Inactive-A Hidden ninja hijack host program

Status
Not open for further replies.
==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com

There are 7869 more sites.

IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\123simsen.com -> www.123simsen.com

There are 7868 more sites.

IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\123simsen.com -> www.123simsen.com

There are 7868 more sites.

IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\123simsen.com -> www.123simsen.com

There are 7868 more sites.

IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\123simsen.com -> www.123simsen.com

There are 7868 more sites.

IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\123simsen.com -> www.123simsen.com

There are 7868 more sites.

IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\123simsen.com -> www.123simsen.com

There are 7868 more sites.

IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001\...\123simsen.com -> www.123simsen.com

There are 7869 more sites.

IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\123simsen.com -> www.123simsen.com

There are 7869 more sites.

IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\123simsen.com -> www.123simsen.com

There are 7869 more sites.

IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\123simsen.com -> www.123simsen.com

There are 7869 more sites.

IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-4140476658-2958252324-4128759861-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\123simsen.com -> www.123simsen.com

There are 7869 more sites.


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2012-07-25 22:26 - 2016-01-22 22:53 - 00450719 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
127.0.0.1 www.123moviedownload.com

There are 15461 more lines.
 
Download attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Run FRST(FRST64) and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt). Please post it to your reply.
 

Attachments

  • fixlist.txt
    1.7 KB · Views: 4
Fix result of Farbar Recovery Scan Tool (x64) Version:20-02-2016
Ran by Enlonwhite (2016-02-25 23:15:04) Run:1
Running from C:\Users\Enlonwhite\Downloads
Loaded Profiles: Enlonwhite (Available Profiles: Enlonwhite & Brandy)
Boot Mode: Normal
==============================================

fixlist content:
*****************
HKLM-x32\...\Run: [] => [X]
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-4140476658-2958252324-4128759861-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-4140476658-2958252324-4128759861-1001\...\MountPoints2: {c188a6ab-3bf0-11e4-be9b-ac220b8af147} - "G:\VZW_Software_upgrade_assistant.exe"
HKU\S-1-5-21-4140476658-2958252324-4128759861-1001\...\MountPoints2: {ea58ad9d-d97d-11e4-beb0-ac220b8af147} - "G:\unlock.exe" autoplay=true
SearchScopes: HKLM-x32 -> DefaultScope value is missing
FF Plugin HKU\S-1-5-21-4140476658-2958252324-4128759861-1001: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File]
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File]
S2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe /DisableUI [X]
S3 FirebirdServerMAGIXInstance; "C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe" [X]
2014-03-26 21:38 - 2014-03-28 21:41 - 0001456 _____ () C:\Users\Enlonwhite\AppData\Local\Adobe Save for Web 13.0 Prefs
2013-12-13 02:14 - 2014-04-29 23:23 - 0007672 _____ () C:\Users\Enlonwhite\AppData\Local\Resmon.ResmonCfg
2014-03-29 17:44 - 2014-03-29 17:44 - 0000057 _____ () C:\ProgramData\Ament.ini
C:\Users\Enlonwhite\AppData\Local\Temp\dllnt_dump.dll
C:\Users\Enlonwhite\AppData\Local\Temp\jre-8u71-windows-au.exe
C:\Users\Enlonwhite\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Enlonwhite\AppData\Local\Temp\sqlite3.dll
Task: {450D5914-B6BF-4C08-9BD2-C3BD8E9512EF} - \Safer-Surf Update -> No File <==== ATTENTION
Task: {8C749E6F-0976-4F23-8010-314D7740396D} - \Safer-Surf_wd -> No File <==== ATTENTION

*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value removed successfully
"HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SDWinLogon" => key removed successfully
HKU\S-1-5-21-4140476658-2958252324-4128759861-1001\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => value removed successfully
"HKU\S-1-5-21-4140476658-2958252324-4128759861-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c188a6ab-3bf0-11e4-be9b-ac220b8af147}" => key removed successfully
HKCR\CLSID\{c188a6ab-3bf0-11e4-be9b-ac220b8af147} => key not found.
"HKU\S-1-5-21-4140476658-2958252324-4128759861-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ea58ad9d-d97d-11e4-beb0-ac220b8af147}" => key removed successfully
HKCR\CLSID\{ea58ad9d-d97d-11e4-beb0-ac220b8af147} => key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
"HKU\S-1-5-21-4140476658-2958252324-4128759861-1001\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin" => key removed successfully
C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll => not found.
"HKLM\Software\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin" => key removed successfully
Fabs => service removed successfully
FirebirdServerMAGIXInstance => service removed successfully
C:\Users\Enlonwhite\AppData\Local\Adobe Save for Web 13.0 Prefs => moved successfully
C:\Users\Enlonwhite\AppData\Local\Resmon.ResmonCfg => moved successfully
C:\ProgramData\Ament.ini => moved successfully
C:\Users\Enlonwhite\AppData\Local\Temp\dllnt_dump.dll => moved successfully
C:\Users\Enlonwhite\AppData\Local\Temp\jre-8u71-windows-au.exe => moved successfully
C:\Users\Enlonwhite\AppData\Local\Temp\SkypeSetup.exe => moved successfully
C:\Users\Enlonwhite\AppData\Local\Temp\sqlite3.dll => moved successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{450D5914-B6BF-4C08-9BD2-C3BD8E9512EF}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{450D5914-B6BF-4C08-9BD2-C3BD8E9512EF}" => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Safer-Surf Update => key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{8C749E6F-0976-4F23-8010-314D7740396D}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8C749E6F-0976-4F23-8010-314D7740396D}" => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Safer-Surf_wd => key not found.

==== End of Fixlog 23:15:06 ====
 
Last scans...

redtarget.gif
Download Security Check from here or here and save it to your Desktop.
  • Double-click SecurityCheck.exe
  • Follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.

NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.
NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.
NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run


redtarget.gif
Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.
Make sure the following options are checked:
  • Internet Services
  • Windows Firewall
  • System Restore
  • Security Center
  • Windows Update
  • Windows Defender
  • Other Services

Press "Scan".
It will create a log (FSS.txt) in the same directory the tool is run.
Please copy and paste the log to your reply.


redtarget.gif
Download Temp File Cleaner (TFC)
Alternate download: http://www.itxassociates.com/OT-Tools/TFC.exe
  • Double click on TFC.exe to run the program.
  • Click on Start button to begin cleaning process.
  • TFC will close all running programs, and it may ask you to restart computer.


redtarget.gif
Download Sophos Free Virus Removal Tool and save it to your desktop.
  • Double click the icon and select Run
  • Click Next
  • Select I accept the terms in this license agreement, then click Next twice
  • Click Install
  • Click Finish to launch the program
  • Once the virus database has been updated click Start Scanning
  • If any threats are found click Details, then View log file... (bottom left hand corner)
  • Copy and paste the results in your reply
  • Close the Notepad document, close the Threat Details screen, then click Start cleanup
  • Click Exit to close the program
 
This topic is marked as abandoned and closed due to inactivity.

This member will NOT be eligible to receive any more help in malware removal forum.
 
Status
Not open for further replies.

Similar threads

wshknwntlprtmn
  • Locked
Inactive Not sure what's going on here....
Replies
12
Views
2K
Broni
Broni
E
Solved Svchost.exe launching multiple iexplore.exe - unknown cause
Replies
23
Views
3K
Broni
Broni
S
  • Locked
Inactive Am I infected?
Replies
8
Views
3K
Broni
Broni

Latest posts

Back