B89D5309-0367-4494-A92F-3D4C94F88307}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C014EBF8-8854-448B-B5A4-557C4090EDCE}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C31191DB-2F64-464C-B97C-6AC81ACB7AAC}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C342C7A7-F622-4EF3-8B7F-ABB9FBE73F14}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C4765B07-BC2F-477B-925C-B2BF24887823}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C875C0A1-09E3-48D5-9F8E-BD337796FD14}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CD126DA6-FF5B-4181-AC13-54A62240D2FA}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CE4DB5A3-58E6-41F1-8761-47238DF4F468}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D8F01233-2DE6-4EE7-8988-37263F00651B}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DD438708-AAB4-422D-A322-B619589F5680}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DF84E609-C3A4-49CB-A160-61767DAF8899}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E1164984-B567-47BD-A7FF-240C2594404A}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E812AE43-7799-4E67-8CF8-4104297A2D16}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F0BAAEC7-9AE0-49FF-9C4B-86E774FF397F}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F20F11FD-203E-45A9-B7BB-AFC1B4FEA7A6}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F92193FD-2243-4401-9ACC-49FF30885898}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FD21B8A2-910B-45AC-9C10-45E6A8B84984}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FE178B09-C8AA-4734-804D-1849BCCA0C29}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0F54B66A-21CF-4548-AE59-A6B83EE6676F}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{51A971CA-D36E-4D13-A799-2CF0A491D04D}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{56FBEA9F-EF93-4318-B75F-A96FC7C7BD7B}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{78B3C85E-44FF-4DC8-B3AD-156F39DC75E5}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{841FD004-57A2-4B49-BBDB-5897394619DB}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ACA608DB-A210-4253-B799-3FD24E9A7BF5}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DF84E609-C3A4-49CB-A160-61767DAF8899}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E1164984-B567-47BD-A7FF-240C2594404A}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E19FDA06-5BDF-43C2-B794-BCD8A4C2051F}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FAB076F5-E4DD-4EA4-AFEE-F18BF972B057}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0AF350D9-3916-454B-AC53-0B0B65F41301}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{377E5D4D-77E5-476A-8716-7E70A9272DA0}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{982F5F20-AA06-4A60-A323-A66852BA252B}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C386F054-C58A-4CB3-81FE-C288B4C0252D}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4DC8-84D1-F5D7BAF2DB0C}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{377E5D4D-77E5-476A-8716-7E70A9272DA0}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{89B5DFCA-81E0-4EA4-8A0A-4F4087A1DD00}
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Delta
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Delta Chrome Toolbar
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\FilesFrog Update Checker
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Search Results Toolbar
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\uTorrentBar Toolbar
    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Winamp Toolbar
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{9FF9AE6F-4553-41A7-B645-B0E88850EABF}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{C1ED9DA0-AFD0-4B90-AC6A-D3874F591014}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{CE4DB5A3-58E6-41F1-8761-47238DF4F468}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{0F54B66A-21CF-4548-AE59-A6B83EE6676F}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{51A971CA-D36E-4D13-A799-2CF0A491D04D}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{56FBEA9F-EF93-4318-B75F-A96FC7C7BD7B}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{78B3C85E-44FF-4DC8-B3AD-156F39DC75E5}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{841FD004-57A2-4B49-BBDB-5897394619DB}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{ACA608DB-A210-4253-B799-3FD24E9A7BF5}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{DF84E609-C3A4-49CB-A160-61767DAF8899}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{E1164984-B567-47BD-A7FF-240C2594404A}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{E19FDA06-5BDF-43C2-B794-BCD8A4C2051F}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{FAB076F5-E4DD-4EA4-AFEE-F18BF972B057}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
    Key Found : HKLM\SOFTWARE\DataMngr
    Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1ED9DA0-AFD0-4B90-AC6A-D3874F591014}
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C4ED781C-7394-4906-AAFF-D6AB64FF7C38}
    Key Found : HKLM\SOFTWARE\Tarma Installer
    Key Found : HKU\S-1-5-21-2128128642-1423321494-1282847144-1005\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
    Key Found : HKU\S-1-5-21-2128128642-1423321494-1282847144-1005\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
    Value Found : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
    Value Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
    Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{30F9B915-B755-4826-820B-08FBA6BD249D}]
    Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{30F9B915-B755-4826-820B-08FBA6BD249D}]
    Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}]
    Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
    Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}]
    Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Browser Infrastructure Helper]
    Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Optimizer Pro]
    Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [SDP]
    Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{57BCA5FA-5DBB-45A2-B558-1755C3F6253B}]
    Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}]
    Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [DataMngr]
    Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Iminent]
    Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [IminentMessenger]
    Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [webbooster@iminent.com]
    Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{30F9B915-B755-4826-820B-08FBA6BD249D}]
    Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{30F9B915-B755-4826-820B-08FBA6BD249D}]
    Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{377E5D4D-77E5-476A-8716-7E70A9272DA0}]
    Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{82E1477C-B154-48D3-9891-33D83C26BCD3}]
    Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
    Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}]
    Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
    Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}]
    Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [10]
    Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
    Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [10]

    ***** [Internet Browsers] *****

    -\\ Internet Explorer v9.0.8112.16476

    [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.babylon.com/?babsrc=HP_ss_sps&mntrId=18F8C417FEDCF954&affID=119357&tsp=4953
    [HKCU\Software\Microsoft\Internet Explorer\Main - bProtector Start Page] = hxxp://www.delta-search.com/?affID=119816&babsrc=HP_ss&mntrId=18F8C417FEDCF954

    -\\ Mozilla Firefox v22.0 (en-GB)

    File : C:\Users\Finnian\AppData\Roaming\Mozilla\Firefox\Profiles\9ja47w74.default\prefs.js

    Found : user_pref("CT2786678..clientLogIsEnabled", true);
    Found : user_pref("CT2786678..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
    Found : user_pref("CT2786678..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
    Found : user_pref("CT2786678.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
    Found : user_pref("CT2786678.CTID", "CT2786678");
    Found : user_pref("CT2786678.CurrentServerDate", "17-1-2012");
    Found : user_pref("CT2786678.DialogsAlignMode", "LTR");
    Found : user_pref("CT2786678.DownloadReferralCookieData", "");
    Found : user_pref("CT2786678.EMailNotifierPollDate", "Wed Jan 18 2012 22:25:04 GMT+0000 (GMT Standard Time)"[...]
    Found : user_pref("CT2786678.FeedLastCount5690698542593514850", 550);
    Found : user_pref("CT2786678.FeedPollDate129301619375443753", "Thu Jul 28 2011 19:59:59 GMT+0100 (GMT Daylig[...]
    Found : user_pref("CT2786678.FeedPollDate129301619375443759", "Thu Jul 28 2011 19:59:59 GMT+0100 (GMT Daylig[...]
    Found : user_pref("CT2786678.FeedPollDate129301619375444699", "Thu Jul 28 2011 19:59:58 GMT+0100 (GMT Daylig[...]
    Found : user_pref("CT2786678.FeedPollDate129301619375444705", "Thu Jul 28 2011 19:59:58 GMT+0100 (GMT Daylig[...]
    Found : user_pref("CT2786678.FeedPollDate129301619375444711", "Thu Jul 28 2011 19:59:58 GMT+0100 (GMT Daylig[...]
    Found : user_pref("CT2786678.FeedPollDate129301619375444717", "Thu Jul 28 2011 19:59:58 GMT+0100 (GMT Daylig[...]
    Found : user_pref("CT2786678.FeedPollDate129301619375444723", "Thu Jul 28 2011 19:59:59 GMT+0100 (GMT Daylig[...]
    Found : user_pref("CT2786678.FeedPollDate129301619375444729", "Thu Jul 28 2011 19:59:59 GMT+0100 (GMT Daylig[...]
    Found : user_pref("CT2786678.FeedPollDate129301619375444735", "Thu Jul 28 2011 19:59:59 GMT+0100 (GMT Daylig[...]
    Found : user_pref("CT2786678.FeedPollDate129301619375444741", "Thu Jul 28 2011 19:59:59 GMT+0100 (GMT Daylig[...]
    Found : user_pref("CT2786678.FeedPollDate129301619375444747", "Thu Jul 28 2011 19:59:59 GMT+0100 (GMT Daylig[...]
    Found : user_pref("CT2786678.FeedPollDate2429156812186649977", "Wed Jan 18 2012


  • #10
    jsa112
    Registered Users, Registered Users 2 Posts: 840 ✭✭✭jsa112


    let adwcleaner delete what it finds.


    can you do the OTL step again as it didn't work properly. You need to include this part at the start


    :OTL


    also run combofix and post its log then tell me how the pc is running

    http://www.bleepingcomputer.com/combofix/how-to-use-combofix


Advertisement
Advertisement