Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Menu
Install the app
Install
Reply to thread
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Support
Windows Malware Removal Help & Support
Began with Media Player 2.x and Pop Up Ads everywhere
Message
<blockquote data-quote="mike0921" data-source="post: 404672" data-attributes="member: 37453"><p><strong>1</strong>. I deleted MSE and installed AVG after I ran the programs instructed in your first post (between my post and your reply)</p><p><strong>2</strong>. I believe the aswMBR log I posted is a faulty log. I have one time stamped 45 minutes later which is the log after aswMBR finished. My comment:</p><p></p><p></p><p></p><p>was made after I <strong>thought</strong> it finished. When I returned to my desktop, AswMBR had the rest of the scan finished. I just didn't know it took that long.</p><p></p><p><strong>3</strong>. I have attached the correct log to this post for you.</p><p></p><p><strong>4. </strong>The ZOEK log is attached...</p><p>My apologies for my errors.....</p><p></p><p>You said to post the content. I'm unsure if you mean in this or attach it. Have done both:</p><p>========================================================================================================================</p><p></p><p></p><p>Zoek.exe v5.0.0.0 Updated 04-May-2015</p><p>Tool run by Mike on Tue 06/30/2015 at 7:53:18.13.</p><p>Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x64</p><p>Running in: Normal Mode Internet Access Detected</p><p>Launched: C:\Users\Mike\Desktop\zoek.exe [Scan all users] [Script inserted]</p><p></p><p>==== System Restore Info ======================</p><p></p><p>6/30/2015 8:02:41 AM Zoek.exe System Restore Point Created Successfully.</p><p></p><p>==== Empty Folders Check ======================</p><p></p><p>C:\PROGRA~2\MSXML 4.0 deleted successfully</p><p>C:\Users\Doug-Desktop\AppData\Roaming\Windows Live Writer deleted successfully</p><p>C:\Users\Mike\AppData\Roaming\Windows Live Writer deleted successfully</p><p>C:\Users\Doug-Desktop\AppData\Local\{4503AB61-C3F7-475C-BC09-BDDCBBB39160} deleted successfully</p><p>C:\Users\Doug-Desktop\AppData\Local\{89ACDC74-AE72-4827-A282-F36AA07713FB} deleted successfully</p><p>C:\Users\Doug-Desktop\AppData\Local\{A68A9D39-6E29-4FA0-AF0B-FA95EB462D40} deleted successfully</p><p>C:\Users\Mike\AppData\Local\EmieBrowserModeList deleted successfully</p><p>C:\Users\Mike\AppData\Local\EmieSiteList deleted successfully</p><p>C:\Users\Mike\AppData\Local\EmieUserList deleted successfully</p><p>C:\Users\Mike\AppData\Local\VirtualStore deleted successfully</p><p></p><p>==== Deleting CLSID Registry Keys ======================</p><p></p><p></p><p>==== Deleting CLSID Registry Values ======================</p><p></p><p></p><p>==== Deleting Services ======================</p><p></p><p></p><p>==== Batch Command(s) Run By Tool======================</p><p></p><p></p><p>==== Deleting Files \ Folders ======================</p><p></p><p>C:\PROGRA~2\QR Code Maker and Decoder deleted</p><p>C:\PROGRA~3\28341ff220e0446c9fff27c4493d622e deleted</p><p>C:\Users\Doug-Desktop\AppData\Local\32523 deleted</p><p>C:\Users\Doug-Desktop\AppData\Local\6384 deleted</p><p>C:\PROGRA~2\GUT2D8A.tmp deleted</p><p>C:\PROGRA~2\GUM2D89.tmp deleted</p><p>C:\A14F.tmp deleted</p><p>C:\install.exe deleted</p><p>C:\stat_log deleted</p><p>C:\Users\Mike\AppData\Roaming\ProductData deleted</p><p>C:\PROGRA~3\ProductData deleted</p><p>C:\Users\Mike\AppData\Local\CrashRpt deleted</p><p>C:\windows\SysNative\Tasks\avastBCLRestart_chrome.exe deleted</p><p>C:\Users\Mike\AppData\LocalLow\Company deleted</p><p>C:\Windows\SysNative\config\systemprofile\Searches deleted</p><p>"C:\Users\Mike\AppData\Roaming\P15ZESxJxZc4" deleted</p><p>"C:\PROGRA~3\Package Cache" deleted</p><p></p><p>==== Firefox Extensions Registry ======================</p><p></p><p>[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]</p><p>"<a href="mailto:wrc@avast.com">wrc@avast.com</a>"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [06/29/2015 06:19 PM]</p><p></p><p>==== Chromium Look ======================</p><p></p><p>Google Chrome Version: 43.0.2357.130</p><p></p><p>HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions</p><p>gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[06/29/2015 06:19 PM]</p><p>lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx[05/01/2015 11:17 AM]</p><p>pnlccmojcmeohlpggmfnbbiapkmbliob - C:\Program Files (x86)\Siber Systems\AI RoboForm\Chrome\rf-chrome.crx[06/21/2015 03:39 PM]</p><p></p><p>HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions</p><p>lmjegmlicamnimmfhcmpkclmigmmcbeh - No path found[]</p><p></p><p>Chrome Hotword Shared Module - Doug-Desktop\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg</p><p>A Quotation - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafpohheobbibbehfjogminpinjhlpmg</p><p>Dictanote - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\aomjekmpappghadlogpigifkghlmebjk</p><p>Writebox - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbehjmjchoiaglkeboicbgkpfafcmhij</p><p>Minimalist for Everything - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmihblnpomgpjkfddepdpdafhhepdbek</p><p>Cash Organizer - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\bppdehaogjdmkkiaiokmjdjmjnjicddk</p><p>WEEK PLAN - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\caggnmlckgjpgpgpgjeobdcfgbkefioo</p><p>Chrome RDP - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\cbkkbcmdlboombapidmoeolnmdacpkch</p><p>clipular - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjbjepchlgclmpinlbbeinajphohgfod</p><p>Thesaurus.com - Synonyms and Antonyms - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\clljlcapeomdokpgadmegpabakieebci</p><p>Google News - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\dllkocilcinkggkchnjgegijklcililc</p><p>ShopAtHome.com - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlmebkoiahbppacaicbgncnjhbpdfkcc</p><p>Invoice2go - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmjkikjpbpaehaclfdkmjdofdgodaakp</p><p>Reditr Web App - The Best Reddit Client - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejmiceoebcclihjdpnmmkdcmcboekibc</p><p>Blur - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\epanfjkfahimkgomnigadpkobaefekcd</p><p>Android Freeware - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\faijocccbppcdmakdenmbbiflcagbapp</p><p>Pandora - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbangkleohkafngihneedemihgfeikcl</p><p>NetBank - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnpedghacgigoamalnfnikaagobdbjp</p><p>Dictionary by Dictionary.com - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\gikhgcaliglmioibbockkmjknfnepbdh</p><p>Voice In - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjkogfbjkfchelfjonefnnenhfgglpnn</p><p>Avast Online Security - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki</p><p>Rapportive - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\hihakjfhbmlmjdnnhegiciffjplmdhin</p><p>feedly - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\hipbfijinpcgfogaopmgehiegacbhmob</p><p>Vimeo Couch Mode - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjkdhkejcnlmkfdodbkdkelefnkobfif</p><p>Quotes Book - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibfjeadhjbcepmknoanimdbemlobmlpe</p><p>Knok | Family Travel - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\iehdddmijbgofffjjmhkodckmnombhmf</p><p>The Weather Channel for Chrome - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\iflpcokdamgefbghpdipcibmhlkdopop</p><p>PDF to Word Converter App - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\jclipofobaadknkadkpgggmjkebddjam</p><p>Pocket Website - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\jijgclgmgjipgefcnnnibgllfonlfdap</p><p>Kobo Instant Reader - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\jknhjclcchfapglhbceedkoldnkmmhcc</p><p>Clipular Research save & share screenshot - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmjbgcjbgmcfgbgikmbdioggjlhjegpp</p><p>Google Voice (by Google) - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcnhkahnjcbndmmehfkdnkjomaanaooo</p><p>Quick Earth - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\khodocggeplgfhppgagfdpbjkniadmdh</p><p>Wave Accounting - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\knpkfcpnjfbniadmfchjpcigfhookhaa</p><p>Chrome Hotword Shared Module - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg</p><p>Webcam Toy - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfbgimoladefibpklnfmkpknadbklade</p><p>Skype Click to Call - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl</p><p>Google Drive App Launcher - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh</p><p>Mint - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhgffcfekbglhpcdjkhhjekhdnddkflg</p><p>Offline Email Notifier for Gmail™ Helper - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlcdlmnipofbmhgjajfobpeeikdejibj</p><p>PHP Docs-to-go - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlilmganaobieaclflbciblffhaagnip</p><p>Finance41 Personal Finance Manager - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbgkhncobohkmgdjdiijlbgjidpnnkcd</p><p>SendHub - Business Phone System - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlijkadphehijfiiigjeklnlnknmmped</p><p>Checker Plus for Gmail™ - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\oeopbcgkkoapgobdbedcemjljbihmemj</p><p>Scribble - stickies on steroids - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\offpaifnchmpbnjhjbhpdffahlofdkfb</p><p>Outlook.com - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfpeapihoiogbcmdmnibeplnikfnhoge</p><p>Send from Gmail (by Google) - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgphcomnlaojlmmcjmiddhdapjpbgeoc</p><p>OMG - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmoodaljflkhbojjaiibgnlindbhebme</p><p>RoboForm - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnlccmojcmeohlpggmfnbbiapkmbliob</p><p></p><p>==== Chromium Startpages ======================</p><p></p><p>C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Default\Preferences</p><p>iadmfchjpcigfhookhaa":"09AD7AA17EED38F22945C168A4AFD12F24B450702B9F525BC7E0C6D883363D3B","lbfehkoinhhcknnbdgnnmjhiladcgbol":"784F27A7B85F54A13D5CC88F7BF2C2D843B3E574A88E8F1DDC09E1D181E8BF2D","lccekmodgklaepjeofjdjpbminllajkg":"87D51C758DE4FCF8033E4839FB9E1FC885A67E4FF6826B5AB1BBB57627652BF5","lfbgimoladefibpklnfmkpknadbklade":"968F48B94022650F1C8C2D5F3DED74C3C54335374E04EF1A4D4FB883515D7582","lifbcibllhkdhoafpjfnlhfpfgnpldfl":"48EC59CBA80E3EC2C59346304B7725B26E8F8D7E7A1992A99A74A9C8CA1B3407","lmjegmlicamnimmfhcmpkclmigmmcbeh":"391403D66015D64F12F1979C777D795D61A6648F0582A1D4AC2DEB51D52E5351","lneaknkopdijkpnocmklfnjbeapigfbh":"B78E779287C610EB53E787CA7D6485B843A57C8E7A8111AC5C9C071E301D1F1D","mfehgcgbbipciphmccgaenjidiccnmng":"9A612A108E224A45E4760655ECEF33ABE2B27E556783FFBC72E8E1391EAB1BB9","mfffpogegjflfpflabcdkioaeobkgjik":"D850F8C8EE8A5B3161BEAFF1C528BED9A91C680A66718D7417199FCF743AD1FD","mgndgikekgjfcpckkfioiadnlibdjbkf":"5CE934EC4137250A7308D1CEA4C16AA235D61FD830AB6E793C75DA555E004914","mhgffcfekbglhpcdjkhhjekhdnddkflg":"1CB196B9942ED97C1799CFD426563274D22733344F645531E40D9F1A43C7D8CB","mhjfbmdgcfjbbpaeojofohoefgiehjai":"F3248FA4C4E32D663C72FBB5630AECCDDEE1A1D7FF7CEA7AE4EB093F3B7EDEA1","mijlebbfndhelmdpmllgcfadlkankhok":"45206F34B9204BA37C6ACB920C721B4104092F15EA3B73D1CEA564E05740B48F","mlcdlmnipofbmhgjajfobpeeikdejibj":"EB2FD5F32FAD27D6277496F4E61B60388A07087318900441F81F8CB40CFF1BCD","mlilmganaobieaclflbciblffhaagnip":"F7A554ECDDB638E1204EE29D2B3148C133F92267953EBD2E2CABE7099DE7A86E","mnnelgnkomjdakpkjpkfehdipjifjmbk":"070527DD46B3F66DB6E290F7D0705E3DA02F710AF5B0B7550B0DA7564C6433C2","nbgkhncobohkmgdjdiijlbgjidpnnkcd":"C09FB106A041D53EC6885243FC3FB00E1DA65D026723CBE62EFD188691169968","nbpagnldghgfoolbancepceaanlmhfmd":"9B8317D67B1D5FE38A8C15BC41828171EAB0B965D51E20600EB183F2B8C74990","neajdppkdcdipfabeoofebfddakdcjhd":"923F2C7F03017842FBE9176821EEBEEB7B9024608B9E6BB848EE47C200C051AF","nffmfbhcjemfledhndnpllechagamlfp":"A653A21FEC2D728E3F2773F0222FEB88803D8EC2B4A913AA02CDEBB774E1D36D","nkeimhogjdpnpccoofpliimaahmaaome":"3EFB8BAB17B9C0C9FAAF414F8FF45E90E9A60ADD9E07C79BD50FCB24C69BCA69","nlijkadphehijfiiigjeklnlnknmmped":"F48F60625086F5A91A22632B3E4CB00CD5E3D13B6099EAC8D151995FE1606781","nmmhkkegccagdldgiimedpiccmgmieda":"CA620C4242A1FEAE53567748C768F1BB947390C378B230B9D89C8DEF872CB481","oadiaahhieelhhffeofkdchgfpjehjok":"ECAD0290849978FF95D4CDD091532345A356D059FF8AFEF1F1DE67CC37CA1A08","oehpjpccmlcalbenfhnacjeocbjdonic":"ED23D76EFF270663D3C791E9D6457EFE2D75110C79F11FE38FC36C36D6FC6625","oeopbcgkkoapgobdbedcemjljbihmemj":"8C1988570B7A25A7D68DCBD0AF7046E9B17A6276841409B093C44839E4423D1D","ofddcjfikfghkmoapnjnmmflbcjohbic":"D994EDDBD5BEDEA0A227F22274E8FBAB9C9A229FFC1231A3CA65E7A2A2F688D3","offpaifnchmpbnjhjbhpdffahlofdkfb":"80FA5B11C1575D28E621D23DBC6BD4B44BD17FEBA410D4C380DAA4D2831F27F1","okgjbfikepgflmlelgfgecmgjnmnmnnb":"81A9A8A7B645D37A21A8BDF5A93F86DCC20726FEA397F5956B4B0DD3A61AC783","paaolpnpehkfkgicikngaihaknonfala":"0C6C10B24173CE407000321980AA3FDA83B81F1207BA52EC8F7B3DFE8127D9A6","pafkbggdmjlpgkdkcbjmhmfcdpncadgh":"A58AA7EFDD9FB2422D07C3626B8AD7F2BE8B07FCF32357075872958DE7D3B7E7","pcfeebemepipakkhapnhljbcdkagkloh":"44562B049742267A75BF4C975E6DFCD67580949205E86944A51DDB1F5519F310","pdabfienifkbhoihedcgeogidfmibmhp":"CC88B8025A68CC84C285F2736D0966D8A0200908EBE52624788B3B5B7EBB19E4","pddaeeclcbikcegjhhgocgkakehngcem":"7600F2510BE2068459AF7E3884DEA04422D2F2AB36FB2BF7AB34DB50AB4450CD","pfiekkcjcnhbjofcjcfblhcccjkpkheh":"F3C41F9BDC7A33286F7C53F0C04FD6B421C6D4A64D91275864BAC25945D3C6FF","pfpeapihoiogbcmdmnibeplnikfnhoge":"DC8EA7F4D9C1F048E99395BE088324E3F4F265187F8F5A714C3BBE3B1EB79F43","pgphcomnlaojlmmcjmiddhdapjpbgeoc":"2DDA6A284B92F478D561CFF6596D23123F39775247E68174F41B94C020F04114","pioclpoplcdbaefihamjohnefbikjilc":"8255408B3551FB676B98190EE321ECD5174144FD7E954BC301F75815434824D5","pjkljhegncpnkpknbcohdijeoejaedia":"3928AB9F05DA8E2BE4D0255AF8EDCE7F0C6AD1F030286D997FBA703A1A7F5FF2","pmoodaljflkhbojjaiibgnlindbhebme":"3EA863C4B959AF64B6A78EF4B7631A67F098F3806D8A7E05502EFDED7F30D18C","pnlccmojcmeohlpggmfnbbiapkmbliob":"7D45DBC4C89E5CE3369FFD58CA69A5C7E4C92C5D81B940F6011937FE48DA6597"}},"google":{"services":{"last_username":"291B97783F73100D2C4BEEC47C6ACCA2F49F97CFCC3A29238495834620011C9E","username":"C6207D00DB01C56483F404F65DD25CDBDF2B32A803FFC10F307C2556EAAFC9D6"}},"homepage":"3F02D8E1DA7E9A2E190D55EE86D3CA7697BFC081C6E6F72F3EAA1A2D9B50CF90","homepage_is_newtabpage":"90667F9770CE88E5609345817DBA3AABFA30799E1E01C90D56B8477AD8468F3E","pinned_tabs":"39AAA04F794A6631EEF2F4877E3C3157C32998E00824456061A5882B6EE8E253","prefs":{"preference_reset_time":"0A15D91E101D60EED02C53F2AA6E72459E7A3A011689FE30840C11A7A516732D"},"profile":{"reset_prompt_memento":"9CA40FD520785AC9AEC7464D1C4C5F887BA580AB6278555B1D4D1CEF6C6E8CE2"},"safebrowsing":{"incidents_sent":"B48B62A32B78BDCB6ACCAC2C335C3DC69AA68E8C976016DE130C326400D972AC"},"search_provider_overrides":"6EA90985E235278005EBB9AC00B14A9F9841C9594F236383C64E0634DA58D8DA","session":{"restore_on_startup":"DBA13C2DC151E4461A7A7D201E1DF6F19EFB955B5309E01B2640938E24DF65D6","startup_urls":"681F4FB7F7F75741AB8DEA8301268A4224BBA3BF6842A47ACD5D0A91705E89F5"},"software_reporter":{"prompt_reason":"388C97456B235A69FD80ADCBEFCE9156C1FC166DB414EA0E45A92CC5ADCB5E49","prompt_seed":"73A02E5A3570ADDDE681BA250E3BFA8B01C3035CBBAD43332F0F2DEE8324997D","prompt_version":"44805135F63920F24A378F0D53549832369A5B3F87DD2EA969C83C6DC34C2638"},"sync":{"remaining_rollback_tries":"7D76515B66083A715005BD4B4680540B1D628C4FC04D25EDCDE70E22CC118708"}},"super_mac":"E39B771ED8B6EAD696C8315BA344FD48203BE0B085E9B535F0C41E5A804D6B01"},"safebrowsing":{"incidents_sent":{"2":{"chrome.dll":"3774509266","chrome_child.dll":"3743713718"},"6":{"script_request_incident":"42"}}},"session":{"restore_on_startup":5,"startup_urls":["<a href="http://www.google.com/" target="_blank">http://www.google.com/</a>","","",""]},"sync":{"remaining_rollback_tries":0}}</p><p></p><p></p><p>==== Chromium Fix ======================</p><p></p><p>C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gbkeegbaiigmenfmjfclcdgdpimamgkj_0.localstorage deleted successfully</p><p>C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gbkeegbaiigmenfmjfclcdgdpimamgkj_0.localstorage-journal deleted successfully</p><p></p><p>==== Set IE to Default ======================</p><p></p><p>Old Values:</p><p>[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]</p><p>"Start Page"="<a href="http://google.com/" target="_blank">http://google.com/</a>"</p><p></p><p>New Values:</p><p>[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]</p><p>"Start Page"="<a href="http://google.com/" target="_blank">http://google.com/</a>"</p><p></p><p>==== All HKCU SearchScopes ======================</p><p></p><p>HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes</p><p>"DefaultScope"="{E0E10A6B-80FB-4457-9D90-6195BBBAE31B}"</p><p>{012E1000-F331-11DB-8314-0800200C9A66} Google Url="<a href="http://www.google.com/search?q={searchTerms}" target="_blank">http://www.google.com/search?q={searchTerms}</a>"</p><p>{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="<a href="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC" target="_blank">http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC</a>"</p><p>{98A2A4FE-EC22-408B-9FFD-2A9125300E55} Google Url="<a href="https://www.google.com/search?q={searchTerms}" target="_blank">https://www.google.com/search?q={searchTerms}</a>"</p><p>{A15FE79E-FB48-4F01-A053-BCBDF7F82664} Google Url="<a href="https://www.google.com/search?q={searchTerms}" target="_blank">https://www.google.com/search?q={searchTerms}</a>"</p><p>{E0E10A6B-80FB-4457-9D90-6195BBBAE31B} Google Url="<a href="https://www.google.com/search?q={searchTerms}" target="_blank">https://www.google.com/search?q={searchTerms}</a>"</p><p></p><p>==== Deleting Registry Keys ======================</p><p></p><p>HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google deleted successfully</p><p></p><p>==== Empty IE Cache ======================</p><p></p><p>C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully</p><p>C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully</p><p>C:\Users\Doug-Desktop\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully</p><p>C:\Users\Doug-Desktop\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully</p><p>C:\Users\Doug-Desktop\Desktop\Judy's Ghost-XP Tower\Judith\Local Settings\Temp\acrord32_sbx\Temporary Internet Files\Content.IE5 emptied successfully</p><p>C:\Users\Doug-Desktop\Desktop\Judy's Ghost-XP Tower\Judith\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully</p><p>C:\Users\Mike\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully</p><p>C:\Users\Mike\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully</p><p>C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully</p><p>C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully</p><p>C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully</p><p>C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully</p><p>C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully</p><p></p><p>==== Empty FireFox Cache ======================</p><p></p><p>No FireFox Profiles found</p><p></p><p>==== Empty Chrome Cache ======================</p><p></p><p>C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully</p><p></p><p>==== Empty All Flash Cache ======================</p><p></p><p>Flash Cache is not empty, a reboot is needed</p><p></p><p>==== Empty All Java Cache ======================</p><p></p><p>Java Cache cleared successfully</p><p></p><p>==== C:\zoek_backup content ======================</p><p></p><p>C:\zoek_backup (files=919 folders=257 34923639 bytes)</p><p></p><p>==== Empty Temp Folders ======================</p><p></p><p>C:\Users\Default\AppData\Local\Temp emptied successfully</p><p>C:\Users\Default User\AppData\Local\Temp emptied successfully</p><p>C:\Users\Doug-Desktop\AppData\Local\Temp emptied successfully</p><p>C:\Users\Mike\AppData\Local\Temp will be emptied at reboot</p><p>C:\Users\UpdatusUser\AppData\Local\Temp emptied successfully</p><p>C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot</p><p>C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully</p><p>C:\Windows\Temp will be emptied at reboot</p><p></p><p>==== After Reboot ======================</p><p></p><p>==== Empty Temp Folders ======================</p><p></p><p>C:\Windows\Temp successfully emptied</p><p>C:\Users\Mike\AppData\Local\Temp successfully emptied</p><p></p><p>==== Empty Recycle Bin ======================</p><p></p><p>C:\$RECYCLE.BIN successfully emptied</p><p></p><p>==== Deleting Files / Folders ======================</p><p></p><p>"C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbkeegbaiigmenfmjfclcdgdpimamgkj" deleted</p><p>"C:\Users\Mike\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\6VXGQZB7\chaturbate.com" not found</p><p>"C:\Users\Mike\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\6VXGQZB7\fbstatic-a.akamaihd.net" not found</p><p>"C:\Users\Mike\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\6VXGQZB7\launch.newsinc.com" not found</p><p>"C:\Users\Mike\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\6VXGQZB7\<a href="http://www.filmon.com" target="_blank">www.filmon.com</a>" not found</p><p>"C:\Users\Mike\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\6VXGQZB7\<a href="http://www.freelifetime#####finder.com" target="_blank">www.freelifetime#####finder.com</a>" not found</p><p>"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted</p><p></p><p>==== EOF on Tue 06/30/2015 at 8:28:41.10 ======================</p><p></p><p>I'll learn the vocabulary and procedures quickly. I know all "you guys" donate your time.</p></blockquote><p></p>
[QUOTE="mike0921, post: 404672, member: 37453"] [B]1[/B]. I deleted MSE and installed AVG after I ran the programs instructed in your first post (between my post and your reply) [B]2[/B]. I believe the aswMBR log I posted is a faulty log. I have one time stamped 45 minutes later which is the log after aswMBR finished. My comment: was made after I [B]thought[/B] it finished. When I returned to my desktop, AswMBR had the rest of the scan finished. I just didn't know it took that long. [B]3[/B]. I have attached the correct log to this post for you. [B]4. [/B]The ZOEK log is attached... My apologies for my errors..... You said to post the content. I'm unsure if you mean in this or attach it. Have done both: ======================================================================================================================== Zoek.exe v5.0.0.0 Updated 04-May-2015 Tool run by Mike on Tue 06/30/2015 at 7:53:18.13. Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Mike\Desktop\zoek.exe [Scan all users] [Script inserted] ==== System Restore Info ====================== 6/30/2015 8:02:41 AM Zoek.exe System Restore Point Created Successfully. ==== Empty Folders Check ====================== C:\PROGRA~2\MSXML 4.0 deleted successfully C:\Users\Doug-Desktop\AppData\Roaming\Windows Live Writer deleted successfully C:\Users\Mike\AppData\Roaming\Windows Live Writer deleted successfully C:\Users\Doug-Desktop\AppData\Local\{4503AB61-C3F7-475C-BC09-BDDCBBB39160} deleted successfully C:\Users\Doug-Desktop\AppData\Local\{89ACDC74-AE72-4827-A282-F36AA07713FB} deleted successfully C:\Users\Doug-Desktop\AppData\Local\{A68A9D39-6E29-4FA0-AF0B-FA95EB462D40} deleted successfully C:\Users\Mike\AppData\Local\EmieBrowserModeList deleted successfully C:\Users\Mike\AppData\Local\EmieSiteList deleted successfully C:\Users\Mike\AppData\Local\EmieUserList deleted successfully C:\Users\Mike\AppData\Local\VirtualStore deleted successfully ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== ==== Batch Command(s) Run By Tool====================== ==== Deleting Files \ Folders ====================== C:\PROGRA~2\QR Code Maker and Decoder deleted C:\PROGRA~3\28341ff220e0446c9fff27c4493d622e deleted C:\Users\Doug-Desktop\AppData\Local\32523 deleted C:\Users\Doug-Desktop\AppData\Local\6384 deleted C:\PROGRA~2\GUT2D8A.tmp deleted C:\PROGRA~2\GUM2D89.tmp deleted C:\A14F.tmp deleted C:\install.exe deleted C:\stat_log deleted C:\Users\Mike\AppData\Roaming\ProductData deleted C:\PROGRA~3\ProductData deleted C:\Users\Mike\AppData\Local\CrashRpt deleted C:\windows\SysNative\Tasks\avastBCLRestart_chrome.exe deleted C:\Users\Mike\AppData\LocalLow\Company deleted C:\Windows\SysNative\config\systemprofile\Searches deleted "C:\Users\Mike\AppData\Roaming\P15ZESxJxZc4" deleted "C:\PROGRA~3\Package Cache" deleted ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions] "[email]wrc@avast.com[/email]"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [06/29/2015 06:19 PM] ==== Chromium Look ====================== Google Chrome Version: 43.0.2357.130 HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[06/29/2015 06:19 PM] lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx[05/01/2015 11:17 AM] pnlccmojcmeohlpggmfnbbiapkmbliob - C:\Program Files (x86)\Siber Systems\AI RoboForm\Chrome\rf-chrome.crx[06/21/2015 03:39 PM] HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions lmjegmlicamnimmfhcmpkclmigmmcbeh - No path found[] Chrome Hotword Shared Module - Doug-Desktop\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg A Quotation - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafpohheobbibbehfjogminpinjhlpmg Dictanote - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\aomjekmpappghadlogpigifkghlmebjk Writebox - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbehjmjchoiaglkeboicbgkpfafcmhij Minimalist for Everything - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmihblnpomgpjkfddepdpdafhhepdbek Cash Organizer - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\bppdehaogjdmkkiaiokmjdjmjnjicddk WEEK PLAN - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\caggnmlckgjpgpgpgjeobdcfgbkefioo Chrome RDP - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\cbkkbcmdlboombapidmoeolnmdacpkch clipular - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjbjepchlgclmpinlbbeinajphohgfod Thesaurus.com - Synonyms and Antonyms - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\clljlcapeomdokpgadmegpabakieebci Google News - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\dllkocilcinkggkchnjgegijklcililc ShopAtHome.com - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlmebkoiahbppacaicbgncnjhbpdfkcc Invoice2go - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmjkikjpbpaehaclfdkmjdofdgodaakp Reditr Web App - The Best Reddit Client - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejmiceoebcclihjdpnmmkdcmcboekibc Blur - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\epanfjkfahimkgomnigadpkobaefekcd Android Freeware - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\faijocccbppcdmakdenmbbiflcagbapp Pandora - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbangkleohkafngihneedemihgfeikcl NetBank - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnpedghacgigoamalnfnikaagobdbjp Dictionary by Dictionary.com - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\gikhgcaliglmioibbockkmjknfnepbdh Voice In - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjkogfbjkfchelfjonefnnenhfgglpnn Avast Online Security - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki Rapportive - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\hihakjfhbmlmjdnnhegiciffjplmdhin feedly - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\hipbfijinpcgfogaopmgehiegacbhmob Vimeo Couch Mode - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjkdhkejcnlmkfdodbkdkelefnkobfif Quotes Book - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibfjeadhjbcepmknoanimdbemlobmlpe Knok | Family Travel - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\iehdddmijbgofffjjmhkodckmnombhmf The Weather Channel for Chrome - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\iflpcokdamgefbghpdipcibmhlkdopop PDF to Word Converter App - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\jclipofobaadknkadkpgggmjkebddjam Pocket Website - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\jijgclgmgjipgefcnnnibgllfonlfdap Kobo Instant Reader - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\jknhjclcchfapglhbceedkoldnkmmhcc Clipular Research save & share screenshot - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmjbgcjbgmcfgbgikmbdioggjlhjegpp Google Voice (by Google) - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcnhkahnjcbndmmehfkdnkjomaanaooo Quick Earth - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\khodocggeplgfhppgagfdpbjkniadmdh Wave Accounting - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\knpkfcpnjfbniadmfchjpcigfhookhaa Chrome Hotword Shared Module - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg Webcam Toy - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfbgimoladefibpklnfmkpknadbklade Skype Click to Call - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl Google Drive App Launcher - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh Mint - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhgffcfekbglhpcdjkhhjekhdnddkflg Offline Email Notifier for Gmail™ Helper - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlcdlmnipofbmhgjajfobpeeikdejibj PHP Docs-to-go - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlilmganaobieaclflbciblffhaagnip Finance41 Personal Finance Manager - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbgkhncobohkmgdjdiijlbgjidpnnkcd SendHub - Business Phone System - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlijkadphehijfiiigjeklnlnknmmped Checker Plus for Gmail™ - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\oeopbcgkkoapgobdbedcemjljbihmemj Scribble - stickies on steroids - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\offpaifnchmpbnjhjbhpdffahlofdkfb Outlook.com - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfpeapihoiogbcmdmnibeplnikfnhoge Send from Gmail (by Google) - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgphcomnlaojlmmcjmiddhdapjpbgeoc OMG - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmoodaljflkhbojjaiibgnlindbhebme RoboForm - Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnlccmojcmeohlpggmfnbbiapkmbliob ==== Chromium Startpages ====================== C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Default\Preferences iadmfchjpcigfhookhaa":"09AD7AA17EED38F22945C168A4AFD12F24B450702B9F525BC7E0C6D883363D3B","lbfehkoinhhcknnbdgnnmjhiladcgbol":"784F27A7B85F54A13D5CC88F7BF2C2D843B3E574A88E8F1DDC09E1D181E8BF2D","lccekmodgklaepjeofjdjpbminllajkg":"87D51C758DE4FCF8033E4839FB9E1FC885A67E4FF6826B5AB1BBB57627652BF5","lfbgimoladefibpklnfmkpknadbklade":"968F48B94022650F1C8C2D5F3DED74C3C54335374E04EF1A4D4FB883515D7582","lifbcibllhkdhoafpjfnlhfpfgnpldfl":"48EC59CBA80E3EC2C59346304B7725B26E8F8D7E7A1992A99A74A9C8CA1B3407","lmjegmlicamnimmfhcmpkclmigmmcbeh":"391403D66015D64F12F1979C777D795D61A6648F0582A1D4AC2DEB51D52E5351","lneaknkopdijkpnocmklfnjbeapigfbh":"B78E779287C610EB53E787CA7D6485B843A57C8E7A8111AC5C9C071E301D1F1D","mfehgcgbbipciphmccgaenjidiccnmng":"9A612A108E224A45E4760655ECEF33ABE2B27E556783FFBC72E8E1391EAB1BB9","mfffpogegjflfpflabcdkioaeobkgjik":"D850F8C8EE8A5B3161BEAFF1C528BED9A91C680A66718D7417199FCF743AD1FD","mgndgikekgjfcpckkfioiadnlibdjbkf":"5CE934EC4137250A7308D1CEA4C16AA235D61FD830AB6E793C75DA555E004914","mhgffcfekbglhpcdjkhhjekhdnddkflg":"1CB196B9942ED97C1799CFD426563274D22733344F645531E40D9F1A43C7D8CB","mhjfbmdgcfjbbpaeojofohoefgiehjai":"F3248FA4C4E32D663C72FBB5630AECCDDEE1A1D7FF7CEA7AE4EB093F3B7EDEA1","mijlebbfndhelmdpmllgcfadlkankhok":"45206F34B9204BA37C6ACB920C721B4104092F15EA3B73D1CEA564E05740B48F","mlcdlmnipofbmhgjajfobpeeikdejibj":"EB2FD5F32FAD27D6277496F4E61B60388A07087318900441F81F8CB40CFF1BCD","mlilmganaobieaclflbciblffhaagnip":"F7A554ECDDB638E1204EE29D2B3148C133F92267953EBD2E2CABE7099DE7A86E","mnnelgnkomjdakpkjpkfehdipjifjmbk":"070527DD46B3F66DB6E290F7D0705E3DA02F710AF5B0B7550B0DA7564C6433C2","nbgkhncobohkmgdjdiijlbgjidpnnkcd":"C09FB106A041D53EC6885243FC3FB00E1DA65D026723CBE62EFD188691169968","nbpagnldghgfoolbancepceaanlmhfmd":"9B8317D67B1D5FE38A8C15BC41828171EAB0B965D51E20600EB183F2B8C74990","neajdppkdcdipfabeoofebfddakdcjhd":"923F2C7F03017842FBE9176821EEBEEB7B9024608B9E6BB848EE47C200C051AF","nffmfbhcjemfledhndnpllechagamlfp":"A653A21FEC2D728E3F2773F0222FEB88803D8EC2B4A913AA02CDEBB774E1D36D","nkeimhogjdpnpccoofpliimaahmaaome":"3EFB8BAB17B9C0C9FAAF414F8FF45E90E9A60ADD9E07C79BD50FCB24C69BCA69","nlijkadphehijfiiigjeklnlnknmmped":"F48F60625086F5A91A22632B3E4CB00CD5E3D13B6099EAC8D151995FE1606781","nmmhkkegccagdldgiimedpiccmgmieda":"CA620C4242A1FEAE53567748C768F1BB947390C378B230B9D89C8DEF872CB481","oadiaahhieelhhffeofkdchgfpjehjok":"ECAD0290849978FF95D4CDD091532345A356D059FF8AFEF1F1DE67CC37CA1A08","oehpjpccmlcalbenfhnacjeocbjdonic":"ED23D76EFF270663D3C791E9D6457EFE2D75110C79F11FE38FC36C36D6FC6625","oeopbcgkkoapgobdbedcemjljbihmemj":"8C1988570B7A25A7D68DCBD0AF7046E9B17A6276841409B093C44839E4423D1D","ofddcjfikfghkmoapnjnmmflbcjohbic":"D994EDDBD5BEDEA0A227F22274E8FBAB9C9A229FFC1231A3CA65E7A2A2F688D3","offpaifnchmpbnjhjbhpdffahlofdkfb":"80FA5B11C1575D28E621D23DBC6BD4B44BD17FEBA410D4C380DAA4D2831F27F1","okgjbfikepgflmlelgfgecmgjnmnmnnb":"81A9A8A7B645D37A21A8BDF5A93F86DCC20726FEA397F5956B4B0DD3A61AC783","paaolpnpehkfkgicikngaihaknonfala":"0C6C10B24173CE407000321980AA3FDA83B81F1207BA52EC8F7B3DFE8127D9A6","pafkbggdmjlpgkdkcbjmhmfcdpncadgh":"A58AA7EFDD9FB2422D07C3626B8AD7F2BE8B07FCF32357075872958DE7D3B7E7","pcfeebemepipakkhapnhljbcdkagkloh":"44562B049742267A75BF4C975E6DFCD67580949205E86944A51DDB1F5519F310","pdabfienifkbhoihedcgeogidfmibmhp":"CC88B8025A68CC84C285F2736D0966D8A0200908EBE52624788B3B5B7EBB19E4","pddaeeclcbikcegjhhgocgkakehngcem":"7600F2510BE2068459AF7E3884DEA04422D2F2AB36FB2BF7AB34DB50AB4450CD","pfiekkcjcnhbjofcjcfblhcccjkpkheh":"F3C41F9BDC7A33286F7C53F0C04FD6B421C6D4A64D91275864BAC25945D3C6FF","pfpeapihoiogbcmdmnibeplnikfnhoge":"DC8EA7F4D9C1F048E99395BE088324E3F4F265187F8F5A714C3BBE3B1EB79F43","pgphcomnlaojlmmcjmiddhdapjpbgeoc":"2DDA6A284B92F478D561CFF6596D23123F39775247E68174F41B94C020F04114","pioclpoplcdbaefihamjohnefbikjilc":"8255408B3551FB676B98190EE321ECD5174144FD7E954BC301F75815434824D5","pjkljhegncpnkpknbcohdijeoejaedia":"3928AB9F05DA8E2BE4D0255AF8EDCE7F0C6AD1F030286D997FBA703A1A7F5FF2","pmoodaljflkhbojjaiibgnlindbhebme":"3EA863C4B959AF64B6A78EF4B7631A67F098F3806D8A7E05502EFDED7F30D18C","pnlccmojcmeohlpggmfnbbiapkmbliob":"7D45DBC4C89E5CE3369FFD58CA69A5C7E4C92C5D81B940F6011937FE48DA6597"}},"google":{"services":{"last_username":"291B97783F73100D2C4BEEC47C6ACCA2F49F97CFCC3A29238495834620011C9E","username":"C6207D00DB01C56483F404F65DD25CDBDF2B32A803FFC10F307C2556EAAFC9D6"}},"homepage":"3F02D8E1DA7E9A2E190D55EE86D3CA7697BFC081C6E6F72F3EAA1A2D9B50CF90","homepage_is_newtabpage":"90667F9770CE88E5609345817DBA3AABFA30799E1E01C90D56B8477AD8468F3E","pinned_tabs":"39AAA04F794A6631EEF2F4877E3C3157C32998E00824456061A5882B6EE8E253","prefs":{"preference_reset_time":"0A15D91E101D60EED02C53F2AA6E72459E7A3A011689FE30840C11A7A516732D"},"profile":{"reset_prompt_memento":"9CA40FD520785AC9AEC7464D1C4C5F887BA580AB6278555B1D4D1CEF6C6E8CE2"},"safebrowsing":{"incidents_sent":"B48B62A32B78BDCB6ACCAC2C335C3DC69AA68E8C976016DE130C326400D972AC"},"search_provider_overrides":"6EA90985E235278005EBB9AC00B14A9F9841C9594F236383C64E0634DA58D8DA","session":{"restore_on_startup":"DBA13C2DC151E4461A7A7D201E1DF6F19EFB955B5309E01B2640938E24DF65D6","startup_urls":"681F4FB7F7F75741AB8DEA8301268A4224BBA3BF6842A47ACD5D0A91705E89F5"},"software_reporter":{"prompt_reason":"388C97456B235A69FD80ADCBEFCE9156C1FC166DB414EA0E45A92CC5ADCB5E49","prompt_seed":"73A02E5A3570ADDDE681BA250E3BFA8B01C3035CBBAD43332F0F2DEE8324997D","prompt_version":"44805135F63920F24A378F0D53549832369A5B3F87DD2EA969C83C6DC34C2638"},"sync":{"remaining_rollback_tries":"7D76515B66083A715005BD4B4680540B1D628C4FC04D25EDCDE70E22CC118708"}},"super_mac":"E39B771ED8B6EAD696C8315BA344FD48203BE0B085E9B535F0C41E5A804D6B01"},"safebrowsing":{"incidents_sent":{"2":{"chrome.dll":"3774509266","chrome_child.dll":"3743713718"},"6":{"script_request_incident":"42"}}},"session":{"restore_on_startup":5,"startup_urls":["[URL]http://www.google.com/[/URL]","","",""]},"sync":{"remaining_rollback_tries":0}} ==== Chromium Fix ====================== C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gbkeegbaiigmenfmjfclcdgdpimamgkj_0.localstorage deleted successfully C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gbkeegbaiigmenfmjfclcdgdpimamgkj_0.localstorage-journal deleted successfully ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="[URL]http://google.com/[/URL]" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="[URL]http://google.com/[/URL]" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{E0E10A6B-80FB-4457-9D90-6195BBBAE31B}" {012E1000-F331-11DB-8314-0800200C9A66} Google Url="[URL]http://www.google.com/search?q={searchTerms}[/URL]" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="[URL]http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC[/URL]" {98A2A4FE-EC22-408B-9FFD-2A9125300E55} Google Url="[URL]https://www.google.com/search?q={searchTerms}[/URL]" {A15FE79E-FB48-4F01-A053-BCBDF7F82664} Google Url="[URL]https://www.google.com/search?q={searchTerms}[/URL]" {E0E10A6B-80FB-4457-9D90-6195BBBAE31B} Google Url="[URL]https://www.google.com/search?q={searchTerms}[/URL]" ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google deleted successfully ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Doug-Desktop\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Doug-Desktop\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\Doug-Desktop\Desktop\Judy's Ghost-XP Tower\Judith\Local Settings\Temp\acrord32_sbx\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Doug-Desktop\Desktop\Judy's Ghost-XP Tower\Judith\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Mike\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Mike\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully ==== Empty FireFox Cache ====================== No FireFox Profiles found ==== Empty Chrome Cache ====================== C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache is not empty, a reboot is needed ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=919 folders=257 34923639 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Users\Doug-Desktop\AppData\Local\Temp emptied successfully C:\Users\Mike\AppData\Local\Temp will be emptied at reboot C:\Users\UpdatusUser\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Mike\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\Mike\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbkeegbaiigmenfmjfclcdgdpimamgkj" deleted "C:\Users\Mike\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\6VXGQZB7\chaturbate.com" not found "C:\Users\Mike\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\6VXGQZB7\fbstatic-a.akamaihd.net" not found "C:\Users\Mike\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\6VXGQZB7\launch.newsinc.com" not found "C:\Users\Mike\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\6VXGQZB7\[URL="http://www.filmon.com"]www.filmon.com[/URL]" not found "C:\Users\Mike\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\6VXGQZB7\[URL="http://www.freelifetime#####finder.com"]www.freelifetime#####finder.com[/URL]" not found "C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted ==== EOF on Tue 06/30/2015 at 8:28:41.10 ====================== I'll learn the vocabulary and procedures quickly. I know all "you guys" donate your time. [/QUOTE]
Insert quotes…
Verification
Post reply
Top