Solved Windows 7 64bit OS - Pop ups and redirected

[Tenille]

All processes killed
========== OTL ==========
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public
->Temp folder emptied: 0 bytes

User: Wilson Family
->Temp folder emptied: 85405 bytes
->Temporary Internet Files folder emptied: 37684215 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 1554966 bytes
->Google Chrome cache emptied: 12288972 bytes
->Flash cache emptied: 1023 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 15564 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 49.00 mb


[EMPTYFLASH]

User: All Users

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Public

User: Wilson Family
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0.00 mb


[EMPTYJAVA]

User: All Users

User: Default

User: Default User

User: Public

User: Wilson Family
->Java cache emptied: 0 bytes

Total Java Files Cleaned = 0.00 mb

Restore point Set: OTL Restore Point

OTL by OldTimer - Version 3.2.69.0 log created on 04252013_201223
Files\Folders moved on Reboot...
C:\Users\Wilson Family\AppData\Local\Temp\Low\JavaDeployReg.log moved successfully.
C:\Users\Wilson Family\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Wilson Family\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\RKLUGQP6\-WzdRTzRa5k6HlJK6-dK9Q[1].eot moved successfully.
C:\Users\Wilson Family\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\RKLUGQP6\adsCAVOGLUR.htm moved successfully.
C:\Users\Wilson Family\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\RKLUGQP6\fastbutton[1].htm moved successfully.
C:\Users\Wilson Family\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\RKLUGQP6\fastbutton[2].htm moved successfully.
C:\Users\Wilson Family\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\RKLUGQP6\rubicon_sync[1].htm moved successfully.
C:\Users\Wilson Family\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\P1CDNSV7\ads[8].htm moved successfully.
C:\Users\Wilson Family\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\P1CDNSV7\candy-crush-saga[2].htm moved successfully.
C:\Users\Wilson Family\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\P1CDNSV7\emily[1].htm moved successfully.
C:\Users\Wilson Family\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\P1CDNSV7\like[2].htm moved successfully.
C:\Users\Wilson Family\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\P1CDNSV7\Oswald-Stencil[1].woff moved successfully.
C:\Users\Wilson Family\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\P1CDNSV7\partner[1].htm moved successfully.
C:\Users\Wilson Family\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NG0ELSQS\tweet_button.1366232305[1].htm moved successfully.
C:\Users\Wilson Family\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NG0ELSQS\zrt_lookup[1].htm moved successfully.
C:\Users\Wilson Family\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\7Y3MRVZS\ads[7].htm moved successfully.
C:\Users\Wilson Family\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\7Y3MRVZS\bizo_multi[1].htm moved successfully.
C:\Users\Wilson Family\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\7Y3MRVZS\like[2].htm moved successfully.
C:\Users\Wilson Family\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\7Y3MRVZS\net[1].htm moved successfully.
C:\Users\Wilson Family\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\ED8654D5-B9F0-4DD9-B3E8-F8F560086FDF.dat moved successfully.
C:\Users\Wilson Family\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\MSIMGSIZ.DAT moved successfully.
C:\Users\Wilson Family\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\SuggestedSites.dat moved successfully.
PendingFileRenameOperations files...
Registry entries deleted on Reboot...

 

[Broni]

14. Please, let me know, how your computer is doing.

 

[Tenille]

I have gone through pretty much all of the steps. I have now gotten two pop-up messages while using IE while I was reading the information "how did I get infected" and then the other one popped up when I went to use qualys to see if my programs are up to date.

 

[Broni]

Reset Internet Explorer.
Go here: http://support.microsoft.com/kb/923737 and run "FixIt" procedure.
Make sure you follow ALL steps listed there.

 

[Tenille]

Ok I reset Internet Explorer and so far so good. I just have one more question, Is it possible that my ipod could also have a virus on it where it is synced with this computer?

 

[Broni]

I'm not aware of iPods getting infected so you should be OK.

Good luck and stay safe

 

[Tenille]

Thank you so much for help

 

[Broni]

You're very welcome