Reply to thread

Message

<blockquote data-quote="malwarekiller" data-source="post: 47888" data-attributes="member: 1359">Warning This fix is only relevant for this system and no other, using on another computer may cause problems Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot If you have Malwarebytes 1.5 or better installed please disable it for the duration of this run Run OTL<ol>
<li data-xf-list-type="ol">Under the Custom Scans/Fixes box at the bottom, paste in the following 
[code] 
:OTL 
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2426}: &quot;URL&quot; = http://dts.search-results.com/sr?src=ieb&amp;appid=141112&amp;systemid=426&amp;sr=0&amp;q={searchTerms} 
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2426}: &quot;URL&quot; = http://dts.search-results.com/sr?src=ieb&amp;appid=141112&amp;systemid=426&amp;sr=0&amp;q={searchTerms} 
IE - HKU\S-1-5-21-3186800326-3317911409-3190794081-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes] 
IE - HKU\S-1-5-21-3186800326-3317911409-3190794081-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://dogpile.com/ 
FF - prefs.js..browser.startup.homepage: &quot;http://www.dogpile.com/&quot; 
FF - prefs.js..keyword.URL: &quot;http://dts.search-results.com/sr?src=ffb&amp;appid=141112&amp;systemid=426&amp;sr=0&amp;q=&quot; 
O4 - HKLM..\Run: []&nbsp; File not found 
O4 - HKLM..\Run: [NortonOnlineBackupReminder] C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NOBuActivation.exe (Symantec Corporation) 
O15 - HKU\S-1-5-21-3186800326-3317911409-3190794081-1003\..Trusted Domains: intuit.com ([ttlc] https in Trusted sites) 
 
 
ipconfig /flushdns /c 
 
:Commands 
[purity] 
[resethosts] 
[emptytemp] 
[EMPTYFLASH] 
[CLEARALLRESTOREPOINTS] 
[Reboot] 
[/code] 
</li>
<li data-xf-list-type="ol">Then click the Run Fix button at the top</li>
<li data-xf-list-type="ol">Let the program run unhindered, reboot the PC when it is done</li>
<li data-xf-list-type="ol">Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.</li>
</ol></blockquote>

[QUOTE="malwarekiller, post: 47888, member: 1359"] [color=#FF0000]Warning[/color] [i][b]This fix is only relevant for this system and no other, using on another computer may cause problems[/b] [/i] [color=#FF0000]Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot [/color] [color=#FF0000]If you have Malwarebytes 1.5 or better installed please disable it for the duration of this run [/color] Run OTL [list=1][*]Under the [color=#0000FF][b]Custom Scans/Fixes[/b][/color] box at the bottom, paste in the following [code] :OTL IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2426}: "URL" = http://dts.search-results.com/sr?src=ieb&appid=141112&systemid=426&sr=0&q={searchTerms} IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2426}: "URL" = http://dts.search-results.com/sr?src=ieb&appid=141112&systemid=426&sr=0&q={searchTerms} IE - HKU\S-1-5-21-3186800326-3317911409-3190794081-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes] IE - HKU\S-1-5-21-3186800326-3317911409-3190794081-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://dogpile.com/ FF - prefs.js..browser.startup.homepage: "http://www.dogpile.com/" FF - prefs.js..keyword.URL: "http://dts.search-results.com/sr?src=ffb&appid=141112&systemid=426&sr=0&q=" O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [NortonOnlineBackupReminder] C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NOBuActivation.exe (Symantec Corporation) O15 - HKU\S-1-5-21-3186800326-3317911409-3190794081-1003\..Trusted Domains: intuit.com ([ttlc] https in Trusted sites) ipconfig /flushdns /c :Commands [purity] [resethosts] [emptytemp] [EMPTYFLASH] [CLEARALLRESTOREPOINTS] [Reboot] [/code] [*]Then click the [color=#FF0000][b]Run Fix[/b][/color] button at the top [*]Let the program run unhindered, reboot the PC when it is done [*]Open OTL again and click the [b]Quick Scan[/b] button. Post the log it produces in your next reply.[/list] [/QUOTE]

Verification