Hello,
Originally, I posted my request at http://forums.spybot.info/showthread...-Delta-Tollbar.

Anyhow, I was running Spybot - Search & Destroy v2.2.21.0 on Windows 7 32-bit. (ERUNT doesn't support Windows 7. Should I run it? Is there an alternative?)
After completing a system scan, Spybot - Search & Destroy was unable to remove the following:

Delta.Tollbar
Settings :: HKLM\SOWTWARE\DataMngr :: Registry Key :: Adware-000 :: 15E43F9C

Spybot - Search & Destroy Log (DDS and aswMBR logs are further down)

Search results from Spybot - Search & Destroy

31-Jan-14 00:23:00
Scan took 00:17:41.
7 items found.


Delta.Toolbar: [SBI $15E43F9C] Settings (Registry Key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\DataMngr

MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
HKEY_USERS\.DEFAULT\Software\Microsoft\Direct3D\MostRecentApplication\Name

MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
HKEY_USERS\S-1-5-21-3422875488-3658502439-2224259970-1000\Software\Microsoft\Direct3D\MostRecentApplication\Name

MS Direct3D: [SBI $C2A44980] Most recent application (Registry Change, nothing done)
HKEY_USERS\S-1-5-18\Software\Microsoft\Direct3D\MostRecentApplication\Name

Windows: [SBI $1E4E2003] Drivers installation paths (Registry Change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Installation Sources

Windows Explorer: [SBI $D20DA0AD] Recent file global history (Registry Key, nothing done)
HKEY_USERS\S-1-5-21-3422875488-3658502439-2224259970-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs

Windows Explorer: [SBI $85C2C910] Last Copy/MoveTo folder (Registry Value, nothing done)
HKEY_USERS\S-1-5-21-3422875488-3658502439-2224259970-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\CopyMoveTo\LastFolder


--- Spybot - Search & Destroy version: 2.1.18.131 DLL (build: 20130516) ---

2013-09-20 blindman.exe (2.2.18.151)
2013-09-20 explorer.exe (2.2.18.177)
2013-09-20 SDBootCD.exe (2.2.18.109)
2013-09-20 SDCleaner.exe (2.2.18.110)
2013-09-20 SDDelFile.exe (2.2.18.94)
2013-06-18 SDDisableProxy.exe
2013-09-20 SDFiles.exe (2.2.18.135)
2013-09-20 SDFileScanHelper.exe (2.2.16.1)
2013-10-15 SDFSSvc.exe (2.2.25.211)
2013-10-10 SDHookHelper.exe (2.3.30.2)
2013-10-10 SDHookInst32.exe (2.3.30.2)
2013-09-20 SDImmunize.exe (2.2.18.130)
2013-05-16 SDLogReport.exe (2.1.18.107)
2013-10-14 SDOnAccess.exe (2.2.25.4)
2013-09-20 SDPESetup.exe (2.2.18.3)
2013-09-20 SDPEStart.exe (2.2.18.86)
2013-09-20 SDPhoneScan.exe (2.2.18.28)
2013-09-20 SDPRE.exe (2.2.18.22)
2013-09-20 SDPrepPos.exe (2.2.18.10)
2013-09-20 SDQuarantine.exe (2.2.18.103)
2013-09-20 SDRootAlyzer.exe (2.2.18.116)
2013-09-20 SDSBIEdit.exe (2.2.18.39)
2013-09-20 SDScan.exe (2.2.18.177)
2013-09-20 SDScript.exe (2.2.18.53)
2013-10-15 SDSettings.exe (2.2.25.138)
2013-09-20 SDShell.exe (2.2.18.2)
2013-09-20 SDShred.exe (2.2.18.107)
2013-09-20 SDSysRepair.exe (2.2.18.101)
2013-09-20 SDTools.exe (2.2.18.150)
2013-07-25 SDTray.exe (2.1.21.129)
2013-09-20 SDUpdate.exe (2.2.18.91)
2013-09-20 SDUpdSvc.exe (2.2.18.76)
2013-09-20 SDWelcome.exe (2.2.21.129)
2013-09-13 SDWSCSvc.exe (2.2.22.2)
2013-06-19 spybotsd2-translation-frx.exe
2013-10-17 unins000.exe (51.1052.0.0)
1999-12-02 xcacls.exe
2012-08-23 borlndmm.dll (10.0.2288.42451)
2012-09-05 DelZip190.dll (1.9.0.107)
2012-09-10 libeay32.dll (1.0.0.4)
2012-09-10 libssl32.dll (1.0.0.4)
2013-05-16 SDAdvancedCheckLibrary.dll (2.1.18.98)
2013-05-16 SDAV.dll
2013-05-16 SDECon32.dll (2.1.18.113)
2013-04-05 SDEvents.dll (2.1.16.2)
2013-10-14 SDFileScanLibrary.dll (2.2.25.14)
2013-10-10 SDHook32.dll (2.3.30.2)
2013-05-16 SDImmunizeLibrary.dll (2.1.18.2)
2013-05-16 SDLicense.dll (2.1.18.0)
2013-05-16 SDLists.dll (2.1.18.4)
2013-05-16 SDResources.dll (2.1.18.7)
2013-05-16 SDScanLibrary.dll (2.1.18.131)
2013-05-16 SDTasks.dll (2.1.18.15)
2013-05-16 SDWinLogon.dll (2.1.18.0)
2012-08-23 sqlite3.dll
2012-09-10 ssleay32.dll (1.0.0.4)
2013-05-16 Tools.dll (2.1.18.36)
2014-01-08 Includes\Adware-000.sbi (*)
2014-01-08 Includes\Adware-001.sbi (*)
2014-01-29 Includes\Adware-C.sbi (*)
2014-01-13 Includes\Adware.sbi (*)
2014-01-13 Includes\AdwareC.sbi (*)
2010-08-13 Includes\Cookies.sbi (*)
2014-01-08 Includes\Dialer-000.sbi (*)
2014-01-08 Includes\Dialer-001.sbi (*)
2014-01-08 Includes\Dialer-C.sbi (*)
2014-01-13 Includes\Dialer.sbi (*)
2014-01-13 Includes\DialerC.sbi (*)
2012-11-14 Includes\HeavyDuty.sbi (*)
2014-01-08 Includes\Hijackers-000.sbi (*)
2014-01-08 Includes\Hijackers-001.sbi (*)
2014-01-08 Includes\Hijackers-C.sbi (*)
2014-01-13 Includes\Hijackers.sbi (*)
2014-01-13 Includes\HijackersC.sbi (*)
2014-01-08 Includes\iPhone-000.sbi (*)
2014-01-08 Includes\iPhone.sbi (*)
2014-01-08 Includes\Keyloggers-000.sbi (*)
2014-01-08 Includes\Keyloggers-C.sbi (*)
2014-01-13 Includes\Keyloggers.sbi (*)
2014-01-13 Includes\KeyloggersC.sbi (*)
2014-01-14 Includes\Malware-C.sbi (*)
2013-05-29 Includes\Malware.sbi (*)
2013-12-23 Includes\MalwareC.sbi (*)
2014-01-15 Includes\PUPS-000.sbi (*)
2014-01-15 Includes\PUPS-001.sbi (*)
2014-01-15 Includes\PUPS-002.sbi (*)
2014-01-29 Includes\PUPS-C.sbi (*)
2012-11-14 Includes\PUPS.sbi (*)
2014-01-07 Includes\PUPSC.sbi (*)
2014-01-08 Includes\Security-000.sbi (*)
2014-01-08 Includes\Security-C.sbi (*)
2014-01-21 Includes\Security.sbi (*)
2014-01-21 Includes\SecurityC.sbi (*)
2014-01-08 Includes\Spyware-000.sbi (*)
2014-01-08 Includes\Spyware-001.sbi (*)
2014-01-08 Includes\Spyware-C.sbi (*)
2014-01-21 Includes\Spyware.sbi (*)
2014-01-21 Includes\SpywareC.sbi (*)
2011-06-07 Includes\Tracks.sbi (*)
2012-11-19 Includes\Tracks.uti (*)
2014-01-15 Includes\Trojans-000.sbi (*)
2014-01-15 Includes\Trojans-001.sbi (*)
2014-01-15 Includes\Trojans-002.sbi (*)
2014-01-15 Includes\Trojans-003.sbi (*)
2014-01-15 Includes\Trojans-004.sbi (*)
2014-01-15 Includes\Trojans-005.sbi (*)
2014-01-15 Includes\Trojans-006.sbi (*)
2014-01-15 Includes\Trojans-007.sbi (*)
2014-01-15 Includes\Trojans-008.sbi (*)
2014-01-15 Includes\Trojans-009.sbi (*)
2014-01-29 Includes\Trojans-C.sbi (*)
2014-01-15 Includes\Trojans-OG-000.sbi (*)
2014-01-15 Includes\Trojans-TD-000.sbi (*)
2014-01-15 Includes\Trojans-VM-000.sbi (*)
2014-01-15 Includes\Trojans-VM-001.sbi (*)
2014-01-15 Includes\Trojans-VM-002.sbi (*)
2014-01-15 Includes\Trojans-VM-003.sbi (*)
2014-01-15 Includes\Trojans-VM-004.sbi (*)
2014-01-15 Includes\Trojans-VM-005.sbi (*)
2014-01-15 Includes\Trojans-VM-006.sbi (*)
2014-01-15 Includes\Trojans-VM-007.sbi (*)
2014-01-15 Includes\Trojans-VM-008.sbi (*)
2014-01-15 Includes\Trojans-VM-009.sbi (*)
2014-01-15 Includes\Trojans-VM-010.sbi (*)
2014-01-15 Includes\Trojans-VM-011.sbi (*)
2014-01-15 Includes\Trojans-VM-012.sbi (*)
2014-01-15 Includes\Trojans-VM-013.sbi (*)
2014-01-15 Includes\Trojans-VM-014.sbi (*)
2014-01-15 Includes\Trojans-VM-015.sbi (*)
2014-01-15 Includes\Trojans-VM-016.sbi (*)
2014-01-15 Includes\Trojans-VM-017.sbi (*)
2014-01-15 Includes\Trojans-VM-018.sbi (*)
2014-01-15 Includes\Trojans-VM-019.sbi (*)
2014-01-15 Includes\Trojans-VM-020.sbi (*)
2014-01-15 Includes\Trojans-VM-021.sbi (*)
2014-01-15 Includes\Trojans-VM-022.sbi (*)
2014-01-15 Includes\Trojans-VM-023.sbi (*)
2014-01-15 Includes\Trojans-VM-024.sbi (*)
2014-01-15 Includes\Trojans-ZB-000.sbi (*)
2014-01-15 Includes\Trojans-ZL-000.sbi (*)
2014-01-09 Includes\Trojans.sbi (*)
2014-01-16 Includes\TrojansC-01.sbi (*)
2014-01-16 Includes\TrojansC-02.sbi (*)
2014-01-16 Includes\TrojansC-03.sbi (*)
2014-01-16 Includes\TrojansC-04.sbi (*)
2014-01-16 Includes\TrojansC-05.sbi (*)
2014-01-09 Includes\TrojansC.sbi (*)

DDS Log

DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 11.0.9600.16428 BrowserJavaVersion: 10.51.2
Run by Michael at 0:32:59 on 2014-01-31
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
F:\Program Files\Bitdefender\Antivirus Free Edition\gzserv.exe
C:\Windows\system32\nvvsvc.exe
C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\System32\spoolsv.exe
F:\Program Files\Bluetooth Suite\adminservice.exe
F:\Program Files\AOMEI Backupper\ABService.exe
F:\Program Files\DU Meter\DUMeterSvc.exe
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\taskhost.exe
F:\Program Files\Bitdefender\Antivirus Free Edition\gziface.exe
C:\Program Files\Intel\iCLS Client\HeciServer.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\IProsetMonitor.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
F:\Program Files\Wise\Wise Care 365\WiseTray.exe
F:\Program Files\Process Lasso\processgovernor.exe
F:\Program Files\Process Lasso\processlasso.exe
C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
F:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
F:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
F:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
C:\Windows\system32\conhost.exe
C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe
F:\Program Files\System Explorer\SystemExplorer.exe
C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
F:\Program Files\Unlocker\UnlockerAssistant.exe
F:\Program Files\Bluetooth Suite\BtvStack.exe
F:\Program Files\Bluetooth Suite\AthBtTray.exe
F:\Program Files\Glary Utilities 4\Integrator.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe
F:\Program Files\WordWeb\wweb32.exe
F:\Program Files\Classic Shell\ClassicStartMenu.exe
C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
C:\Program Files\Windows Sidebar\sidebar.exe
F:\Program Files\uTorrent\uTorrent.exe
F:\Program Files\Ditto\Ditto.exe
F:\Program Files\Rainlendar2\Rainlendar2.exe
C:\Program Files\Google\Drive\googledrivesync.exe
F:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE
F:\Program Files\Internet Download Manager\IDMan.exe
F:\Downloads\Programs\VectorClock-Sunset.exe
C:\Program Files\Skype\Phone\Skype.exe
F:\Program Files\PhraseExpress\phraseexpress.exe
C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
C:\Program Files\Google\Drive\googledrivesync.exe
C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
C:\Windows\system32\SearchIndexer.exe
F:\Program Files\Internet Download Manager\IEMonitor.exe
F:\PROGRA~1\DU Meter\DUMeter.exe
F:\Program Files\System Explorer\service\SystemExplorerService.exe
F:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
F:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
C:\Users\Michael\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe
C:\Windows\system32\sppsvc.exe
F:\Program Files\tinySpell\tinyspell.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\conhost.exe
F:\Program Files\LastPass\nplastpass.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\Michael\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
F:\Program Files\Samsung\Kies\KiesTrayAgent.exe
F:\Program Files\Samsung\Kies\KiesAirMessage.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\Michael\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Windows\explorer.exe
C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
C:\Windows\System32\WUDFHost.exe
F:\Program Files\VideoLAN\VLC\vlc.exe
C:\Windows\system32\prevhost.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k apphost
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k iissvcs
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k WerSvcGroup
.
============== Pseudo HJT Report ===============
.
uStart Page = about:blank
uSearch Bar = hxxp://www.google.com/ie
mStart Page = about:blank
uProxyServer = localhost:21320
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
BHO: IDM integration (IDMIEHlprObj Class): {0055C089-8582-441B-A0BF-17B458C2A3A8} - f:\program files\internet download manager\IDMIECC.dll
BHO: ExplorerBHO Class: {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - f:\program files\classic shell\ClassicExplorer32.dll
BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - f:\program files\microsoft office\office14\GROOVEEX.DLL
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - f:\program files\java\jre7\bin\ssv.dll
BHO: CIESpeechBHO Class: {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - f:\program files\bluetooth suite\IEPlugIn.dll
BHO: LastPass Vault: {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - f:\program files\lastpass\LPToolbar.dll
BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - f:\program files\microsoft office\office14\URLREDIR.DLL
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - f:\program files\java\jre7\bin\jp2ssv.dll
BHO: ClassicIEBHO Class: {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - f:\program files\classic shell\ClassicIEDLL_32.dll
TB: LastPass Toolbar: {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - f:\program files\lastpass\LPToolbar.dll
TB: Classic Explorer Bar: {553891B7-A0D5-4526-BE18-D3CE461D6310} - f:\program files\classic shell\ClassicExplorer32.dll
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [uTorrent] "f:\program files\utorrent\uTorrent.exe" /MINIMIZED
uRun: [tinySpell] f:\program files\tinyspell\tinyspell.exe
uRun: [Ditto] f:\program files\ditto\Ditto.exe
uRun: [DU Meter] "f:\program files\du meter\DUMeter.exe" /autostart
uRun: [Rainlendar2] f:\program files\rainlendar2\Rainlendar2.exe
uRun: [GoogleDriveSync] "c:\program files\google\drive\googledrivesync.exe" /autostart
uRun: [] f:\program files\samsung\kies\external\firmwareupdate\KiesPDLR.exe Run
uRun: [OfficeSyncProcess] "f:\program files\microsoft office\office14\MSOSYNC.EXE"
uRun: [IDMan] f:\program files\internet download manager\IDMan.exe /onboot
uRun: [Spybot-S&D Cleaning] "c:\program files\spybot - search & destroy 2\SDCleaner.exe" /autoclean
uRun: [Programs\Vector-Clock_VectorClock-Sunset] "f:\downloads\programs\VectorClock-Sunset.exe"
uRun: [GUDelayStartup] f:\program files\glary utilities 4\StartupManager.exe -delayrun
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /minimized /regrun
uRun: [KiesPreload] f:\program files\samsung\kies\Kies.exe /preload
mRun: [LogitechQuickCamRibbon] "c:\program files\logitech\logitech webcam software\LWS.exe" /hide
mRun: [JMB36X IDE Setup] c:\windows\raidtool\xInsIDE.exe
mRun: [SystemExplorerAutoStart] "f:\program files\system explorer\SystemExplorer.exe" /TRAY
mRun: [Nvtmru] "c:\program files\nvidia corporation\nvidia update core\nvtmru.exe"
mRun: [UnlockerAssistant] "f:\program files\unlocker\UnlockerAssistant.exe"
mRun: [AtherosBtStack] "f:\program files\bluetooth suite\BtvStack.exe"
mRun: [AthBtTray] "f:\program files\bluetooth suite\AthBtTray.exe"
mRun: [BCSSync] "f:\program files\microsoft office\office14\BCSSync.exe" /DelayServices
mRun: [IAStorIcon] "f:\program files\intel\intel(r) rapid storage technology\iastoriconlaunch.exe" "f:\program files\intel\intel(r) rapid storage technology\IAStorIcon.exe" 60
mRun: [Everything] "f:\program files\everything\Everything.exe" -startup
mRun: [SDTray] "c:\program files\spybot - search & destroy 2\SDTray.exe"
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [RTHDVCPL] "c:\program files\realtek\audio\hda\RtkNGUI.exe" -s
mRun: [WordWeb] "f:\program files\wordweb\wweb32.exe" -startup
mRun: [Classic Start Menu] "f:\program files\classic shell\ClassicStartMenu.exe" -autorun
uPolicies-Explorer: NoNetConnectDisconnect = dword:1
uPolicies-Explorer: NoDriveTypeAutoRun = dword:221
mPolicies-Explorer: HideClock = dword:1
mPolicies-Explorer: LockTaskbar = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
mPolicies-System: PromptOnSecureDesktop = dword:0
mPolicies-System: SynchronousMachineGroupPolicy = dword:0
mPolicies-System: SynchronousUserGroupPolicy = dword:0
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Download all links with IDM - f:\program files\internet download manager\IEGetAll.htm
IE: Download with IDM - f:\program files\internet download manager\IEExt.htm
IE: E&xport to Microsoft Excel - f:\progra~1\microsoft office\office14\EXCEL.EXE/3000
IE: LastPass - c:\users\michael\appdata\locallow\lastpass\context.html?cmd=lastpass
IE: LastPass Fill Forms - c:\users\michael\appdata\locallow\lastpass\context.html?cmd=fillforms
IE: Se&nd to OneNote - f:\progra~1\microsoft office\office14\ONBttnIE.dll/105
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - f:\program files\microsoft office\office14\ONBttnIE.dll
IE: {43699cd0-e34f-11de-8a39-0800200c9a66} - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - f:\program files\lastpass\LPToolbar.dll
IE: {56753E59-AF1D-4FBA-9E15-31557124ADA2} - f:\program files\classic shell\ClassicIE_32.exe
IE: {7815BE26-237D-41A8-A98F-F7BD75F71086} - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - f:\program files\bluetooth suite\IEPlugIn.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - f:\program files\microsoft office\office14\ONBttnIELinkedNotes.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
.
INFO: HKCU has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
.
INFO: HKLM has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
TCP: NameServer = 192.168.1.1
TCP: Interfaces\{5B0CAEBB-C1A5-485A-A9DD-69DFA29FF048} : NameServer = 8.8.8.8,8.8.4.4,
TCP: Interfaces\{8D455361-BC46-4759-9F56-A31844B9B5F5} : NameServer = 8.8.8.8,8.8.4.4,192.168.1.1
TCP: Interfaces\{8D455361-BC46-4759-9F56-A31844B9B5F5} : DHCPNameServer = 192.168.1.1
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\common files\microsoft shared\office14\MSOXMLMF.DLL
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
AppInit_DLLs= ~
SSODL: WebCheck - <orphaned>
SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - f:\program files\microsoft office\office14\GROOVEEX.DLL
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\32.0.1700.102\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
Hosts: 127.0.0.1 www.spywareinfo.com
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\michael\appdata\roaming\mozilla\firefox\profiles\15vdszyg.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.th4u.com
FF - prefs.js: keyword.URL - hxxp://th.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=198484&p=
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\update\1.3.22.3\npGoogleUpdate3.dll
FF - plugin: c:\program files\intel\intel(r) management engine components\ipt\npIntelWebAPIIPT.dll
FF - plugin: c:\program files\intel\intel(r) management engine components\ipt\npIntelWebAPIUpdater.dll
FF - plugin: c:\program files\microsoft silverlight\5.1.20913.0\npctrlui.dll
FF - plugin: c:\program files\nvidia corporation\3d vision\npnv3dv.dll
FF - plugin: c:\program files\nvidia corporation\3d vision\npnv3dvstreaming.dll
FF - plugin: c:\users\michael\appdata\local\google\update\1.3.21.153\npGoogleUpdate3.dll
FF - plugin: c:\users\michael\appdata\roaming\mozilla\plugins\npgoogletalk.dll
FF - plugin: c:\users\michael\appdata\roaming\mozilla\plugins\npgtpo3dautoplugin.dll
FF - plugin: c:\users\michael\appdata\roaming\mozilla\plugins\npo1d.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_12_0_0_43.dll
FF - plugin: f:\progra~1\microsoft office\office14\NPAUTHZ.DLL
FF - plugin: f:\progra~1\microsoft office\office14\NPSPWRAP.DLL
FF - plugin: f:\program files\foxit software\foxit reader\plugins\npFoxitReaderPlugin.dll
FF - plugin: f:\program files\google\picasa3\npPicasa3.dll
FF - plugin: f:\program files\java\jre7\bin\dtplugin\npdeployJava1.dll
FF - plugin: f:\program files\java\jre7\bin\plugin2\npjp2.dll
FF - plugin: f:\program files\videolan\vlc\npvlc.dll
FF - plugin: f:\program files\wordweb\wcapturemoz\plugins\npWCX.dll
.
---- FIREFOX POLICIES ----
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: network.http.max-connections - 48
FF - user.js: network.http.max-connections-per-server - 16
FF - user.js: network.http.max-persistent-connections-per-proxy - 16
FF - user.js: network.http.max-persistent-connections-per-server - 8
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - false
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.cache.memory.capacity - 65536
FF - user.js: content.notify.ontimer - true
FF - user.js: content.interrupt.parsing - true
FF - user.js: content.max.tokenizing.time - 2250000
FF - user.js: content.switch.threshold - 750000
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
.
============= SERVICES / DRIVERS ===============
.
R? ????????tI";????4????t"
R? ampa;ampa
R? androidusb;SAMSUNG Android Composite ADB Interface Driver
R? ATHDFU;Atheros Valkyrie USB BootROM
R? AtiDCM;AtiDCM
R? avckf;avckf
R? b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0
R? BrowserDefendert;BrowserDefendert
R? clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86
R? IEEtwCollectorService;Internet Explorer ETW Collector Service
R? Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface
R? LiveUpdateSvc;LiveUpdate
R? RdpVideoMiniport;Remote Desktop Video Miniport Driver
R? Revoflt;Revoflt
R? SkypeUpdate;Skype Updater
R? ssadbus;SAMSUNG Android USB Composite Device driver (WDM)
R? ssadmdfl;SAMSUNG Android USB Modem (Filter)
R? ssadmdm;SAMSUNG Android USB Modem Drivers
R? ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM)
R? TsUsbFlt;TsUsbFlt
R? TsUsbGD;Remote Desktop Generic USB Device
R? WatAdminSvc;Windows Activation Technologies Service
R? WiseBootAssistant;Wise Boot Assistant
S? ambakdrv;ambakdrv
S? ammntdrv;ammntdrv
S? amwrtdrv;amwrtdrv
S? asmthub3;ASMedia USB3 Hub Service
S? asmtxhci;ASMEDIA XHCI Service
S? AthBTPort;Atheros Virtual Bluetooth Class
S? AtherosSvc;AtherosSvc
S? avc3;avc3
S? Backupper Service;AOMEI Backupper Scheduler Service
S? bdfwfpf;bdfwfpf
S? BootDefragDriver;BootDefragDriver
S? BTATH_A2DP;Bluetooth A2DP Audio Driver
S? BTATH_BUS;Atheros Bluetooth Bus
S? BTATH_HCRP;Bluetooth HCRP Server driver
S? BTATH_LWFLT;Bluetooth LWFLT Device
S? BTATH_RCP;Bluetooth AVRCP Device
S? BtFilter;BtFilter
S? dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.)
S? DUMeterDrv;Hagel Technologies DU Meter traffic accounting driver
S? DUMeterSvc;DU Meter Service
S? gzflt;gzflt
S? gzserv;Bitdefender Antivirus Free Edition
S? HWiNFO32;HWiNFO32/64 Kernel Driver
S? iaStorA;iaStorA
S? IAStorDataMgrSvc;Intel(R) Rapid Storage Technology
S? iaStorF;iaStorF
S? IDMWFP;IDMWFP
S? Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface
S? Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service
S? jhi_service;Intel(R) Dynamic Application Loader Host Interface Service
S? MBAMProtector;MBAMProtector
S? MBAMScheduler;MBAMScheduler
S? MBAMService;MBAMService
S? MEI;Intel(R) Management Engine Interface
S? MpFilter;Microsoft Malware Protection Driver
S? NvStreamSvc;NVIDIA Streamer Service
S? nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM)
S? SDScannerService;Spybot-S&D 2 Scanner Service
S? SDUpdateService;Spybot-S&D 2 Updating Service
S? SDWSCService;Spybot-S&D 2 Security Center Service
S? Skype C2C Service;Skype C2C Service
S? ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.)
S? Stereo Service;NVIDIA Stereoscopic 3D Driver Service
S? SystemExplorerHelpService;System Explorer Service
S? TeamViewer9;TeamViewer 9
.
=============== File Associations ===============
.
FileExt: .txt: Applications\win32pad.exe="f:\program files\win32pad\win32pad.exe" "%1" [UserChoice]
.
=============== Created Last 30 ================
.
2014-01-28 12:26:25 1573488 ----a-w- c:\windows\ampa.exe
2014-01-28 12:26:25 14448 ----a-w- c:\windows\system32\ampa.sys
2014-01-22 16:55:06 -------- d-----w- c:\users\michael\appdata\local\Skype
2014-01-22 11:16:04 -------- d-----w- c:\users\michael\appdata\roaming\GlarySoft
2014-01-22 11:16:02 14528 ----a-w- c:\windows\system32\drivers\BootDefragDriver.sys
2014-01-22 11:16:02 101664 ----a-w- c:\windows\system32\BootDefrag.exe
2014-01-18 10:12:00 243904 ----a-w- c:\windows\system32\StartMenuHelper32.dll
2014-01-16 23:37:52 108000 ----a-w- c:\windows\system32\drivers\idmwfp.sys
2014-01-15 11:43:12 2349056 ----a-w- c:\windows\system32\win32k.sys
2014-01-15 11:43:11 240576 ----a-w- c:\windows\system32\drivers\netio.sys
2014-01-15 11:43:04 76288 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2014-01-15 11:43:04 6016 ----a-w- c:\windows\system32\drivers\usbd.sys
2014-01-15 11:43:04 43520 ----a-w- c:\windows\system32\drivers\usbehci.sys
2014-01-15 11:43:04 284672 ----a-w- c:\windows\system32\drivers\usbport.sys
2014-01-15 11:43:04 258560 ----a-w- c:\windows\system32\drivers\usbhub.sys
2014-01-15 11:43:04 24064 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2014-01-15 11:43:04 20480 ----a-w- c:\windows\system32\drivers\usbohci.sys
2014-01-15 11:39:43 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2014-01-11 16:16:27 -------- d-----w- c:\program files\common files\Innovative Solutions
2014-01-11 15:51:19 -------- d-----w- c:\users\michael\appdata\local\Innovative Solutions
2014-01-11 15:32:44 42496 ----a-w- c:\windows\system32\AdvUninstCPL.cpl
2014-01-07 15:54:43 -------- d-----w- c:\users\michael\appdata\roaming\DropboxMaster
2014-01-07 03:34:51 -------- d-----w- c:\users\michael\appdata\roaming\Wise Care 365
2014-01-07 01:19:31 -------- d-----w- c:\users\michael\appdata\roaming\ChemTable Software
2014-01-07 01:09:09 -------- d-----w- c:\users\michael\appdata\local\ChemTable Software
2014-01-06 19:23:36 4558848 ----a-w- c:\windows\system32\GPhotos.scr
2014-01-04 16:26:05 50688 ----a-w- c:\windows\system32\admwprox.dll
2014-01-04 16:26:05 154624 ----a-w- c:\windows\system32\iisRtl.dll
2014-01-04 16:26:03 26624 ----a-w- c:\windows\system32\ahadmin.dll
2014-01-04 16:26:03 15360 ----a-w- c:\windows\system32\iisreset.exe
2014-01-04 16:26:03 10752 ----a-w- c:\windows\system32\wamregps.dll
2014-01-04 16:26:02 8192 ----a-w- c:\windows\system32\iisrstap.dll
2014-01-04 06:41:36 -------- d-----w- c:\windows\system32\BestPractices
2014-01-04 06:41:36 -------- d-----w- C:\inetpub
2013-12-31 19:17:43 -------- d-----w- c:\program files\Microsoft Mouse and Keyboard Center
.
==================== Find3M ====================
.
2014-01-28 12:27:41 1024 ---h--w- C:\AMTAG.BIN
2014-01-14 11:56:28 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-01-14 11:56:28 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-01-11 10:04:48 3329288 ----a-w- c:\windows\system32\wweb32.dll
2013-12-29 17:08:04 9357824 ----a-w- c:\program files\common files\lpuninstall.exe
2013-12-08 04:01:50 1024 ---ha-w- C:\SYSTAG.BIN
2013-12-03 19:23:26 892704 ----a-w- c:\windows\system32\nvhdagenco32.dll
2013-11-26 09:23:02 2724864 ----a-w- c:\windows\system32\mshtml.tlb
2013-11-26 09:22:11 4096 ----a-w- c:\windows\system32\ieetwcollectorres.dll
2013-11-26 08:53:56 61952 ----a-w- c:\windows\system32\iesetup.dll
2013-11-26 08:52:26 51200 ----a-w- c:\windows\system32\ieetwproxystub.dll
2013-11-26 08:29:55 112128 ----a-w- c:\windows\system32\ieUnatt.exe
2013-11-26 08:29:52 108032 ------w- c:\windows\system32\ieetwcollector.exe
2013-11-26 08:28:16 553472 ----a-w- c:\windows\system32\jscript9diag.dll
2013-11-26 08:16:12 4243968 ----a-w- c:\windows\system32\jscript9.dll
2013-11-26 07:32:06 1928192 ----a-w- c:\windows\system32\inetcpl.cpl
2013-11-26 06:33:33 1820160 ----a-w- c:\windows\system32\wininet.dll
2013-11-26 05:53:51 16384 ----a-w- C:\FixitRegBackup.reg
2013-11-23 18:26:20 417792 ----a-w- c:\windows\system32\WMPhoto.dll
2013-11-16 14:08:33 73368 ----a-w- c:\windows\system32\drivers\hola_mon_drv.sys
2013-11-16 14:08:33 476056 ----a-w- c:\windows\system32\drivers\hola_drv.sys
2013-11-12 02:07:29 2048 ----a-w- c:\windows\system32\tzres.dll
2013-11-05 12:47:54 2888536 ----a-w- c:\windows\system32\drivers\RTKVHDA.sys
2013-11-05 11:55:00 38385664 ----a-w- c:\windows\system32\RCoRes.dat
2013-11-04 12:26:24 124632 ----a-w- c:\windows\system32\RtkCoInstII.dll
2013-11-04 04:11:44 2328792 ----a-w- c:\windows\system32\RtkAPO.dll
.
============= FINISH: 0:35:09.66 ===============

attach.zip

aswMBR Log

aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2014-01-31 00:49:10
-----------------------------
00:49:10.301 OS Version: Windows 6.1.7601 Service Pack 1
00:49:10.301 Number of processors: 4 586 0x2A07
00:49:10.303 ComputerName: MICHAEL-PC UserName: Michael
00:49:13.003 Initialize success
01:00:56.532 AVAST engine defs: 14013000
01:01:25.641 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000067
01:01:25.643 Disk 0 Vendor: ST330062 3.AA Size: 286168MB BusType: 11
01:01:25.761 Disk 0 MBR read successfully
01:01:25.769 Disk 0 MBR scan
01:01:25.906 Disk 0 Windows 7 default MBR code
01:01:25.911 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 39997 MB offset 63
01:01:25.936 Disk 0 Partition - 00 05 Extended 246167 MB offset 81915435
01:01:25.957 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 99998 MB offset 81915498
01:01:25.977 Disk 0 Partition - 00 05 Extended 20732 MB offset 286712055
01:01:25.996 Disk 0 scanning sectors +586067265
01:01:26.185 Disk 0 scanning C:\Windows\system32\drivers
01:01:47.921 Service scanning
01:01:51.453 Service bdfwfpf F:\Program Files\Bitdefender\Antivirus Free Edition\bdfwfpf.sys **LOCKED** 5
01:01:51.478 Service bdselfpr F:\Program Files\Bitdefender\Antivirus Free Edition\bdselfpr.sys **LOCKED** 5
01:02:23.352 Modules scanning
01:02:35.518 Disk 0 trace - called modules:
01:02:35.545 ntkrnlpa.exe CLASSPNP.SYS disk.sys iaStorF.sys ACPI.sys halmacpi.dll storport.sys iaStorA.sys
01:02:35.549 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x88d83518]
01:02:35.552 3 CLASSPNP.SYS[8c65659e] -> nt!IofCallDriver -> [0x88d83a70]
01:02:35.556 5 iaStorF.sys[8c5f7868] -> nt!IofCallDriver -> [0x87c40828]
01:02:35.559 7 ACPI.sys[8baca3d4] -> nt!IofCallDriver -> \Device\00000067[0x86949228]
01:02:36.112 AVAST engine scan C:\Windows
01:02:39.012 AVAST engine scan C:\Windows\system32
01:09:24.707 AVAST engine scan C:\Windows\system32\drivers
01:09:45.586 AVAST engine scan C:\Users\Michael
01:17:55.738 AVAST engine scan C:\ProgramData
01:19:08.208 Scan finished successfully
01:19:52.469 Disk 0 MBR has been saved successfully to "C:\Users\Michael\Desktop\MBR.dat"
01:19:52.498 The log file has been saved successfully to "C:\Users\Michael\Desktop\aswMBR.txt"

====

Thank you in advance for assistance.