Solved Major issues. Pop ups, windows opening randomly, etc.

I was about to put the results onto the flash drive to move them to my other computer to post them and I'm noticing 2 files on the flash drive that I didn't put there and they won't allow me to delete them. They say "AUTORUN.INF" and "system volume information." I assume these are viruses since they won't allow me to remove them. What should I do as I'm afraid these would transfer to my other computer if I put the drive in.
 
Results of screen317's Security Check version 0.99.93
x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
Windows Defender
avast! Antivirus
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Ad-Aware
Free PC Cleaner
Java 7 Update 67
Java version 32-bit out of Date!
Adobe Flash Player 15.0.0.246 Flash Player out of Date!
Adobe Reader XI
Mozilla Firefox (34.0.5)
Google Chrome (39.0.2171.95)
````````Process Check: objlist.exe by Laurent````````
Ad-Aware AAWService.exe is disabled!
Ad-Aware AAWTray.exe is disabled!
Sophos Sophos Virus Removal Tool SVRTservice.exe
AVAST Software Avast AvastSvc.exe
AVAST Software Avast AvastUI.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: %
````````````````````End of Log``````````````````````
 
Farbar Service Scanner Version: 21-07-2014
Ran by Kelly (administrator) on 30-12-2014 at 23:43:24
Running from "C:\Users\Kelly\Desktop"
Microsoft Windows 8.1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============


Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
The start type of WinDefend service is set to Demand. The default start type is Auto.
The ImagePath of WinDefend: ""%ProgramFiles%\Windows Defender\MsMpEng.exe"".


Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => File is digitally signed
C:\Windows\System32\drivers\nsiproxy.sys => File is digitally signed
C:\Windows\System32\dhcpcore.dll => File is digitally signed
C:\Windows\System32\drivers\afd.sys => File is digitally signed
C:\Windows\System32\drivers\tdx.sys => File is digitally signed
C:\Windows\System32\Drivers\tcpip.sys => File is digitally signed
C:\Windows\System32\dnsrslvr.dll => File is digitally signed
C:\Windows\System32\mpssvc.dll => File is digitally signed
C:\Windows\System32\bfe.dll => File is digitally signed
C:\Windows\System32\drivers\mpsdrv.sys => File is digitally signed
C:\Windows\System32\wscsvc.dll => File is digitally signed
C:\Windows\System32\wbem\WMIsvc.dll => File is digitally signed
C:\Windows\System32\wuaueng.dll => File is digitally signed
C:\Windows\System32\qmgr.dll => File is digitally signed
C:\Windows\System32\es.dll => File is digitally signed
C:\Windows\System32\cryptsvc.dll => File is digitally signed
C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed
C:\Program Files\Windows Defender\MsMpEng.exe => File is digitally signed
C:\Windows\System32\ipnathlp.dll => File is digitally signed
C:\Windows\System32\iphlpsvc.dll => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed


**** End of log ****
 
redtarget.gif
Uninstall Free PC Cleaner.
Registry cleaners/optimizers are not recommended for several reasons:

  • Registry cleaners are extremely powerful applications that can damage the registry by using aggressive cleaning routines and cause your computer to become unbootable.

    The Windows registry is a central repository (database) for storing configuration data, user settings and machine-dependent settings, and options for the operating system. It contains information and settings for all hardware, software, users, and preferences. Whenever a user makes changes to settings, file associations, system policies, or installed software, the changes are reflected and stored in this repository. The registry is a crucial component because it is where Windows "remembers" all this information, how it works together, how Windows boots the system and what files it uses when it does. The registry is also a vulnerable subsystem, in that relatively small changes done incorrectly can render the system inoperable. For a more detailed explanation, read Understanding The Registry.
  • Not all registry cleaners are created equal. There are a number of them available but they do not all work entirely the same way. Each vendor uses different criteria as to what constitutes a "bad entry". One cleaner may find entries on your system that will not cause problems when removed, another may not find the same entries, and still another may want to remove entries required for a program to work.
  • Not all registry cleaners create a backup of the registry before making changes. If the changes prevent the system from booting up, then there is no backup available to restore it in order to regain functionality. A backup of the registry is essential BEFORE making any changes to the registry.
  • Improperly removing registry entries can hamper malware disinfection and make the removal process more difficult if your computer becomes infected. For example, removing malware related registry entries before the infection is properly identified can contribute to system instability and even make the malware undetectable to removal tools.
  • The usefulness of cleaning the registry is highly overrated and can be dangerous. In most cases, using a cleaner to remove obsolete, invalid, and erroneous entries does not affect system performance but it can result in "unpredictable results".
Unless you have a particular problem that requires a registry edit to correct it, I would suggest you leave the registry alone. Using registry cleaning tools unnecessarily or incorrectly could lead to disastrous effects on your operating system such as preventing it from ever starting again. For routine use, the benefits to your computer are negligible while the potential risks are great.


redtarget.gif
Update Adobe Flash Player: http://get.adobe.com/flashplayer/
Make sure you UN-check Yes, install McAfee Security Scan Plus

NOTE 1: Beginning with Adobe Flash Version 11.3, the universal installer includes the 32-bit and 64-bit versions of the Flash Player.
NOTE 2: While installing make sure you UN-check any extra garbage which wants to install alongside.

redtarget.gif
Update your Java version here: https://www.techspot.com/downloads/6463-java-se.html
Alternate download: http://www.java.com/en/download/manual.jsp

Note 1: UNCHECK any pre-checked toolbar and/or software offered with the Java update. The pre-checked toolbars/software are not part of the Java update.
Note 2: If you're running 64-bit system make sure you install BOTH, 32-bit and 64-bit Java.
Note 3: The Java Quick Starter (JQS.exe) adds a service to improve the initial startup time of Java applets and applications. If you don't want to run another extra service, go to Start > Control Panel > Java > Advanced > Miscellaneous and uncheck the box for Java Quick Starter. Click OK and restart your computer.

=========================================

Your computer is clean

1. This step will remove all cleaning tools we used, it'll reset restore points (so you won't get reinfected by accidentally using some older restore point) and it'll make some other minor adjustments...
This is a very crucial step so make sure you don't skip it.
Download
51a5ce45263de-delfix.png
DelFix by Xplode to your desktop. Delfix will delete all the used tools and logfiles.

Double-click Delfix.exe to start the tool.
Make sure the following items are checked:
  • Activate UAC (optional; some users prefer to keep it off)
  • Remove disinfection tools
  • Create registry backup
  • Purge System Restore
  • Reset system settings
Now click "Run" and wait patiently.
Once finished a logfile will be created. You don't have to attach it to your next reply.

2. Make sure Windows Updates are current.

3. If any trojans, rootkits or bootkits were listed among your infection(s), make sure, you change all of your on-line important passwords (bank account(s), secured web sites, etc.) immediately!

4. Check if your browser plugins are up to date.
Firefox - https://www.mozilla.org/en-US/plugincheck/
other browsers: https://browsercheck.qualys.com/ (click on "Scan without installing plugin" and then on "Scan now")

5. Download, and install WOT (Web OF Trust): http://www.mywot.com/. It'll warn you (in most cases) about dangerous web sites.

6. Run Malwarebytes "Quick scan" once in a while to assure safety of your computer.

7. Run Temporary File Cleaner (TFC), AdwCleaner and Junkware Removal Tool (JRT) weekly (you need to redownload these tools since they were removed by DelFix).

8. Download and install Secunia Personal Software Inspector (PSI): https://www.techspot.com/downloads/4898-secunia-personal-software-inspector-psi.html. The Secunia PSI is a FREE security tool designed to detect vulnerable and out-dated programs and plug-ins which expose your PC to attacks. Run it weekly.

9. (optional) If you want to keep all your programs up to date, download and install FileHippo Update Checker.
The Update Checker will scan your computer for installed software, check the versions and then send this information to FileHippo.com to see if there are any newer releases.

10. When installing\updating ANY program, make sure you always select "Custom " installation, so you can UN-check any possible "drive-by-install" (foistware), like toolbars etc., which may try to install along with the legitimate program. Do NOT click "Next" button without looking at any given page.

11. Read:
How did I get infected?, With steps so it does not happen again!: http://www.bleepingcomputer.com/forums/topic2520.html
Simple and easy ways to keep your computer safe and secure on the Internet: http://www.bleepingcomputer.com/tutorials/keep-your-computer-safe-online/
About those Toolbars and Add-ons - Potentially Unwanted Programs (PUPs) which change your browser settings: http://www.bleepingcomputer.com/for...curity-questions-best-practices/#entry3187642

12. Please, let me know, how your computer is doing.
 
I just attempted to do all this on the infected computer and the pop ups are still so crazy that I can't get the computer to remove or update anything because there's so much going on.
 
That appears to have done the trick! I'm going to run through the rest of your previous post now to update everything
 
Hey again. So I've finally gotten a chance to start finishing all of this and I noticed that pc cleaner has reinstalled itself after I uninstalled it the other day and it appears it bright along a few other things that keep starting themselves and I can't get them to delete or stop. Any suggestions?
 
It looks like you reinfected your computer somehow.

Re-run MBAM, RogueKiller and MBAR.
Post all logs.
 
Hey there. I'm sorry it has taken so long for me to respond. I know you do this on your own time and it's not right of me to waste your time. I've just had some personal things going on and such but now I have to figure out what's wrong with this computer. The mbar is running now. Logs coming shortly.
 
Malwarebytes Anti-Malware
www.malwarebytes.org
Scan Date: 1/27/2015
Scan Time: 4:51:47 PM
Logfile: mbam new.txt
Administrator: Yes
Version: 2.00.4.1028
Malware Database: v2015.01.27.10
Rootkit Database: v2015.01.14.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled
OS: Windows 8.1
CPU: x64
File System: NTFS
User: Kelly
Scan Type: Threat Scan
Result: Completed
Objects Scanned: 349731
Time Elapsed: 32 min, 2 sec
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled
Processes: 3
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\updateSourceApp.exe, 2196, Delete-on-Reboot, [8ed89369b4d559dd03056a8410f157a9]
PUP.Optional.StartPoint.A, C:\Users\Kelly\AppData\Local\StartPoint\startpoint\1.3.18.7\startpoint.exe, 4156, Delete-on-Reboot, [b9ad54a8098093a304c8fb60798754ac]
PUP.Optional.BBQLeads.A, C:\Program Files (x86)\bbqleads\BBQLeadsApplication.exe, 4176, Delete-on-Reboot, [6ff78c702069af8742e55d16ed16ea16]
Modules: 0
(No malicious items detected)
Registry Keys: 31
PUP.Optional.SourceApp.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Update SourceApp, Quarantined, [8ed89369b4d559dd03056a8410f157a9],
PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, Quarantined, [adb929d367220c2a5cbc181621e2f30d],
PUP.Optional.BrowseFox.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}, Quarantined, [adb929d367220c2a5cbc181621e2f30d],
PUP.Optional.SourceApp.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{9f7ab9c4-4da3-440e-ba84-95903165f129}, Quarantined, [0c5a4ab202870e2835cedf53f112df21],
PUP.Optional.SourceApp.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{7E25CC08-8611-435A-BED7-60DD82B4FDE5}, Quarantined, [0c5a4ab202870e2835cedf53f112df21],
PUP.Optional.SourceApp.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{A1B74BE8-E593-4EB8-BF9E-AC2BBE4B1BEB}, Quarantined, [0c5a4ab202870e2835cedf53f112df21],
PUP.Optional.SourceApp.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{A1B74BE8-E593-4EB8-BF9E-AC2BBE4B1BEB}, Quarantined, [0c5a4ab202870e2835cedf53f112df21],
PUP.Optional.SourceApp.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{7E25CC08-8611-435A-BED7-60DD82B4FDE5}, Quarantined, [0c5a4ab202870e2835cedf53f112df21],
PUP.Optional.SourceApp.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{9F7AB9C4-4DA3-440E-BA84-95903165F129}, Quarantined, [0c5a4ab202870e2835cedf53f112df21],
PUP.BBQLeads.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\bbqleads, Quarantined, [1650ae4eea9f5ed8b14aa65598697b85],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\26549, Quarantined, [65012bd14a3f162008d0b203e61da25e],
PUP.Optional.SourceApp.A, HKLM\SOFTWARE\WOW6432NODE\SourceApp, Quarantined, [82e452aa0d7ca096341f3ec222e3de22],
PUP.Optional.CrossRider.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLEDBROWSEREXTENSIONS\26549, Quarantined, [afb707f56326bf7726b2179ef3106b95],
PUP.Optional.ShopperPro.A, HKLM\SOFTWARE\WOW6432NODE\SHOPPERPRO, Quarantined, [333305f77d0ce551812a562b7c8716ea],
PUP.Optional.SourceApp.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Util SourceApp, Quarantined, [1b4bc23a1871bc7a9cbb42be9a6b9f61],
PUP.Optional.Sanbreel.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\{8dc666b5-f370-4f22-8558-6a137d48eead}w64, Quarantined, [74f227d54f3a8bab5b2ea6db1ee5659b],
PUP.Optional.SourceApp.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SourceApp, Quarantined, [0660f4081673270fd67e32ce1ce9946c],
PUP.Optional.NoVooIT.A, HKU\S-1-5-21-4052977653-386163532-366534634-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\NoVooITSet, Quarantined, [dc8a55a7a0e9a2943b7ba8d349ba1ae6],
PUP.Optional.Vonteera.A, HKU\S-1-5-21-4052977653-386163532-366534634-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Vonteera Safe ads, Quarantined, [2046f20a4247fe3808c3d8bb689b6c94],
PUP.Optional.SourceApp.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SourceApp, Quarantined, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.StartPoint.A, HKU\S-1-5-21-4052977653-386163532-366534634-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\startpoint, Quarantined, [085e5ca01970191d7fdb6012a3606997],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, Quarantined, [c3a31ede4445f73f6be5b3fbfb0ac33d],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, Quarantined, [c3a31ede4445f73f6be5b3fbfb0ac33d],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\TYPELIB\{8FB1A663-2820-468B-95C4-5060A4C5F413}, Quarantined, [c3a31ede4445f73f6be5b3fbfb0ac33d],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{8FB1A663-2820-468B-95C4-5060A4C5F413}, Quarantined, [c3a31ede4445f73f6be5b3fbfb0ac33d],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\ShopperPro.ShopperProBHO.1, Quarantined, [c3a31ede4445f73f6be5b3fbfb0ac33d],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\CLASSES\ShopperPro.ShopperProBHO, Quarantined, [c3a31ede4445f73f6be5b3fbfb0ac33d],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\CLASSES\ShopperPro.ShopperProBHO, Quarantined, [c3a31ede4445f73f6be5b3fbfb0ac33d],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, Quarantined, [c3a31ede4445f73f6be5b3fbfb0ac33d],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, Quarantined, [c3a31ede4445f73f6be5b3fbfb0ac33d],
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}, Quarantined, [c3a31ede4445f73f6be5b3fbfb0ac33d],
Registry Values: 5
PUP.Optional.StartPoint.A, HKU\S-1-5-21-4052977653-386163532-366534634-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|StartPoint, C:\Users\Kelly\AppData\Local\StartPoint\startpoint\1.3.18.7\startpoint.exe, Quarantined, [b9ad54a8098093a304c8fb60798754ac]
PUP.Optional.ShopperPro, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|SPDriver, C:\Program Files (x86)\ShopperPro\JSDriver\1484.0.0.0\jsdrv.exe, Quarantined, [c3a35f9d256480b69e33088e2cd722de]
PUP.Optional.ShopperPro.A, HKLM\SOFTWARE\WOW6432NODE\SHOPPERPRO|aff, smtycl, Quarantined, [333305f77d0ce551812a562b7c8716ea]
PUM.Bad.Proxy, HKU\S-1-5-21-4052977653-386163532-366534634-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|ProxyServer, http=127.0.0.1:8800;https=127.0.0.1:8800, Quarantined, [d591619b3d4cc86efab2f5077d877b85]
PUP.Optional.BBQLeads.A, HKU\S-1-5-21-4052977653-386163532-366534634-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|BBQLeadsApplication, C:\Program Files (x86)\bbqleads\BBQLeadsApplication.exe, Quarantined, [6ff78c702069af8742e55d16ed16ea16]
Registry Data: 0
(No malicious items detected)
Folders: 20
PUP.Optional.WinKit.A, C:\Users\Kelly\AppData\Roaming\WinKit, Quarantined, [6ef8d626f396053171e6aecea85bb14f],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro, Quarantined, [ca9c03f9e7a2a88e5579851158ab3fc1],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\FireFox, Quarantined, [ca9c03f9e7a2a88e5579851158ab3fc1],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\FireFox\content, Quarantined, [ca9c03f9e7a2a88e5579851158ab3fc1],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver, Quarantined, [ca9c03f9e7a2a88e5579851158ab3fc1],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\1484.0.0.0, Quarantined, [ca9c03f9e7a2a88e5579851158ab3fc1],
PUP.Optional.ShopperPro, C:\Users\Kelly\AppData\Roaming\Mozilla\Firefox\Profiles\2mgjvxz0.default-1420589058988\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}, Quarantined, [580e51ab187166d073bd9ec5ab583ec2],
PUP.Optional.ShopperPro, C:\Users\Kelly\AppData\Roaming\Mozilla\Firefox\Profiles\2mgjvxz0.default-1420589058988\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content, Quarantined, [580e51ab187166d073bd9ec5ab583ec2],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro, Quarantined, [61058379266369cd337e3d27cc37916f],
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro, Quarantined, [df872bd17910cd69f2001154b0535da3],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp, Delete-on-Reboot, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\bin, Delete-on-Reboot, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\bin\plugins, Quarantined, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\bin\TEMP, Quarantined, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.StartPoint.A, C:\Users\Kelly\AppData\Local\StartPoint\startpoint, Delete-on-Reboot, [085e5ca01970191d7fdb6012a3606997],
PUP.Optional.StartPoint.A, C:\Users\Kelly\AppData\Local\StartPoint\startpoint\1.3.18.7, Delete-on-Reboot, [085e5ca01970191d7fdb6012a3606997],
PUP.Optional.BBQLeads.A, C:\ProgramData\bbqleads, Quarantined, [6ff70def7d0cb28494929ed5fe059967],
PUP.Optional.BBQLeads.A, C:\Program Files (x86)\bbqleads, Delete-on-Reboot, [6ff78c702069af8742e55d16ed16ea16],
PUP.Optional.BBQLeads.A, C:\Program Files (x86)\bbqleads\images, Quarantined, [6ff78c702069af8742e55d16ed16ea16],
PUP.Optional.AdTech.A, C:\Users\Kelly\AppData\Roaming\pdfie, Quarantined, [69fd7d7f4a3f3006fe9f324571928779],
Files: 115
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\updateSourceApp.exe, Delete-on-Reboot, [8ed89369b4d559dd03056a8410f157a9],
PUP.Optional.StartPoint.A, C:\Users\Kelly\AppData\Local\StartPoint\startpoint\1.3.18.7\startpoint.exe, Delete-on-Reboot, [b9ad54a8098093a304c8fb60798754ac],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\SourceAppbho.dll, Quarantined, [0c5a4ab202870e2835cedf53f112df21],
PUP.Optional.Downloader, c:\Users\Kelly\AppData\Roaming\jellylam\rinti.exe, Quarantined, [e87eef0db8d1a39339ca1cf6f31239c7],
PUP.BBQLeads.A, C:\Program Files (x86)\bbqleads\uninstall.exe, Quarantined, [1650ae4eea9f5ed8b14aa65598697b85],
PUP.Optional.CrossRider.A, C:\Users\Kelly\AppData\Local\Temp\23439.exe, Quarantined, [fb6b7389e4a56bcbe17a786da9587b85],
PUP.Optional.Somoto.A, C:\Users\Kelly\AppData\Local\Temp\appshat_generic.exe, Quarantined, [0561c537c5c4270f7a1ad84af907956b],
PUP.Optional.BPlug, C:\Users\Kelly\AppData\Local\Temp\BA90.tmp, Quarantined, [4620ef0d55346acccb4839968c7514ec],
PUP.Optional.BPlug, C:\Users\Kelly\AppData\Local\Temp\C7EF.tmp, Quarantined, [6bfb9d5f8405f145e62d1bb431d0ad53],
PUP.Optional.BreakingNewsAlert.A, C:\Users\Kelly\AppData\Local\Temp\Setup.exe.0, Quarantined, [382ecd2fdbae58de82a84a1dae5249b7],
PUP.Optional.StartPoint.A, C:\Users\Kelly\AppData\Local\Temp\startpoint_1.exe, Quarantined, [cc9a16e68504f046d2fa8ad1dd23867a],
PUP.Optional.Somoto, C:\Users\Kelly\AppData\Local\Temp\nspB4BB.tmp\install24735.exe, Quarantined, [0462c03ce8a1cf67b76e9ee51ce95ea2],
PUP.Optional.Somoto, C:\Users\Kelly\AppData\Local\Temp\nsqABB2.tmp\install43993.exe, Quarantined, [84e2ef0d9beea492190c8ff4ed188c74],
PUP.Optional.Goobzo, C:\Users\Kelly\AppData\Local\Temp\Install_17328\ins_yta.exe, Quarantined, [e4829d5fdeaba591623670f4d32d51af],
PUP.Optional.Goobzo, C:\Users\Kelly\AppData\Local\Temp\Install_26967\ins_yta.exe, Quarantined, [6bfb3dbf1277c2746830db89ea160ef2],
PUP.Optional.Somoto, C:\Users\Kelly\AppData\Local\Temp\is-33VBF.tmp\bi.exe, Quarantined, [acba2bd15a2f67cfe922ee22c73e8d73],
PUP.Optional.Somoto, C:\Users\Kelly\AppData\Local\Temp\is-7FN24.tmp\bi.exe, Quarantined, [5313807cff8af73fbb50e8286d9817e9],
PUP.Optional.Somoto, C:\Users\Kelly\AppData\Local\Temp\is-8VNSJ.tmp\bi.exe, Quarantined, [491d7983a5e4cb6b29e261afc63f15eb],
PUP.Optional.WinKit.A, C:\Users\Kelly\AppData\Roaming\WinKit\tosty.dat, Quarantined, [6ef8d626f396053171e6aecea85bb14f],
PUP.Optional.WinKit.A, C:\Users\Kelly\AppData\Roaming\WinKit\Updater.exe, Quarantined, [6ef8d626f396053171e6aecea85bb14f],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\ShopperPro.exe, Quarantined, [ca9c03f9e7a2a88e5579851158ab3fc1],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\config.json, Quarantined, [ca9c03f9e7a2a88e5579851158ab3fc1],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\database1_0_0.json, Quarantined, [ca9c03f9e7a2a88e5579851158ab3fc1],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\manifest.json, Quarantined, [ca9c03f9e7a2a88e5579851158ab3fc1],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\ShopperPro.dll, Quarantined, [ca9c03f9e7a2a88e5579851158ab3fc1],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\ShopperPro64.dll, Quarantined, [ca9c03f9e7a2a88e5579851158ab3fc1],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\SPRemove.exe, Quarantined, [ca9c03f9e7a2a88e5579851158ab3fc1],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\Updater.exe, Quarantined, [ca9c03f9e7a2a88e5579851158ab3fc1],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\FireFox\chrome.manifest, Quarantined, [ca9c03f9e7a2a88e5579851158ab3fc1],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\FireFox\install.rdf, Quarantined, [ca9c03f9e7a2a88e5579851158ab3fc1],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\FireFox\content\overlay.js, Quarantined, [ca9c03f9e7a2a88e5579851158ab3fc1],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\FireFox\content\overlay.xul, Quarantined, [ca9c03f9e7a2a88e5579851158ab3fc1],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\FireFox\content\shopperpro_128.png, Quarantined, [ca9c03f9e7a2a88e5579851158ab3fc1],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\jsdrv.exe, Quarantined, [ca9c03f9e7a2a88e5579851158ab3fc1],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\jsdrv.sys, Quarantined, [ca9c03f9e7a2a88e5579851158ab3fc1],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\1484.0.0.0\config.json, Quarantined, [ca9c03f9e7a2a88e5579851158ab3fc1],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\1484.0.0.0\database1_0_0.json, Quarantined, [ca9c03f9e7a2a88e5579851158ab3fc1],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\1484.0.0.0\jsdrv.exe, Quarantined, [ca9c03f9e7a2a88e5579851158ab3fc1],
PUP.Optional.ShopperPro, C:\Program Files (x86)\ShopperPro\JSDriver\1484.0.0.0\jsdrv.sys, Quarantined, [ca9c03f9e7a2a88e5579851158ab3fc1],
PUP.Optional.Sanbreel.A, C:\Windows\System32\drivers\{8dc666b5-f370-4f22-8558-6a137d48eead}w64.sys, Quarantined, [52149567d1b846f0842c916694706b95],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\bin\utilSourceApp.exe, Delete-on-Reboot, [1b4bc23a1871bc7a9cbb42be9a6b9f61],
PUP.Optional.ShopperPro, C:\Users\Kelly\AppData\Roaming\Mozilla\Firefox\Profiles\2mgjvxz0.default-1420589058988\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\chrome.manifest, Quarantined, [580e51ab187166d073bd9ec5ab583ec2],
PUP.Optional.ShopperPro, C:\Users\Kelly\AppData\Roaming\Mozilla\Firefox\Profiles\2mgjvxz0.default-1420589058988\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\install.rdf, Quarantined, [580e51ab187166d073bd9ec5ab583ec2],
PUP.Optional.ShopperPro, C:\Users\Kelly\AppData\Roaming\Mozilla\Firefox\Profiles\2mgjvxz0.default-1420589058988\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\config.json, Quarantined, [580e51ab187166d073bd9ec5ab583ec2],
PUP.Optional.ShopperPro, C:\Users\Kelly\AppData\Roaming\Mozilla\Firefox\Profiles\2mgjvxz0.default-1420589058988\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\database1_0_0.json, Quarantined, [580e51ab187166d073bd9ec5ab583ec2],
PUP.Optional.ShopperPro, C:\Users\Kelly\AppData\Roaming\Mozilla\Firefox\Profiles\2mgjvxz0.default-1420589058988\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\overlay.js, Quarantined, [580e51ab187166d073bd9ec5ab583ec2],
PUP.Optional.ShopperPro, C:\Users\Kelly\AppData\Roaming\Mozilla\Firefox\Profiles\2mgjvxz0.default-1420589058988\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\overlay.xul, Quarantined, [580e51ab187166d073bd9ec5ab583ec2],
PUP.Optional.ShopperPro, C:\Users\Kelly\AppData\Roaming\Mozilla\Firefox\Profiles\2mgjvxz0.default-1420589058988\extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}\content\shopperpro_128.png, Quarantined, [580e51ab187166d073bd9ec5ab583ec2],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbia.exe, Quarantined, [61058379266369cd337e3d27cc37916f],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbici32.dll, Quarantined, [61058379266369cd337e3d27cc37916f],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbici64.dll, Quarantined, [61058379266369cd337e3d27cc37916f],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbii32.exe, Quarantined, [61058379266369cd337e3d27cc37916f],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbii64.exe, Quarantined, [61058379266369cd337e3d27cc37916f],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbiu.exe, Quarantined, [61058379266369cd337e3d27cc37916f],
PUP.Optional.ShopperPro, C:\Program Files\Common Files\ShopperPro\spbiw.sys, Quarantined, [61058379266369cd337e3d27cc37916f],
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro\config.json, Quarantined, [df872bd17910cd69f2001154b0535da3],
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro\database1_0_0.json, Quarantined, [df872bd17910cd69f2001154b0535da3],
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro\ShopperPro.dll, Quarantined, [df872bd17910cd69f2001154b0535da3],
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro\ShopperPro64.dll, Quarantined, [df872bd17910cd69f2001154b0535da3],
PUP.Optional.ShopperPro, C:\ProgramData\ShopperPro\spbihe.js, Quarantined, [df872bd17910cd69f2001154b0535da3],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\0, Quarantined, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\SourceApp.ico, Quarantined, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\SourceAppUninstall.exe, Quarantined, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\updateSourceApp.InstallState, Quarantined, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\bin\7za.exe, Quarantined, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\bin\8dc666b5f3704f228558.dll, Quarantined, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\bin\8dc666b5f3704f22855864.dll, Quarantined, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\bin\8dc666b5f3704f2285586a137d48eead.dll, Delete-on-Reboot, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\bin\8dc666b5f3704f2285586a137d48eead64.dll, Delete-on-Reboot, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\bin\BrowserAdapter.7z, Quarantined, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\bin\SourceApp.BrowserAdapter.exe, Delete-on-Reboot, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\bin\SourceApp.BrowserAdapter64.exe, Delete-on-Reboot, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\bin\SourceApp.expext.exe, Delete-on-Reboot, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\bin\SourceApp.expext.zip, Quarantined, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\bin\SourceApp.expextdll.dll, Delete-on-Reboot, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\bin\SourceApp.PurBrowse.zip, Quarantined, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\bin\SourceApp.PurBrowse64.exe, Delete-on-Reboot, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\bin\utilSourceApp.InstallState, Quarantined, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\bin\plugins\SourceApp.Bromon.dll, Quarantined, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\bin\plugins\SourceApp.BroStats.dll, Quarantined, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\bin\plugins\SourceApp.BrowserAdapter.dll, Quarantined, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\bin\plugins\SourceApp.CompatibilityChecker.dll, Quarantined, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\bin\plugins\SourceApp.ExpExt.dll, Quarantined, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\bin\plugins\SourceApp.FFUpdate.dll, Quarantined, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\bin\plugins\SourceApp.GCUpdate.dll, Quarantined, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\bin\plugins\SourceApp.IEUpdate.dll, Quarantined, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.SourceApp.A, C:\Program Files (x86)\SourceApp\bin\plugins\SourceApp.PurBrowse.dll, Quarantined, [fe68a953cebbe155586f412e976c6a96],
PUP.Optional.StartPoint.A, C:\Users\Kelly\AppData\Local\StartPoint\startpoint\1.3.18.7\app.ini, Quarantined, [085e5ca01970191d7fdb6012a3606997],
PUP.Optional.StartPoint.A, C:\Users\Kelly\AppData\Local\StartPoint\startpoint\1.3.18.7\edVmQecc.dll, Quarantined, [085e5ca01970191d7fdb6012a3606997],
PUP.Optional.StartPoint.A, C:\Users\Kelly\AppData\Local\StartPoint\startpoint\1.3.18.7\ieds.xml, Quarantined, [085e5ca01970191d7fdb6012a3606997],
PUP.Optional.StartPoint.A, C:\Users\Kelly\AppData\Local\StartPoint\startpoint\1.3.18.7\jnbzpxfj.dll, Quarantined, [085e5ca01970191d7fdb6012a3606997],
PUP.Optional.StartPoint.A, C:\Users\Kelly\AppData\Local\StartPoint\startpoint\1.3.18.7\res.dll, Quarantined, [085e5ca01970191d7fdb6012a3606997],
PUP.Optional.StartPoint.A, C:\Users\Kelly\AppData\Local\StartPoint\startpoint\1.3.18.7\serp.js, Quarantined, [085e5ca01970191d7fdb6012a3606997],
PUP.Optional.StartPoint.A, C:\Users\Kelly\AppData\Local\StartPoint\startpoint\1.3.18.7\sqlite.dll, Quarantined, [085e5ca01970191d7fdb6012a3606997],
PUP.Optional.StartPoint.A, C:\Users\Kelly\AppData\Local\StartPoint\startpoint\1.3.18.7\startup.exe, Quarantined, [085e5ca01970191d7fdb6012a3606997],
PUP.Optional.BBQLeads.A, C:\ProgramData\bbqleads\ctr_1420590132, Quarantined, [6ff70def7d0cb28494929ed5fe059967],
PUP.Optional.BBQLeads.A, C:\ProgramData\bbqleads\instlgsent.config, Quarantined, [6ff70def7d0cb28494929ed5fe059967],
PUP.Optional.BBQLeads.A, C:\ProgramData\bbqleads\ServiceConfig2.json, Quarantined, [6ff70def7d0cb28494929ed5fe059967],
PUP.Optional.BBQLeads.A, C:\Program Files (x86)\bbqleads\AppResources.dll, Delete-on-Reboot, [6ff78c702069af8742e55d16ed16ea16],
PUP.Optional.BBQLeads.A, C:\Program Files (x86)\bbqleads\BBQLeadsApplication.exe, Delete-on-Reboot, [6ff78c702069af8742e55d16ed16ea16],
PUP.Optional.BBQLeads.A, C:\Program Files (x86)\bbqleads\Captcha.exe, Quarantined, [6ff78c702069af8742e55d16ed16ea16],
PUP.Optional.BBQLeads.A, C:\Program Files (x86)\bbqleads\HtmlAgilityPack.dll, Delete-on-Reboot, [6ff78c702069af8742e55d16ed16ea16],
PUP.Optional.BBQLeads.A, C:\Program Files (x86)\bbqleads\Microsoft.Win32.TaskScheduler.dll, Delete-on-Reboot, [6ff78c702069af8742e55d16ed16ea16],
PUP.Optional.BBQLeads.A, C:\Program Files (x86)\bbqleads\Newtonsoft.Json.dll, Delete-on-Reboot, [6ff78c702069af8742e55d16ed16ea16],
PUP.Optional.BBQLeads.A, C:\Program Files (x86)\bbqleads\RestSharp.dll, Delete-on-Reboot, [6ff78c702069af8742e55d16ed16ea16],
PUP.Optional.BBQLeads.A, C:\Program Files (x86)\bbqleads\ScheduledTask.exe, Quarantined, [6ff78c702069af8742e55d16ed16ea16],
PUP.Optional.BBQLeads.A, C:\Program Files (x86)\bbqleads\images\bbqleads_icon.ico, Quarantined, [6ff78c702069af8742e55d16ed16ea16],
PUP.Optional.BBQLeads.A, C:\Program Files (x86)\bbqleads\images\donutleads_icon.ico, Quarantined, [6ff78c702069af8742e55d16ed16ea16],
PUP.Optional.BBQLeads.A, C:\Program Files (x86)\bbqleads\images\pastaleads_icon.ico, Quarantined, [6ff78c702069af8742e55d16ed16ea16],
PUP.Optional.BBQLeads.A, C:\Program Files (x86)\bbqleads\images\qa.ppcnp.com_icon.ico, Quarantined, [6ff78c702069af8742e55d16ed16ea16],
PUP.Optional.AdTech.A, C:\Users\Kelly\AppData\Roaming\pdfie\PdfConv_32.dll, Quarantined, [69fd7d7f4a3f3006fe9f324571928779],
PUP.Optional.AdTech.A, C:\Users\Kelly\AppData\Roaming\pdfie\PdfConv_64.dll, Quarantined, [69fd7d7f4a3f3006fe9f324571928779],
PUP.Optional.ShopperPro, C:\ProgramData\YTAHelper\YTAHelper64.dll, Quarantined, [c3a31ede4445f73f6be5b3fbfb0ac33d],
PUP.Optional.StrtPoint.A, C:\Users\Kelly\AppData\Roaming\Mozilla\Firefox\Profiles\2mgjvxz0.default-1420589058988\prefs.js, Good: (), Bad: (user_pref("browser.startup.homepage", "http://search.strtpoint.com/?v=insMac&t=1411&ap=578080078");), Replaced,[db8b0af23f4aa5919a9622beb94cec14]
PUP.Optional.StrtPoint.A, C:\Users\Kelly\AppData\Roaming\Mozilla\Firefox\Profiles\2mgjvxz0.default-1420589058988\prefs.js, Good: (), Bad: (user_pref("browser.newtab.url", "http://search.strtpoint.com/?v=insMac&t=1411&ap=578080078");), Replaced,[0a5cfb01e0a963d32b06ffe159ace21e]
Physical Sectors: 0
(No malicious items detected)

(end)
 
It's pretty amazing how quickly you were able to gather so much crap on your computer.
I strongly suggest that you have to be much, much click happy.

redtarget.gif
Please download AdwCleaner by Xplode onto your desktop.
  • Close all open programs and internet browsers.
  • Double click on adwcleaner.exe to run the tool.
  • Click on Scan button.
  • When the scan has finished click on Clean button.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the contents of that logfile with your next reply.
  • You can find the logfile at C:\AdwCleaner[S1].txt as well.

redtarget.gif
Please download Junkware Removal Tool to your desktop.
  • Shut down your protection software now to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.

redtarget.gif
Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
  • The first time the tool is run, it makes also another log (Addition.txt). Please copy and paste it to your reply.
 
I'm glad I can say that I can't claim responsibility for whatever is happening here as this is my mom and brothers computer ha. What I was told was he attempted to download defraggler by piriform and picked a random site to download it from and then the infestation began. I use filehippo which has never served me wrong, which he knows so I still don't know why he didn't just go there. Scans to follow.
 
# AdwCleaner v4.109 - Report created 27/01/2015 at 21:00:55
# Updated 24/01/2015 by Xplode
# Database : 2015-01-26.1 [Live]
# Operating System : Windows 8.1 (64 bits)
# Username : Kelly - LIVING
# Running from : C:\Users\Kelly\AppData\Local\Microsoft\Windows\INetCache\IE\KT0VYIBH\adwcleaner_4.109.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : SPBIUpd
Service Deleted : SPBIUpdd
Service Deleted : YouTubeAcceleratorService

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\YTAHelper
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTube Accelerator
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pro PC Cleaner
Folder Deleted : C:\Program Files (x86)\YouTube Accelerator
Folder Deleted : C:\Program Files (x86)\YTAHelper
Folder Deleted : C:\Program Files (x86)\Pro PC Cleaner
Folder Deleted : C:\Users\Kelly\AppData\Local\Temp\SourceApp
Folder Deleted : C:\Users\Kelly\AppData\Local\CrashRpt
Folder Deleted : C:\Users\Kelly\AppData\Local\StartPoint
Folder Deleted : C:\Users\Kelly\AppData\Local\Pro_PC_Cleaner
Folder Deleted : C:\Users\Kelly\AppData\Roaming\Pro PC Cleaner
Folder Deleted : C:\Users\Kelly\Documents\ProPCCleaner
Folder Deleted : C:\Users\Kelly\AppData\Roaming\Mozilla\Firefox\Profiles\2mgjvxz0.default-1420589058988\Extensions\{4C59F3E5-BBD0-4344-8DD2-30866FA0B31E}
File Deleted : C:\Users\Public\Desktop\Knctr.lnk
File Deleted : C:\Users\Public\Desktop\Pro PC Cleaner.lnk
File Deleted : C:\Users\Kelly\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Knctr.lnk
File Deleted : C:\Users\Kelly\Desktop\YouTube Accelerator.lnk
File Deleted : C:\Users\Kelly\Desktop\AppsHat.lnk
File Deleted : C:\Users\Kelly\Desktop\Genieo.lnk
File Deleted : C:\Users\Kelly\AppData\Roaming\Mozilla\Firefox\Profiles\2mgjvxz0.default-1420589058988\user.js
File Deleted : C:\Users\Kelly\AppData\Roaming\Mozilla\Firefox\Profiles\2mgjvxz0.default-1420589058988\searchplugins\startpointkms.xml

***** [ Scheduled Tasks ] *****

Task Deleted : ProPCCleaner_Start
Task Deleted : ProPCCleaner_Popup

***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [GoobzoYouTubeAccelerator]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ShopperPro.DLL
Key Deleted : HKCU\Software\Classes\keepmysearch
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B0CD9BC7-CCD8-4C76-B3E2-6678417BAD5D}
Key Deleted : HKCU\Software\Goobzo
Key Deleted : HKCU\Software\Microsoft\KanarCore
Key Deleted : HKCU\Software\Pro PC Cleaner
Key Deleted : HKCU\Software\ProPCCleanerLanguage
Key Deleted : HKLM\SOFTWARE\Goobzo
Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : HKLM\SOFTWARE\NpApp
Key Deleted : HKLM\SOFTWARE\Pro PC Cleaner
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ShopperPro
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C3060724-6AC7-4BEF-B516-4F6B1D90887D}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\YouTube Accelerator
Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : [x64] HKLM\SOFTWARE\ShopperPro

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Mozilla Firefox v34.0.5 (x86 en-US)

[2mgjvxz0.default-1420589058988\prefs.js] - Line Deleted : user_pref("browser.search.selectedEngine", "Search The Web (Start Point)");

-\\ Google Chrome v40.0.2214.93


*************************

AdwCleaner[R0].txt - [4904 octets] - [22/12/2014 22:36:06]
AdwCleaner[R1].txt - [7293 octets] - [27/01/2015 20:55:34]
AdwCleaner[S0].txt - [4571 octets] - [22/12/2014 22:45:25]
AdwCleaner[S1].txt - [7011 octets] - [27/01/2015 21:00:55]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [7071 octets] ##########
 
Back