a ton of malware

February 13, 2014 at 07:44:46
Specs: Windows 7, 3.2 ghz/ 1gb
I'm trying to fix my friends computer and he had more malware then i'd ever seen in my life. I got rid of about 10 bad programs, but some wont let me remove it. There are at least 6 left including fix bee disk optimizer, page rage, pc performer, pc power speed, reg clean pro, start savin, and jdownloader 0.9 (i think). there are probably more too. I used super antispyware, and it fixed some issues but all those programs i listed still show up in add/remove programs. is there a better free malware remover that isn't malware itself?

update: i used adwcleaner and it got rid of most of those plus some other ones that i couldn't see, but there are still issues.

fix bee disk optimizer, pc power speed 1.0.0.24, start savin and jdownloader 0.9 are still there.

if i try to set up a new user account for windows i get an error saying

"the specified account name is not valid because account names cannot contain the following characters /\[]":;|<>+=,?*
please try a different name"

if i click on windows firewall, nothing happens

also my favorite game, everquest wont open

"there was this big bang once, now we're learnin' to use our thumbs"

message edited by ganymede


See More: a ton of malware

Report •

#1
February 13, 2014 at 11:37:29
You've used Adwcleaner (that one - not one of the others of similar name)?

Have you also used Malwarebytes too?

After using "both" of those... reboot the system with an Anti-virus rescue disk. There are several around (26 at last count..). I have tested Avast, Bitdefender, Sophos, and Kaspersky versions.

With the exception of Avast - once up and running they will connect to the web to update definitions. After-which they scan, generate a report and clean out whatever…

They all take a little time to boot up; and of course a while (an hour or more possibly) to scan etc… It is important to watch the boot up screens too; so as to interact in the boot process and so on - otherwise they will likely just boot into Windows after a minute or so...

Avast requires you make the Rescue disc as close to time of use; as it "doesn't" connect to the web-site to update definitions. If not reasonably current (freshly made) it will have outdated definitions to some degree.

Personally having tested those above, I would opt for Kaspersky (first); then Bitdefender and then Sophos. And if time allowed run at least two of the disks…

They are built around a Linux variant; and load themselves into RAM only. The hard drive is then simply a resource and can be accessed/scanned etc and cleaned up. Also you can copy off all data etc to external media - for safe keeping in-case of problems whenever (not the least during cleaning procedures… Ideally copy all personal files etc off the system even now (via the OS installed); check they are accessible from the system that made them, and ideally at least one other. Then you know you have safe copies of all those personal files ' stuff off the system under repair.

Personally I have found all the "optimizers and fix it etc. programmes/utilities alike" to be more trouble than they're worth. I wouldn't generally advise using any of them…; and even now would remove any installed.

If per chance johnW (from way down near the Antarctic shores) comes across here he will suggest one or two other possibilities too; as may likely Derek, riider etc. too. All have a lot of experience in these scenarios.

message edited by trvlr


Report •

#2
February 13, 2014 at 13:42:25
Thanks trvlr.

You have done a good job so far ganymede.

Lets see what is going now.

Download OTL, save & run from your Desktop.
http://oldtimer.geekstogo.com/OTL.exe
Double click the OTL icon to start the tool. (Note: If you are running on Vista or Windows 7 accept UAC alert)
1: When the window appears, underneath Output at the top, make sure Standard output is selected.
2: Select Scan all users
3: Change Drivers to All
4: Under the Extra Registry section, check Use SafeList
5: In the lower right corner, checkmark "LOP Check" and checkmark "Purity Check".
6: Click Run Scan and let the program run uninterrupted.
Screenshots ( SS ) of 1 - 6
http://i.imgur.com/rvTDUlL.gif
When the scan is complete, two text files will be created on your Desktop
OTL.Txt <- this one will be opened
Extras.txt <- this one will be minimized

Upload the logs using this. I upload to Imgur.com for images & load.to for files ( neither need an account ) Give us the links please.
Image Uploader
http://www.softpedia.com/get/Intern...
http://www.softpedia.com/progScreen...
http://zenden.ws/imageuploader_ru
How to use for files.
http://i.imgur.com/FhtnM6c.gif
http://i.imgur.com/yBtjlpb.gif
http://i.imgur.com/txFkgpT.gif

message edited by Johnw


Report •

#3
February 14, 2014 at 15:13:27
I'm trying malware bytes first, if that doesn't fix everything, ill run otl and post results.i may not have time to do that until late tonight

"there was this big bang once, now we're learnin' to use our thumbs"

message edited by ganymede


Report •

Related Solutions

#4
February 14, 2014 at 15:37:00
"I'm trying malware bytes first"
Copy & Paste the contents of the log in your next post please.

It is impossible to know what is going on without seeing the logs.


Report •

#5
February 14, 2014 at 19:54:23
okay malware bytes found 384 PUP files, and that's not counting all things i removed before running it. super antispyware identified 3 trojans and supposedly removed them, plus i don't even know how many other things, there were at least 3 dozen bad programs on this computer just that I know of. im running otl now. still having same issues with firewall, user accounts and everquest (an online game)

"there was this big bang once, now we're learnin' to use our thumbs"


Report •

#6
February 14, 2014 at 19:59:32
"okay malware bytes found 384 PUP files"
Don't forget to give us the log.

Report •

#7
February 14, 2014 at 20:22:12
omg i hope i did this right

http://www.load.to/aD5mLEB6Zf/OTL.Txt
http://www.load.to/2VpgD4DcJE/Extra...

"there was this big bang once, now we're learnin' to use our thumbs"


Report •

#8
February 14, 2014 at 20:33:37
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2014.02.14.09

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16518
Guest :: OXFORDHOUSENORM [administrator]

2/14/2014 3:58:59 PM
mbam-log-2014-02-14 (15-58-59).txt

Scan type: Full scan (C:\|D:\|Q:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 561228
Time elapsed: 3 hour(s), 4 minute(s),

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8062BEF1-6534-443D-873B-111FF6AEA62A} (Adware.DealCabby) -> Quarantined and deleted successfully.
HKCR\CLSID\{8062BEF1-6534-443D-873B-111FF6AEA62A} (Adware.DealCabby) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{01E567FE-2E90-49DA-BA75-B79F6DA03461} (Adware.DealCabby) -> Quarantined and deleted successfully.
HKCR\CLSID\{01E567FE-2E90-49DA-BA75-B79F6DA03461} (Adware.DealCabby) -> Quarantined and deleted successfully.
HKCR\CLSID\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF} (PUP.Optional.AppGraffiti.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.bench.nmhost (PUP.Optional.Bench.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\PCPOWERSPEED (PUP.Optional.PCPowerSpeed.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\SWEETIM (PUP.Optional.SweetIM.A) -> Quarantined and deleted successfully.

"there was this big bang once, now we're learnin' to use our thumbs"


Report •

#9
February 14, 2014 at 20:34:03
Registry Values Detected: 2
HKLM\SOFTWARE\PCPowerSpeed|PHONE_NUMBER (PUP.Optional.PCPowerSpeed.A) -> Data: 1-866-231-7627 -> Quarantined and deleted successfully.
HKLM\Software\SweetIM|simapp_id (PUP.Optional.SweetIM.A) -> Data: {E4C094CF-9620-11E2-834D-386077400AAA} -> Quarantined and deleted successfully.

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 75
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\Systweak\Advanced System Protector\2.1.1000.10125 (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\Systweak\Advanced System Protector\Logs (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\Systweak\Advanced System Protector\2.1.1000.10158 (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\Clyde\AppData\Roaming\Systweak\Advanced System Protector\2.1.1000.10158 (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\Guest.oxfordhousenorm\AppData\Roaming\Systweak\Advanced System Protector\2.1.1000.10158 (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\Guest.oxfordhousenorm\AppData\Roaming\Systweak\Advanced System Protector (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\Systweak\Advanced System Protector (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\Systweak\Advanced System Protector\2.1.1000.10158 (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\Systweak\Advanced System Protector\Logs (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\Systweak\Advanced System Protector (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\Clyde\AppData\Roaming\Systweak\Advanced System Protector (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\Systweak\Advanced System Protector\2.1.1000.10125 (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\Bench\Updater (PUP.Optional.AdwarePlugin) -> Quarantined and deleted successfully.
C:\Program Files (x86)\Bench\Updater\1.7.0.0 (PUP.Optional.AdwarePlugin) -> Quarantined and deleted successfully.
C:\Program Files (x86)\Bench\NmHost (PUP.Optional.BenchUpdater) -> Quarantined and deleted successfully.
C:\Program Files (x86)\Bench\NmHost\data\installer (PUP.Optional.BenchUpdater) -> Quarantined and deleted successfully.
C:\Program Files (x86)\Bench\NmHost\data (PUP.Optional.BenchUpdater) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\BenchUpdater (PUP.Optional.BenchUpdater.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\DefaultTab\DefaultTab (PUP.Optional.DefaultTab.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\File Scout (PUP.Optional.FileScout.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\LocalLow\Funmoods\Funmoods\us\20101003 (PUP.Optional.FunMoods.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\LocalLow\Funmoods (PUP.Optional.FunMoods.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\LocalLow\Funmoods\Funmoods\us (PUP.Optional.FunMoods.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\LocalLow\Funmoods\Funmoods (PUP.Optional.FunMoods.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\PerformerSoft\PC Performer (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\PerformerSoft\PC Performer (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\Guest.oxfordhousenorm\AppData\Roaming\PerformerSoft\PC Performer (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\Clyde\AppData\Roaming\PerformerSoft\PC Performer (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\VINCE\AppData\Roaming\PerformerSoft\PC Performer (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\PerformerSoft\PC Performer\Partial Backups (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\Systweak\RegClean Pro\Version 6.1 (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\Clyde\AppData\Roaming\Systweak\RegClean Pro (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\Guest.oxfordhousenorm\AppData\Roaming\Systweak\RegClean Pro\Version 6.1 (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\VINCE\AppData\Roaming\Systweak\RegClean Pro (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\Clyde\AppData\Roaming\Systweak\RegClean Pro\Version 6.1 (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\Systweak\RegClean Pro (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\Systweak\RegClean Pro\Version 6.1 (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\Systweak\RegClean Pro (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\Guest.oxfordhousenorm\AppData\Roaming\Systweak\RegClean Pro (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\VINCE\AppData\Roaming\Systweak\RegClean Pro\Version 6.1 (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\AppFramework (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\AppFramework (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\CanvasFramework (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework-ui (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\icons (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\includes (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework-ui (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0 (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\icons (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\CanvasFramework (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\includes (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0 (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\html (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0 (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\html (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0 (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\html (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\plugins (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_1 (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_1\html (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_1\js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_1\plugins (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.32_0 (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.32_0\html (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.32_0\js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0 (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.

"there was this big bang once, now we're learnin' to use our thumbs"


Report •

#10
February 14, 2014 at 20:34:45
Files Detected: 302
C:\$RECYCLE.BIN\S-1-5-21-826330634-1951158616-2336686511-1001\$R65MNGE.exe (Adware.GamePlayLabs) -> Quarantined and deleted successfully.
C:\$RECYCLE.BIN\S-1-5-21-826330634-1951158616-2336686511-1001\$RA2VJ5G.exe (PUP.BundleInstaller.SOL) -> Quarantined and deleted successfully.
C:\$RECYCLE.BIN\S-1-5-21-826330634-1951158616-2336686511-1001\$R1V9XZH.exe (PUP.BundleInstaller.SOL) -> Quarantined and deleted successfully.
C:\$RECYCLE.BIN\S-1-5-21-826330634-1951158616-2336686511-1001\$R9B1Z7F.exe (PUP.BundleInstaller.SOL) -> Quarantined and deleted successfully.
C:\$RECYCLE.BIN\S-1-5-21-826330634-1951158616-2336686511-1001\$RPCY8H1.exe (PUP.BundleInstaller.SOL) -> Quarantined and deleted successfully.
C:\$RECYCLE.BIN\S-1-5-21-826330634-1951158616-2336686511-1001\$RAGVZX0.exe (PUP.BundleInstaller.SOL) -> Quarantined and deleted successfully.
C:\$RECYCLE.BIN\S-1-5-21-826330634-1951158616-2336686511-1001\$RKWSGHB.exe (PUP.BundleInstaller.SOL) -> Quarantined and deleted successfully.
C:\$RECYCLE.BIN\S-1-5-21-826330634-1951158616-2336686511-1001\$RM81E70.exe (PUP.BundleInstaller.SOL) -> Quarantined and deleted successfully.
C:\$RECYCLE.BIN\S-1-5-21-826330634-1951158616-2336686511-1001\$REOMIRM.exe (PUP.BundleInstaller.SOL) -> Quarantined and deleted successfully.
C:\$RECYCLE.BIN\S-1-5-21-826330634-1951158616-2336686511-1001\$RIQ0N6G.exe (PUP.BundleInstaller.SOL) -> Quarantined and deleted successfully.
C:\$RECYCLE.BIN\S-1-5-21-826330634-1951158616-2336686511-1001\$RJBCVL4.exe (PUP.BundleInstaller.SOL) -> Quarantined and deleted successfully.
C:\$RECYCLE.BIN\S-1-5-21-826330634-1951158616-2336686511-1001\$RBERMT9.exe (PUP.BundleInstaller.VG) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bbjciahceamgodcoidkjpchnokgfpphh_0.localstorage (PUP.Funmoods) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\funmoods.crx (PUP.Funmoods) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\Systweak\Advanced System Protector\Logs\log_16-08-13_07-22-50.xml (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\Systweak\Advanced System Protector\2.1.1000.10158\ASPLog.txt (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\Systweak\Advanced System Protector\2.1.1000.10125\ASPLog.txt (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\Clyde\AppData\Roaming\Systweak\Advanced System Protector\2.1.1000.10158\ASPLog.txt (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\Systweak\Advanced System Protector\Logs\log_09-11-13_03-50-56.xml (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\Clyde\AppData\Roaming\Systweak\Advanced System Protector\Settings.db (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\Guest.oxfordhousenorm\AppData\Roaming\Systweak\Advanced System Protector\Settings.db (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\Guest.oxfordhousenorm\AppData\Roaming\Systweak\Advanced System Protector\QDetail.db (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\Systweak\Advanced System Protector\QDetail.db (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\Systweak\Advanced System Protector\Settings.db (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\Guest.oxfordhousenorm\AppData\Roaming\Systweak\Advanced System Protector\2.1.1000.10158\ASPLog.txt (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\Systweak\Advanced System Protector\2.1.1000.10125\ASPLog.txt (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\Systweak\Advanced System Protector\2.1.1000.10158\ASPLog.txt (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\Systweak\Advanced System Protector\Update.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\Systweak\Advanced System Protector\Logs\SMLog.xml (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\Systweak\Advanced System Protector\Logs\log_17-02-13_04-14-49.xml (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\Systweak\Advanced System Protector\Logs\SMLog.xml (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\Systweak\Advanced System Protector\QDetail.db (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\Systweak\Advanced System Protector\Settings.db (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\Systweak\Advanced System Protector\Update.ini (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Users\Clyde\AppData\Roaming\Systweak\Advanced System Protector\QDetail.db (PUP.Optional.AdvancedSystemProtector.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\Bench\Updater\products.xml (PUP.Optional.AdwarePlugin) -> Quarantined and deleted successfully.
C:\Program Files (x86)\Bench\Updater\updater.exe (PUP.Optional.AdwarePlugin) -> Quarantined and deleted successfully.
C:\Program Files (x86)\Bench\Updater\1.7.0.0\updater.exe (PUP.Optional.Adwareplugin) -> Quarantined and deleted successfully.
C:\Program Files (x86)\Bench\NmHost\nmhost.exe (PUP.Optional.BenchUpdater) -> Quarantined and deleted successfully.
C:\Program Files (x86)\Bench\NmHost\data\installer\imfpmncmbojnbdhnogcegojocabhpbnh (PUP.Optional.BenchUpdater) -> Quarantined and deleted successfully.
C:\Program Files (x86)\Bench\NmHost\manifest.json (PUP.Optional.BenchUpdater) -> Quarantined and deleted successfully.
C:\Windows\Tasks\bench-S-1-5-21-826330634-1951158616-2336686511-1003.job (PUP.Optional.BenchUpdater.A) -> Quarantined and deleted successfully.
C:\Windows\Tasks\bench-sys.job (PUP.Optional.BenchUpdater.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\BenchUpdater\products.xml (PUP.Optional.BenchUpdater.A) -> Quarantined and deleted successfully.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Conduit\Community Alerts\Alert.dll.vir (PUP.Optional.Conduit) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Temp\SPSetup.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\Guest.oxfordhousenorm\AppData\Local\Temp\SPSetup.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G0XF52T4\spstub[1].exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\pcreginst\file_to_run.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Temp\SPSetup.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JO0IKYZN\taskinst24[1].exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\Guest.oxfordhousenorm\AppData\Local\Temp\7226.tmp (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G0XF52T4\SPSetup[1].exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.dll (PUP.Optional.DefaultTab) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\File Scout\filescout.exe (PUP.Optional.FileScout.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\File Scout\uninst.exe (PUP.Optional.FileScout.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Temp\F297.tmp (PUP.Optional.FileScout.A) -> Quarantined and deleted successfully.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\file scout\filescout.exe.vir (PUP.Optional.FileScout.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\LocalLow\Funmoods\Funmoods\us\20101003\kywrds.tat (PUP.Optional.FunMoods.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\LocalLow\Funmoods\Funmoods\us\20101003\kywrds.ttr (PUP.Optional.FunMoods.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cjpglkicenollcignonpgiafdgfeehoj_0.localstorage (PUP.Optional.FunMoods.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YMGITXS6\InboxAce.exe (PUP.Optional.FunWebProducts.A) -> Quarantined and deleted successfully.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Iminent\inst\Bootstrapper\Bootstrapper.exe.vir (PUP.Optional.Iminent.A) -> Quarantined and deleted successfully.
C:\$RECYCLE.BIN\S-1-5-21-826330634-1951158616-2336686511-1001\$RULE8RF.exe (PUP.Optional.OpenCandy) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G16GFLTA\OptimizerPro[1].exe (PUP.Optional.OptimizerPro.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Temp\OptimizerPro.exe (PUP.Optional.OptimizerPro.A) -> Quarantined and deleted successfully.
C:\Users\Guest.oxfordhousenorm\AppData\Roaming\PerformerSoft\PC Performer\log_02-12-2014.log (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\PerformerSoft\PC Performer\ExcludeList.rcp (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\PerformerSoft\PC Performer\Partial Backups\00000001.rmx (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\PerformerSoft\PC Performer\rcpupdate.ini (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\Guest.oxfordhousenorm\AppData\Roaming\PerformerSoft\PC Performer\results.rcp (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\Guest.oxfordhousenorm\AppData\Roaming\PerformerSoft\PC Performer\eng_rcp.dat (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\Guest.oxfordhousenorm\AppData\Roaming\PerformerSoft\PC Performer\ExcludeList.rcp (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\PerformerSoft\PC Performer\Partial Backups\00000001.rxb (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\Guest.oxfordhousenorm\AppData\Roaming\PerformerSoft\PC Performer\TempHLList.rcp (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\PerformerSoft\PC Performer\log_02-12-2014.log (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\PerformerSoft\PC Performer\results.rcp (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\Guest.oxfordhousenorm\AppData\Roaming\PerformerSoft\PC Performer\log_02-13-2014.log (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\PerformerSoft\PC Performer\ExcludeList.rcp (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\Clyde\AppData\Roaming\PerformerSoft\PC Performer\eng_rcp.dat (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\Clyde\AppData\Roaming\PerformerSoft\PC Performer\log_12-30-2012.log (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\PerformerSoft\PC Performer\log_02-11-2014.log (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\PerformerSoft\PC Performer\rcpupdate.ini (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\Guest.oxfordhousenorm\AppData\Roaming\PerformerSoft\PC Performer\rcpupdate.ini (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\PerformerSoft\PC Performer\log_02-10-2014.log (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\PerformerSoft\PC Performer\log_02-06-2014.log (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\PerformerSoft\PC Performer\log_01-29-2014.log (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\PerformerSoft\PC Performer\log_01-30-2014.log (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\PerformerSoft\PC Performer\log_02-03-2014.log (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\AdwCleaner\Quarantine\C\Windows\System32\roboot64.exe.vir (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\PerformerSoft\PC Performer\log_02-09-2014.log (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\PerformerSoft\PC Performer\log_02-11-2014.log (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\PerformerSoft\PC Performer\results.rcp (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\PerformerSoft\PC Performer\TempHLList.rcp (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\Clyde\AppData\Roaming\PerformerSoft\PC Performer\log_12-27-2012.log (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\VINCE\AppData\Roaming\PerformerSoft\PC Performer\results.rcp (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\PerformerSoft\PC Performer\eng_rcp.dat (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\PerformerSoft\PC Performer\TempHLList.rcp (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\PerformerSoft\PC Performer\eng_rcp.dat (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\PerformerSoft\PC Performer\log_02-07-2014.log (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\VINCE\AppData\Roaming\PerformerSoft\PC Performer\eng_rcp.dat (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\PerformerSoft\PC Performer\log_02-05-2014.log (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\VINCE\AppData\Roaming\PerformerSoft\PC Performer\log_12-27-2012.log (PUP.Optional.PCPerformer.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\Downloads\rcpmmnew_mynew30679-20kTYF1Lng7cGPFO1ihOUH1vmN9S000..exe (PUP.Optional.RegCleanerPro) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_02-11-2014.log (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\TempHLList.rcp (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\Clyde\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_12-30-2012.log (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_02-09-2014.log (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\Clyde\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\eng_rcp.dat (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\results.rcp (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\Guest.oxfordhousenorm\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\TempHLList.rcp (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\eng_rcp.dat (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\Clyde\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_12-27-2012.log (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_02-05-2014.log (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\Guest.oxfordhousenorm\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_02-13-2014.log (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_02-10-2014.log (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_02-03-2014.log (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_02-07-2014.log (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\Guest.oxfordhousenorm\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\ExcludeList.rcp (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\rcpupdate.ini (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\Guest.oxfordhousenorm\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\results.rcp (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\TempHLList.rcp (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\VINCE\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_12-27-2012.log (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\eng_rcp.dat (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\ExcludeList.rcp (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_01-29-2014.log (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_01-30-2014.log (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_02-12-2014.log (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\myreg.ini (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\Guest.oxfordhousenorm\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\eng_rcp.dat (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\results.rcp (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\ExcludeList.rcp (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\VINCE\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\eng_rcp.dat (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_02-11-2014.log (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Roaming\Systweak\RegClean Pro\Version 6.1\log_02-06-2014.log (PUP.Optional.RegCleanerPro.A) -> Quarantined and deleted successfully.
C:\Windows\Temp\nsuF145.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Windows\Temp\nsmE340.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Windows\Temp\nsnDE51.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Windows\Temp\nshE285.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Windows\Temp\nsiDE80.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Windows\Temp\nsn7302.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Temp\nswE4C9.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Windows\Temp\nsp91C7.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Windows\Temp\nsx5832.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Windows\Temp\nssBBC4.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Windows\Temp\nsu936C.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Windows\Temp\nsxBD1B.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Temp\nsbD731.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\Guest.oxfordhousenorm\AppData\Local\Temp\nsd7775.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Windows\Temp\nsh4EFE.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Windows\Temp\nsd77F2.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Temp\nsb3B71.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Windows\Temp\nspF348.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Temp\nsm4919.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Windows\Temp\nsv2D2C.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G0XF52T4\SPIdentifierImpl[1].exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Windows\Temp\nsaBEFE.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Windows\Temp\nsc1E6D.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Temp\Zako-EXE-1217.exe (PUP.Optional.SearchSafer.A) -> Quarantined and deleted successfully.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\distro-search-protect-fix[2] (PUP.Optional.Searchprotect) -> Quarantined and deleted successfully.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\distro-search-protect-fix[1] (PUP.Optional.Searchprotect) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\Downloads\SoftonicDownloader_for_pgp-desktop.exe (PUP.Optional.Softonic.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\AppFramework\appAPI_bg.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\xhr.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\utils.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\manifest.json (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\AppFramework\appAPI_common.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\AppFramework\appAPI_content.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\AppFramework\appAPI_bg.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\AppFramework\appAPI_browseraction.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\AppFramework\jquery.min.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\AppFramework\appAPI_settings.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.

"there was this big bang once, now we're learnin' to use our thumbs"


Report •

#11
February 14, 2014 at 20:35:23
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\extension_info.json (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\manifest.json (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\backgroundscript_engine.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\base.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\browser.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\console.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\framework.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\i18n.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\initialize.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\invoke_async.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\io.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\lang.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\legacy.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\message_target.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\messaging.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\storage.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\timer.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\userscript_client.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\userscript_engine.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\AppFramework\appAPI_common.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\AppFramework\appAPI_content.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework-ui\browser_button.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework-ui\context_menu.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework-ui\framework_api.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework-ui\notifications.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework-ui\options.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework-ui\remote_popup_host.html (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework-ui\remote_popup_host.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework-ui\ui_base.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\icons\button.png (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\icons\icon100.png (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\icons\icon128.png (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\icons\icon32.png (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\icons\icon48.png (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\includes\content.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\CanvasFramework\canvasscript_engine.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\CanvasFramework\canvas_bg.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\CanvasFramework\webrequest.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\storage.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\timer.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\userscript_client.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\userscript_engine.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\utils.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\xhr.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework-ui\browser_button.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework-ui\context_menu.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\background.html (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\extension_info.json (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework-ui\remote_popup_host.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework-ui\ui_base.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\AppFramework\appAPI_browseraction.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\icons\icon100.png (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\icons\icon128.png (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\AppFramework\appAPI_settings.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\AppFramework\appAPI_webrequest.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\AppFramework\jquery.min.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\CanvasFramework\canvasscript_engine.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\CanvasFramework\canvas_bg.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\CanvasFramework\webrequest.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\backgroundscript_engine.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\base.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\browser.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\console.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\framework.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\i18n.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\initialize.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\invoke_async.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\io.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\lang.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\legacy.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\message_target.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework\messaging.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework-ui\framework_api.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\icons\icon32.png (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\icons\button.png (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework-ui\remote_popup_host.html (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\background.html (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework-ui\notifications.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\icons\icon48.png (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\includes\content.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\imfpmncmbojnbdhnogcegojocabhpbnh\1.0_0\framework-ui\options.js (PUP.Optional.StartSaving.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.3.0.2_0\mgHelperGC.dll (PUP.Optional.SweetIM) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.1.0.1_0\mgHelperGC.dll (PUP.Optional.SweetIM) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj\1.3.0.2_1\mgHelperGC.dll (PUP.Optional.SweetIM) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\priam_icon_48x48.png (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\html\background.html (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\js\background.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\js\browserLoad.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\js\priam.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\js\priam_background.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\js\priam_chrome.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\manifest.json (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\priam_icon_128x128.png (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\priam_icon_48x48.png (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\html\background.html (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\js\background.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\js\browserLoad.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\js\priam.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\js\priam_background.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\js\priam_chrome.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\manifest.json (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\priam_icon_128x128.png (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\priam_icon_48x48.png (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\html\background.html (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\js\background.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\js\priam.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\js\priam_background.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\js\priam_chrome.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0\plugins\PriamNPAPI.dll (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_1\manifest.json (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_1\priam_icon_128x128.png (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_1\priam_icon_48x48.png (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_1\html\background.html (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_1\js\background.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_1\js\priam.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_1\js\priam_background.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_1\js\priam_chrome.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_1\plugins\PriamNPAPI.dll (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.32_0\manifest.json (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.32_0\priam_icon_128x128.png (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.32_0\priam_icon_48x48.png (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.32_0\html\background.html (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.32_0\js\background.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.32_0\js\browserLoad.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.32_0\js\priam.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.32_0\js\priam_background.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.32_0\js\priam_chrome.js (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\manifest.json (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.
C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.34_0\priam_icon_128x128.png (PUP.Optional.Wajam.A) -> Quarantined and deleted successfully.

(end)

"there was this big bang once, now we're learnin' to use our thumbs"


Report •

#12
February 14, 2014 at 20:36:41
That's from malware bytes... i wasn't sure the best way to post that log let me know if i did it wrong

"there was this big bang once, now we're learnin' to use our thumbs"


Report •

#13
February 14, 2014 at 21:34:26
"omg i hope i did this right"
You did.

"i wasn't sure the best way to post that log let me know if i did it wrong"
That was Ok, the other way was using Image Uploader.


Report •

#14
February 14, 2014 at 21:37:16
While I'm checking the logs, run both of these, in this order.

1: Run AdwCleaner
http://www.softpedia.com/get/Antivi...
http://www.softpedia.com/progScreen...
How to download from Softpedia
http://i.imgur.com/BWELEfV.gif
http://i.imgur.com/4luY3rU.gif
http://www.raymond.cc/blog/adwclean...
http://www.bleepingcomputer.com/dow...
Author's site
http://general-changelog-team.fr/en...
Tutorial
http://general-changelog-team.fr/en...
Please download AdwCleaner by Xplode onto your Desktop.
Close all open programs and internet browsers.
Double click on AdwCleaner.exe to run the tool.
Click on Clean.
Confirm each time with Ok.
Your computer will be rebooted automatically. A text file will open after the restart.
Please Copy & Paste the contents of that logfile with your next answer.
You can find the logfile at C:\AdwCleaner[S1].txt as well.

2: Run Junkware Removal Tool
http://www.softpedia.com/get/Securi...
http://www.softpedia.com/progScreen...
How to download from Softpedia
http://i.imgur.com/qO92huz.gif
http://i.imgur.com/qzTUYkX.gif
http://www.bleepingcomputer.com/dow...
http://thisisudax.blogspot.com.au/2...
Download Junkware Removal Tool to your Desktop.
Warning! Once the scan is complete JRT will shut down your browser with NO warning.
Shut down your protection software now to avoid potential conflicts.
Temporarily disable your antivirus and any antispyware real time protection before performing a scan.
Click this link to see a list of security programs that should be disabled and how to disable them.
http://www.bleepingcomputer.com/for...
http://www.techsupportforum.com/for...
Run the tool by double-clicking it. If you are using Windows Vista or Windows 7/8, right-click JRT and select Run as Administrator.
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your Desktop and will automatically open.
Copy and Paste the contents of the JRT.txt log please.


Report •

#15
February 14, 2014 at 22:00:33
from adwcleaner

# AdwCleaner v3.018 - Report created 14/02/2014 at 23:56:51
# Updated 28/01/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Guest - OXFORDHOUSENORM
# Running from : C:\Users\Guest.oxfordhousenorm\Downloads\adwcleaner (1).exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKCU\Software\dsiteproducts
Key Deleted : HKCU\Software\InstallCore

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16518


-\\ Google Chrome v32.0.1700.107

*************************

AdwCleaner[R0].txt - [28430 octets] - [13/02/2014 09:52:32]
AdwCleaner[R1].txt - [1075 octets] - [14/02/2014 23:53:39]
AdwCleaner[S0].txt - [28265 octets] - [13/02/2014 09:54:36]
AdwCleaner[S1].txt - [912 octets] - [14/02/2014 23:56:51]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [971 octets] ##########

"there was this big bang once, now we're learnin' to use our thumbs"


Report •

#16
February 14, 2014 at 22:08:25
When I try to run junkware removal tool, a blank command prompt opens up. It says c:\windows\sysWOW64\cmd.exe and there is only black space

"there was this big bang once, now we're learnin' to use our thumbs"

message edited by ganymede


Report •

#17
February 14, 2014 at 22:17:00
"When I try to run junkware removal tool, a blank command prompt opens up"

"Run the tool by double-clicking it. If you are using Windows Vista or Windows 7/8, right-click JRT and select Run as Administrator"

Did you?


Report •

#18
February 14, 2014 at 22:36:49
Now I've tried that too with similar results. It now says
c:\windows\system32\cmd.exe
I also followed instructions to disable real time protection

i've got to go to bed now,ill check this tommorow

"There was this big bang once, now we're learnin' to use our thumbs"

message edited by ganymede


Report •

#19
February 14, 2014 at 22:40:50
Something is stopping it running, try Safe mode.

EDIT: Just noticed you didn't run AdwCleaner from the Desktop, you are probably doing the same.

message edited by Johnw


Report •

#20
February 14, 2014 at 22:48:04
Okay wasn't sure how to do that at first but figured it out. i will try this agian tommorow,i have to go to bed

"there was this big bang once, now we're learnin' to use our thumbs"


Report •

#21
February 14, 2014 at 22:52:22
"i have to go to bed'
Ok, Saturday afternoon here.
http://www.timeanddate.com/worldclo...

Report •

#22
February 16, 2014 at 09:26:48
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.1 (02.04.2014:1)
OS: Windows 7 Home Premium x64
Ran by Derek on Sun 02/16/2014 at 11:07:27.98
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


~~~ Services

~~~ Registry Values

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sparktrust
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4623A8C4-150D-4983-8982-68C01E7D6541}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110111271167}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\dealcabby-20120809_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\dealcabby-20120809_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\dealcabby_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\dealcabby_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\DealOhMania (1)_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\DealOhMania (1)_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\DealOhMania_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\DealOhMania_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\PricePeepInstaller_IronSource_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\PricePeepInstaller_IronSource_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110111271167}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\dealcabby-20120809_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\dealcabby-20120809_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\dealcabby_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\dealcabby_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\DealOhMania (1)_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\DealOhMania (1)_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\DealOhMania_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\DealOhMania_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\PricePeepInstaller_IronSource_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\PricePeepInstaller_IronSource_RASMANCS
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{9B7B7DB5-BC63-4A55-89E4-3DB7FC5EF3CA}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{d43b3890-80c7-4010-a95d-1e77b5924dc3}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{35e9438f-19d4-4516-b2ac-59ba9241de4d}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{993f1df9-4ef3-450c-bf9c-f312f7be85d0}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{9B7B7DB5-BC63-4A55-89E4-3DB7FC5EF3CA}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2408}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2465}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}

~~~ Files

Successfully deleted: [File] C:\Program Files (x86)\52res.dll
Successfully deleted: [File] C:\Program Files (x86)\52Uninstall Webfetti.dll
Successfully deleted: [File] "C:\end"
Successfully deleted: [File] C:\Windows\syswow64\sho236D.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho2516.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho5BE8.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho5D7D.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho9CFC.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho9D0E.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoB7BD.tmp

~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\ammyy"
Successfully deleted: [Folder] "C:\ProgramData\big fish games"
Successfully deleted: [Folder] "C:\ProgramData\sparktrust"
Successfully deleted: [Folder] "C:\Program Files (x86)\couponalert_2pei"
Successfully deleted: [Folder] "C:\Program Files (x86)\gamingwonderlandei"
Successfully deleted: [Folder] "C:\Program Files (x86)\pcpowerspeed"
Successfully deleted: [Folder] "C:\Program Files (x86)\speeditup free"
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Sun 02/16/2014 at 11:23:33.77
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

"there was this big bang once, now we're learnin' to use our thumbs"


Report •

#23
February 16, 2014 at 09:47:31
i can now access firewall and add user accounts, but start savin, pc power speed, and something called infospace, are still there... im sure there are others too

"there was this big bang once, now we're learnin' to use our thumbs"

message edited by ganymede


Report •

#24
February 16, 2014 at 10:10:55
Just a matter of dismantling the nasties bit by bit ganymede.

Run RogueKiller
http://www.softpedia.com/get/Securi...
http://www.softpedia.com/progScreen...
http://majorgeeks.com/RogueKiller_d...
http://www.geekstogo.com/forum/file...
http://tigzy.geekstogo.com/roguekil...
http://www.sur-la-toile.com/RogueKi...
User Guide
http://www.adlice.com/softwares/rog...
Official tutorial
http://www.adlice.com/softwares/rog...
If RogueKiller won't run, open IE & turn off SmartScreen Filter.
http://windows.microsoft.com/en-AU/...
Download & SAVE to your Desktop.
Quit all programs that you may have started.
Shutdown your antivirus to avoid any conflicts.
Please disconnect any USB or external drives from the computer before you run this scan!
For Vista or Windows 7/8, right-click and select "Run as Administrator to start"
For Windows XP, double-click to start.
Wait until Prescan has finished ...
Then Click on "Scan" button
Wait until the Status box shows "Scan Finished"
click on "delete"
Wait until the Status box shows "Deleting Finished"
Click on "Report" and Copy & Paste the content of the Notepad into your next reply.
The log should be found in RKreport[1].txt on your Desktop.
Exit/Close RogueKiller.
When completed make sure to re-enable your antivirus.


Report •

#25
February 17, 2014 at 21:29:07
RogueKiller V8.8.7 [Feb 11 2014] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : http://forum.adlice.com
Website : http://www.adlice.com/softwares/rog...
Blog : http://www.adlice.com

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Derek [Admin rights]
Mode : Remove -- Date : 02/17/2014 23:26:32
| ARK || FAK || MBR |

¤¤¤ Bad processes : 0 ¤¤¤

¤¤¤ Registry Entries : 7 ¤¤¤
[RUN][SUSP PATH] HKLM\[...]\Wow6432Node\[...]\RunOnce : Start Savin-repairJob (wscript.exe "C:\Users\Clyde.oxfordhousenorm\AppData\Local\Start Savin\repair.js" "Start Savin-repairJob" [x][-][x]) -> DELETED
[HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> DELETED
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> DELETED
[HJ POL][PUM] HKLM\[...]\System : ConsentPromptBehaviorUser (0) -> REPLACED (1)
[HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : ConsentPromptBehaviorUser (0) -> REPLACED (1)
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

¤¤¤ Scheduled tasks : 8 ¤¤¤
[V1][SUSP PATH] AVG-Secure-Search-Update_JUNE2013_HP_rmv.job : C:\Windows\TEMP\{33E56D44-31E1-4DD4-9749-54C8A95F9657}.exe - --uninstall=1 [x] -> DELETED
[V1][SUSP PATH] AVG-Secure-Search-Update_JUNE2013_TB_rmv.job : C:\Windows\TEMP\{2A13D855-ED9A-4418-B556-6D027DE4E001}.exe - --uninstall=1 [x] -> DELETED
[V1][SUSP PATH] Digital Sites.job : C:\Users\GUEST~1.OXF\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE - /Check [-] -> DELETED
[V2][ROGUE ST] 4822 : wscript.exe - C:\Users\OXFORD~1\AppData\Local\Temp\launchie.vbs //B -> DELETED
[V2][ROGUE ST] 5031 : wscript.exe - C:\Users\GUEST~1.OXF\AppData\Local\Temp\launchie.vbs //B -> DELETED
[V2][SUSP PATH] AVG-Secure-Search-Update_JUNE2013_HP_rmv : C:\Windows\TEMP\{33E56D44-31E1-4DD4-9749-54C8A95F9657}.exe - --uninstall=1 [x] -> ERROR DELETING TASK
[V2][SUSP PATH] AVG-Secure-Search-Update_JUNE2013_TB_rmv : C:\Windows\TEMP\{2A13D855-ED9A-4418-B556-6D027DE4E001}.exe - --uninstall=1 [x] -> ERROR DELETING TASK
[V2][SUSP PATH] Digital Sites : C:\Users\GUEST~1.OXF\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE - /Check [-] -> ERROR DELETING TASK

¤¤¤ Startup Entries : 0 ¤¤¤

¤¤¤ Web browsers : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [NOT LOADED 0x0] ¤¤¤

¤¤¤ External Hives: ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


54.204.28.26 imfpmncmbojnbdhnogcegojocabhpbnh


¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) Hitachi HDS721050CLA662 SATA Disk Device +++++
--- User ---
[MBR] bcdd0a3c830e7370ec3d0fdef493087c
[BSP] b8126f12bbf92798498ffc5b42ece95b : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 465198 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 952932352 | Size: 11640 Mo
User = LL1 ... OK!
User != LL2 ... KO!
--- LL2 ---
[MBR] b9de2baea951a04b2eea32443f72ff96
[BSP] 79902e57a6fb9f549efe40d60f164710 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 165308416 | Size: 300 Mo

Finished : << RKreport[0]_D_02172014_232632.txt >>
RKreport[0]_S_02172014_232513.txt

man this is hard.

"there was this big bang once, now we're learnin' to use our thumbs"


Report •

#26
February 17, 2014 at 21:32:50
that start savin thing does NOT want to die. i guess they really want us to start savin. info space llc, funmoods and pc powerspeed wont go away either

"there was this big bang once, now we're learnin' to use our thumbs"

message edited by ganymede


Report •

#27
February 18, 2014 at 01:03:25
Download the latest version AdwCleaner 3.019

This time run it from the Desktop.

message edited by Johnw


Report •

#28
February 18, 2014 at 16:40:34
# AdwCleaner v3.019 - Report created 18/02/2014 at 18:35:35
# Updated 17/02/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Derek - OXFORDHOUSENORM
# Running from : C:\Users\Derek\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files (x86)\Bench
Folder Deleted : C:\Users\oxford house norman\AppData\Local\apn
Folder Deleted : C:\Users\oxford house norman\AppData\Local\Conduit
Folder Deleted : C:\Users\oxford house norman\AppData\Local\Lucky Savings
Folder Deleted : C:\Users\oxford house norman\AppData\Local\RewardsArcadeSuite
Folder Deleted : C:\Users\oxford house norman\AppData\Local\Tiger Savings
Folder Deleted : C:\Users\oxford house norman\AppData\Local\Wajam
Folder Deleted : C:\Users\oxford house norman\AppData\Local\Temp\apn
Folder Deleted : C:\Users\oxford house norman\AppData\LocalLow\AppGraffiti
Folder Deleted : C:\Users\oxford house norman\AppData\LocalLow\AVG Secure Search
Folder Deleted : C:\Users\oxford house norman\AppData\LocalLow\BabylonToolbar
Folder Deleted : C:\Users\oxford house norman\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\oxford house norman\AppData\LocalLow\PriceGong
Folder Deleted : C:\Users\oxford house norman\AppData\Roaming\Babylon
Folder Deleted : C:\Users\oxford house norman\AppData\Roaming\DefaultTab
Folder Deleted : C:\Users\oxford house norman\AppData\Roaming\DriverCure
Folder Deleted : C:\Users\oxford house norman\AppData\Roaming\ParetoLogic
Folder Deleted : C:\Users\oxford house norman\AppData\Roaming\pccustubinstaller
Folder Deleted : C:\Users\oxford house norman\AppData\Roaming\PerformerSoft
Folder Deleted : C:\Users\oxford house norman\AppData\Roaming\SpecialSavings
Folder Deleted : C:\Users\oxford house norman\AppData\Roaming\StatusWinks
Folder Deleted : C:\Users\oxford house norman\AppData\Roaming\Systweak
Folder Deleted : C:\Users\oxford house norman\Documents\ShopToWin
Folder Deleted : C:\Users\Clyde.oxfordhousenorm\AppData\LocalLow\AppGraffiti
Folder Deleted : C:\Users\Clyde.oxfordhousenorm\AppData\LocalLow\AskToolbar
Folder Deleted : C:\Users\Clyde.oxfordhousenorm\AppData\LocalLow\AVG Secure Search
Folder Deleted : C:\Users\Clyde.oxfordhousenorm\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Clyde.oxfordhousenorm\AppData\LocalLow\CouponAlert_2p
Folder Deleted : C:\Users\Clyde.oxfordhousenorm\AppData\LocalLow\Crawler Toolbar
Folder Deleted : C:\Users\Clyde.oxfordhousenorm\AppData\LocalLow\GamingWonderland
Folder Deleted : C:\Users\Clyde.oxfordhousenorm\AppData\LocalLow\MyScrapNook_12
Folder Deleted : C:\Users\Clyde.oxfordhousenorm\AppData\LocalLow\PriceGong
Folder Deleted : C:\Users\Clyde.oxfordhousenorm\AppData\LocalLow\RebateInformer
Folder Deleted : C:\Users\Clyde.oxfordhousenorm\AppData\LocalLow\searchresultstb
Folder Deleted : C:\Users\Clyde.oxfordhousenorm\AppData\LocalLow\SiteRanker
Folder Deleted : C:\Users\Clyde.oxfordhousenorm\AppData\LocalLow\Softonic
Folder Deleted : C:\Users\Clyde.oxfordhousenorm\AppData\LocalLow\SweetIM
Folder Deleted : C:\Users\Clyde.oxfordhousenorm\AppData\LocalLow\toolbar2
Folder Deleted : C:\Users\Clyde.oxfordhousenorm\AppData\LocalLow\VideoDownloadConverter_4z
Folder Deleted : C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\PerformerSoft
Folder Deleted : C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\Systweak
Folder Deleted : C:\Users\Clyde.oxfordhousenorm\Documents\optimizer pro
Folder Deleted : C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpglkicenollcignonpgiafdgfeehoj
File Deleted : C:\Users\oxford house norman\AppData\Local\funmoods-speeddial.crx
File Deleted : C:\Users\oxford house norman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
File Deleted : C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\Mozilla\Firefox\Profiles\lfsuf792.default\searchplugins\softonic.xml
File Deleted : C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\Mozilla\Firefox\Profiles\lfsuf792.default\user.js
File Deleted : C:\Users\Derek\AppData\Roaming\Mozilla\Firefox\Profiles\diptsinh.default\user.js
File Deleted : C:\Windows\System32\Tasks\PC Performer

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\*\shell\filescout
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\VideoPerformerSetup_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\VideoPerformerSetup_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{348BD83C-B2CD-4319-A605-C96BB458DD80}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{87BEF026-9269-413C-A5B3-11F35451380E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348BD83C-B2CD-4319-A605-C96BB458DD80}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2D9083CE-8758-4704-BA57-3C891D7452BD}
Key Deleted : HKCU\Software\Alexa Internet
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\Software\Bench
Key Deleted : HKLM\Software\Uniblue

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16518


-\\ Mozilla Firefox v27.0.1 (en-US)

[ File : C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\Mozilla\Firefox\Profiles\lfsuf792.default\prefs.js ]

Line Deleted : user_pref("browser.startup.homepage", "hxxp://search.softonic.com/MOY00001/tb_v1?SearchSource=13&cc=&mi=da09649d000000000000386077400aaa&toi=16091");
Line Deleted : user_pref("browser.search.selectedEngine", "Search the web (Softonic)");

[ File : C:\Users\Derek\AppData\Roaming\Mozilla\Firefox\Profiles\diptsinh.default\prefs.js ]


-\\ Google Chrome v32.0.1700.107

[ File : C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ File : C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ File : C:\Users\Derek\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [28430 octets] - [13/02/2014 09:52:32]
AdwCleaner[R1].txt - [1075 octets] - [14/02/2014 23:53:39]
AdwCleaner[R2].txt - [6814 octets] - [18/02/2014 18:25:17]
AdwCleaner[S0].txt - [28265 octets] - [13/02/2014 09:54:36]
AdwCleaner[S1].txt - [1050 octets] - [14/02/2014 23:56:51]
AdwCleaner[S2].txt - [6860 octets] - [18/02/2014 18:35:35]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [6920 octets] ##########

"there was this big bang once, now we're learnin' to use our thumbs"


Report •

#29
February 18, 2014 at 16:51:39
That's better, now run Junkware again.

Report •

#30
February 18, 2014 at 16:53:47
upon running adwcleaner again this is the report I get


# AdwCleaner v3.019 - Report created 18/02/2014 at 18:49:19
# Updated 17/02/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Derek - OXFORDHOUSENORM
# Running from : C:\Users\Derek\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16518


-\\ Mozilla Firefox v27.0.1 (en-US)

[ File : C:\Users\Clyde.oxfordhousenorm\AppData\Roaming\Mozilla\Firefox\Profiles\lfsuf792.default\prefs.js ]


[ File : C:\Users\Derek\AppData\Roaming\Mozilla\Firefox\Profiles\diptsinh.default\prefs.js ]


-\\ Google Chrome v32.0.1700.107

[ File : C:\Users\oxford house norman\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ File : C:\Users\Clyde.oxfordhousenorm\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ File : C:\Users\Derek\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [28430 octets] - [13/02/2014 09:52:32]
AdwCleaner[R1].txt - [1075 octets] - [14/02/2014 23:53:39]
AdwCleaner[R2].txt - [6814 octets] - [18/02/2014 18:25:17]
AdwCleaner[R3].txt - [1726 octets] - [18/02/2014 18:41:40]
AdwCleaner[R4].txt - [1711 octets] - [18/02/2014 18:47:06]
AdwCleaner[S0].txt - [28265 octets] - [13/02/2014 09:54:36]
AdwCleaner[S1].txt - [1050 octets] - [14/02/2014 23:56:51]
AdwCleaner[S2].txt - [7004 octets] - [18/02/2014 18:35:35]
AdwCleaner[S3].txt - [1789 octets] - [18/02/2014 18:44:25]
AdwCleaner[S4].txt - [1632 octets] - [18/02/2014 18:49:19]

########## EOF - C:\AdwCleaner\AdwCleaner[S4].txt - [1692 octets] ##########

"there was this big bang once, now we're learnin' to use our thumbs"


Report •

#31
February 18, 2014 at 16:59:40
So here is a summary of problems as they stand now

When I log in to an administrator account I immediately get a request from something called infospace sales llc to make changes to the computer. I always deny it but it always asks.

these programs show up under "uninstall or change a program"

FixBee Disk Optimizer
jdownloader 0.9
PC power speed 1.0.0.24
start savin

of all these start savin is the most annoying because it brings up all these ads and they tell me "ads by start savin" on youtube etc.

while the computer is MUCH better than it was, it still runs slow and stutters on videos

"there was this big bang once, now we're learnin' to use our thumbs"

message edited by ganymede


Report •

#32
February 18, 2014 at 17:03:35
Lets finish cleaning first, it's a step by step process.

Refer my post #29


Report •

Ask Question