Key-Find has high Jacked my Browser
Hi, I was trying to help a friend find a website FreeUSATV,com I clicked to do a download and the trouble begin. My browser got high jacked with Key-finder as my home page I have Google Chrome as a browser. I went to the settings and It's the pages I set it for but it opens up Key-Finder when I open the browser. I'm sure it has spyware. Can please help!
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.51.2
Run by kenneth at 10:48:03 on 2014-04-02
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1015.235 [GMT -4:00]
.
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
============== Running Processes ================
.
C:\Program Files\Roxio\BackOnTrack\Instant Restore\BOTService.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\idt\wdm\STacSV.exe
C:\Program Files\Roxio\BackOnTrack\Disaster Recovery\SaibSVC.exe
C:\Program Files\DefaultTab\DefaultTabSearch.exe
C:\Documents and Settings\kenneth\Application Data\DefaultTab\DefaultTab\DTUpdate.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Google\Update\1.3.23.9\GoogleCrashHandler.exe
C:\Program Files\Fortunitas\updateFortunitas.exe
C:\Program Files\Fortunitas\bin\utilFortunitas.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Outlook Express\msimn.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EKIJ5000MUI.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
C:\program files\real\realplayer\update\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\kenneth\Application Data\Dropbox\bin\Dropbox.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Documents and Settings\kenneth\Local Settings\Application Data\WeatherAlerts\WeatherAlerts.exe
C:\Program Files\Fortunitas\bin\FilterApp_C.exe
C:\Program Files\Fortunitas\bin\XTLSApp.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k imgsvc
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.key-find.com/?type=hp&ts=1396235048&from=tugs&uid=SAMSUNGXHM160HI_S18PJDNSA10144
uSearch Bar = www.bing.com
uSearch Page = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
uDefault_Page_URL = hxxp://www.key-find.com/?type=hp&ts=1396235048&from=tugs&uid=SAMSUNGXHM160HI_S18PJDNSA10144
mStart Page = hxxp://www.key-find.com/?type=hp&ts=1396235048&from=tugs&uid=SAMSUNGXHM160HI_S18PJDNSA10144
mSearch Page = hxxp://www.key-find.com/web/?type=ds&ts=1396235048&from=tugs&uid=SAMSUNGXHM160HI_S18PJDNSA10144&q={searchTerms}
mDefault_Page_URL = hxxp://www.key-find.com/?type=hp&ts=1396235048&from=tugs&uid=SAMSUNGXHM160HI_S18PJDNSA10144
mDefault_Search_URL = hxxp://www.key-find.com/web/?type=ds&ts=1396235048&from=tugs&uid=SAMSUNGXHM160HI_S18PJDNSA10144&q={searchTerms}
uInternet Connection Wizard,ShellNext = "c:\program files\outlook express\msimn.exe"
mSearchAssistant = hxxp://www.key-find.com/web/?type=ds&ts=1396235048&from=tugs&uid=SAMSUNGXHM160HI_S18PJDNSA10144&q={searchTerms}
mCustomizeSearch = hxxp://www.key-find.com/web/?type=ds&ts=1396235048&from=tugs&uid=SAMSUNGXHM160HI_S18PJDNSA10144&q={searchTerms}
uURLSearchHooks: {ec966aaa-1510-4c02-8eb0-b42ad0c25e8b} - <orphaned>
uURLSearchHooks: {eef3855c-fc2d-41e6-8d91-d368f51b3055} - <orphaned>
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: RealNetworks Download and Record Plugin for Internet Explorer: {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\documents and settings\all users\application data\realnetworks\realdownloader\browserplugins\ie\rndlbrowserrecordplugin.dll
BHO: Canon Easy-WebPrint EX BHO: {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - c:\program files\canon\easy-webprint ex\ewpexbho.dll
BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
BHO: DefaultTab Browser Helper: {7F6AFBF1-E065-4627-A2FD-810366367D01} - c:\documents and settings\kenneth\application data\defaulttab\defaulttab\DefaultTabBHO.dll
BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll
BHO: Windows Live Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Google Toolbar Notifier BHO: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - c:\program files\google\googletoolbarnotifier\5.7.9012.1008\swg.dll
BHO: Fortunitas: {c6f3fc7b-d607-44ec-9caf-2a41d547137f} - c:\program files\fortunitas\Fortunitasbho.dll
BHO: Microsoft Live Search Toolbar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\program files\msn\toolbar\3.0.0560.0\msneshellx.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
BHO: {ec966aaa-1510-4c02-8eb0-b42ad0c25e8b} - <orphaned>
BHO: {eef3855c-fc2d-41e6-8d91-d368f51b3055} - <orphaned>
TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
TB: Canon Easy-WebPrint EX: {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - c:\program files\canon\easy-webprint ex\ewpexhlp.dll
TB: Microsoft Live Search Toolbar: {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\program files\msn\toolbar\3.0.0560.0\msneshellx.dll
TB: Canon Easy-WebPrint EX: {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - c:\program files\canon\easy-webprint ex\ewpexhlp.dll
TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
EB: Canon Easy-WebPrint EX: {21347690-EC41-4F9A-8887-1F4AEE672439} - c:\program files\canon\easy-webprint ex\ewpexhlp.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [Auction Auto Bidder] <no file>
dRun: [SearchProtect] c:\windows\system32\config\systemprofile\application data\searchprotect\bin\cltmng.exe
StartupFolder: c:\docume~1\kenneth\startm~1\programs\startup\deskto~1.lnk - c:\documents and settings\kenneth\local settings\application data\weatheralerts\DesktopWeatherAlertsApp.exe
StartupFolder: c:\docume~1\kenneth\startm~1\programs\startup\dropbox.lnk - c:\documents and settings\kenneth\application data\dropbox\bin\Dropbox.exe
StartupFolder: c:\docume~1\kenneth\startm~1\programs\startup\erunta~1.lnk - c:\program files\erunt\AUTOBACK.EXE
StartupFolder: c:\docume~1\kenneth\startm~1\programs\startup\onenot~1.lnk - c:\program files\microsoft office\office12\ONENOTEM.EXE
StartupFolder: c:\docume~1\kenneth\startm~1\programs\startup\weathe~1.lnk - c:\documents and settings\kenneth\local settings\application data\weatheralerts\WeatherAlerts.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\quickb~1.lnk - c:\program files\common files\intuit\quickbooks\qbupdate\qbupdate.exe
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Explorer: NoDriveTypeAutoRun = dword:145
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {B479199A-1242-4E3C-AD81-7F0DF801B4AE} - hxxp://download.microsoft.com/download/C/9/C/C9C3D86D-84AC-4AF0-8584-842756A66467/MicrosoftDownloadManager.cab
TCP: NameServer = 192.168.1.254
TCP: Interfaces\{D4397C3C-4801-45DB-97C8-078873CCB5F1} : DHCPNameServer = 192.168.1.254
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Notify: igfxcui - igfxdev.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\33.0.1750.154\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\kenneth\application data\mozilla\firefox\profiles\ytasw4hq.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3298573&CUI=UN16857030743449312&UM=2&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - key-find
FF - prefs.js: browser.startup.homepage - hxxp://www.key-find.com/?type=hp&ts=1396235048&from=tugs&uid=SAMSUNGXHM160HI_S18PJDNSA10144
FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3298573&SearchSource=2&CUI=UN16857030743449312&UM=2&q=
FF - component: c:\documents and settings\kenneth\application data\mozilla\firefox\profiles\ytasw4hq.default\extensions\appbar@alot.com\components\AlotXpcom.dll
FF - plugin: c:\documents and settings\all users\application data\realnetworks\realdownloader\browserplugins\mozillaplugins\nprndlchromebrowserrecordext.dll
FF - plugin: c:\documents and settings\all users\application data\realnetworks\realdownloader\browserplugins\mozillaplugins\nprndlhtml5videoshim.dll
FF - plugin: c:\documents and settings\all users\application data\realnetworks\realdownloader\browserplugins\mozillaplugins\nprndlpepperflashvideoshim.dll
FF - plugin: c:\documents and settings\all users\application data\realnetworks\realdownloader\browserplugins\npdlplugin.dll
FF - plugin: c:\documents and settings\kenneth\application data\mozilla\firefox\profiles\ytasw4hq.default\extensions\{ec966aaa-1510-4c02-8eb0-b42ad0c25e8b}\plugins\np-mswmp.dll
FF - plugin: c:\documents and settings\kenneth\application data\mozilla\firefox\profiles\ytasw4hq.default\extensions\{ec966aaa-1510-4c02-8eb0-b42ad0c25e8b}\plugins\npConduitFirefoxPlugin.dll
FF - plugin: c:\documents and settings\kenneth\application data\mozilla\firefox\profiles\ytasw4hq.default\extensions\{f0e59437-6148-4a98-b0a6-60d557ef57f4}\plugins\np-mswmp.dll
FF - plugin: c:\documents and settings\kenneth\application data\mozilla\firefox\profiles\ytasw4hq.default\extensions\{f0e59437-6148-4a98-b0a6-60d557ef57f4}\plugins\npConduitFirefoxPlugin.dll
FF - plugin: c:\program files\adobe\reader 9.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\google\update\1.3.21.153\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre7\bin\npjpi170_25.dll
FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\program files\mozilla firefox\plugins\nprpplugin.dll
FF - plugin: c:\program files\real\realplayer\netscape6\nprpplugin.dll
FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
FF - plugin: c:\windows\system32\npdeployJava1.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Default Tab:- %profile%\extensions\addon@defaulttab.com
FF - Ext: ALOT Appbar:- %profile%\extensions\appbar@alot.com
FF - Ext: Vafmusic4 : {ec966aaa-1510-4c02-8eb0-b42ad0c25e8b} - %profile%\extensions\{ec966aaa-1510-4c02-8eb0-b42ad0c25e8b}
FF - Ext: WhiteSmoke B : {f0e59437-6148-4a98-b0a6-60d557ef57f4} - %profile%\extensions\{f0e59437-6148-4a98-b0a6-60d557ef57f4}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension
FF - Ext: avast! Online Security:- c:\program files\avast software\avast\webrep\FF
.
---- FIREFOX POLICIES ----
FF - user.js: extensions.autoDisableScopes - 0
FF - user.js: extensions.shownSelectionUI - true
.
============= SERVICES / DRIVERS ===============
.
R0 aswRvrt;avast! Revert;c:\windows\system32\drivers\aswRvrt.sys [2013-5-16 49944]
R0 aswVmm;avast! VM Monitor;c:\windows\system32\drivers\aswVmm.sys [2013-5-16 180760]
R0 SahdIa32;HDD Filter Driver;c:\windows\system32\drivers\SahdIa32.sys [2009-8-24 21488]
R0 SaibIa32;Volume Filter Driver;c:\windows\system32\drivers\SaibIa32.sys [2009-8-24 15856]
R0 SysCow;SysCow;c:\windows\system32\drivers\syscow32x.sys [2009-7-2 103792]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2013-5-16 776976]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2013-5-16 411552]
R1 SaibVd32;Virtual Disk Driver;c:\windows\system32\drivers\SaibVd32.sys [2009-8-24 25584]
R1 tStLibG;tStLibG;c:\windows\system32\drivers\tStLibG.sys [2014-4-1 55232]
R2 9734BF6A-2DCD-40f0-BAB0-5AAFEEBE1269;Roxio SAIB Service;c:\program files\roxio\backontrack\disaster recovery\SaibSVC.exe [2009-6-2 457200]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswmonflt.sys [2013-5-16 67824]
R2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2014-4-1 50344]
R2 BOTService;BOTService;c:\program files\roxio\backontrack\instant restore\BOTService.exe [2009-7-9 199152]
R2 DefaultTabSearch;DefaultTabSearch;c:\program files\defaulttab\DefaultTabSearch.exe [2013-12-19 574464]
R2 DefaultTabUpdate;DefaultTabUpdate;c:\documents and settings\kenneth\application data\defaulttab\defaulttab\DTUpdate.exe [2013-6-1 107520]
R2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files\realnetworks\realdownloader\rndlresolversvc.exe [2013-8-14 39056]
R2 Update Fortunitas;Update Fortunitas;c:\program files\fortunitas\updateFortunitas.exe [2014-3-28 350496]
R2 Util Fortunitas;Util Fortunitas;c:\program files\fortunitas\bin\utilFortunitas.exe [2014-3-31 350496]
R3 AESTAud;AE Audio Service;c:\windows\system32\drivers\AESTAud.sys [2009-8-24 113664]
R3 Cam3820;Cam3820 PC Camera Driver;c:\windows\system32\drivers\cam3820a.sys [2009-6-18 308608]
R3 L1c;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller;c:\windows\system32\drivers\l1c51x86.sys [2009-3-31 39424]
S2 ca82e1a5;Optimizer Pro Crash Monitor;c:\windows\system32\rundll32.exe [2008-4-15 33280]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S3 bcm;WiMAX Network Adapter;c:\windows\system32\drivers\drxvi314.sys [2009-11-3 282112]
S3 bcmbusctr;WiMAX Bus Driver;c:\windows\system32\drivers\BcmBusCtr.sys [2009-11-3 51712]
S3 RSUSBSTOR;RTS5121.Sys Realtek USB Card Reader;c:\windows\system32\drivers\rts5121.sys --> c:\windows\system32\drivers\RTS5121.sys [?]
S3 Rts516xIR;Realtek IR Driver;c:\windows\system32\drivers\rts516xir.sys --> c:\windows\system32\drivers\Rts516xIR.sys [?]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2013-7-20 754856]
.
=============== Created Last 30 ================
.
2014-04-01 04:58:00 -------- d-----w- c:\documents and settings\kenneth\application data\DropboxMaster
2014-04-01 04:57:28 -------- d-----w- c:\program files\Dropbox
2014-04-01 04:53:21 -------- d-----w- c:\documents and settings\kenneth\application data\Dropbox
2014-04-01 04:32:45 43152 ----a-w- c:\windows\avastSS.scr
2014-04-01 04:09:40 55232 ----a-w- c:\windows\system32\drivers\tStLibG.sys
2014-03-31 03:05:30 -------- d-----w- c:\program files\OPTIMIZER PRO
2014-03-31 03:05:21 -------- d-----w- c:\documents and settings\kenneth\application data\key-find
2014-03-31 03:03:54 -------- d-----w- c:\documents and settings\kenneth\local settings\application data\Local_Weather_LLC
2014-03-31 03:03:47 -------- d-----w- c:\program files\Fortunitas
2014-03-31 03:02:42 -------- d-----w- c:\documents and settings\kenneth\local settings\application data\WeatherAlerts
2014-03-18 10:43:17 13312 ----a-w- c:\windows\system32\xp_eos.exe
2014-03-18 10:43:17 13312 ------w- c:\windows\system32\dllcache\xp_eos.exe
.
==================== Find3M ====================
.
2014-04-01 04:32:49 180760 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2014-04-01 04:32:48 776976 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2014-04-01 04:32:47 67824 ----a-w- c:\windows\system32\drivers\aswmonflt.sys
2014-04-01 04:32:47 49944 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2014-03-12 11:29:12 692616 -c--a-w- c:\windows\system32\FlashPlayerApp.exe
2014-03-12 11:29:10 71048 -c--a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-02-24 11:46:36 920064 ----a-w- c:\windows\system32\wininet.dll
2014-02-24 11:45:58 43520 ----a-w- c:\windows\system32\licmgr10.dll
2014-02-24 11:45:57 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2014-02-24 11:45:42 18944 ----a-w- c:\windows\system32\corpol.dll
2014-02-24 10:54:21 385024 ----a-w- c:\windows\system32\html.iec
2014-02-07 02:01:37 1879040 ----a-w- c:\windows\system32\win32k.sys
2014-02-05 08:55:04 562688 ----a-w- c:\windows\system32\qedit.dll
2014-02-03 18:52:32 348160 ----a-w- c:\windows\system32\msvcr71.dll
2014-02-03 18:52:31 499712 ----a-w- c:\windows\system32\msvcp71.dll
2014-02-03 18:41:34 813232 -c--a-w- c:\program files\RealPlayer.exe
2014-01-04 03:13:05 420864 ----a-w- c:\windows\system32\vbscript.dll
2013-05-16 13:33:09 117478104 -c--a-w- c:\program files\avast_free_antivirus_setup.exe
2013-05-04 15:08:38 411003 -c--a-w- c:\program files\PinBot-v1-3-Setup.exe
2013-01-12 13:19:09 40437664 -c--a-w- c:\program files\QuickTimeInstaller.exe
2012-09-12 16:34:28 5433105 -c--a-w- c:\program files\hifsetup.exe
2012-08-24 05:47:54 26822384 -c--a-w- c:\program files\QuickBooksInstallDiagnosticTool.exe
2012-08-16 06:33:34 1561792 -c--a-w- c:\program files\gimp_installer_2068.exe
2012-08-12 07:41:59 352968 -c--a-w- c:\program files\SoftonicDownloader_for_mobipocket-reader-desktop.exe
2012-08-12 06:45:24 10606592 -c--a-w- c:\program files\creator.msi
2012-08-09 05:32:32 6785285 -c--a-w- c:\program files\kompozer-0.8b3.en-US.win32.exe
2012-07-24 06:49:27 52249417 -c--a-w- c:\program files\ListingFactory_2012_Setup.exe
2012-07-23 15:02:54 609436 -c--a-w- c:\program files\spelloe_setup.exe
2012-07-10 16:40:28 1982061 -c--a-w- c:\program files\Auctonic.exe
2012-07-05 16:00:47 18117717 -c--a-w- c:\program files\GimPhoto-1.4.3_setup.exe
2012-05-10 06:53:20 151801119 -c--a-w- c:\program files\Apache_OpenOffice_incubating_3.4.0_Win_x86_install_en-US.exe
2012-05-10 06:40:00 1247056 -c--a-w- c:\program files\wlsetup-web.exe
2012-05-10 05:29:01 1810833 -c--a-w- c:\program files\HCP.exe
2011-01-15 05:53:40 3834294 ----a-w- c:\program files\Twitter Marketing Bot.exe
.
============= FINISH: 10:49:37.58 ===============
aswMBR version 0.9.9.1771 Copyright(c) 2011 AVAST Software
Run date: 2014-04-02 10:57:06
-----------------------------
10:57:06.752 OS Version: Windows 5.1.2600 Service Pack 3
10:57:06.752 Number of processors: 2 586 0x1C02
10:57:06.752 ComputerName: PC801713467250 UserName: kenneth
10:57:07.549 Initialize success
10:57:12.690 AVAST engine defs: 14040200
10:58:41.208 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0
10:58:41.208 Disk 0 Vendor: SAMSUNG_ HH10 Size: 152627MB BusType: 3
10:58:41.505 Disk 0 MBR read successfully
10:58:41.521 Disk 0 MBR scan
10:58:41.536 Disk 0 Windows VISTA default MBR code
10:58:41.567 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 152616 MB offset 2048
10:58:41.630 Disk 0 scanning sectors +312560640
10:58:41.724 Disk 0 scanning C:\WINDOWS\system32\drivers
10:58:59.709 Service scanning
10:59:17.865 Service sptd C:\WINDOWS\System32\Drivers\sptd.sys **LOCKED** 32
10:59:23.616 Modules scanning
10:59:34.382 Disk 0 trace - called modules:
10:59:34.429
10:59:35.163 AVAST engine scan C:\WINDOWS
10:59:54.726 AVAST engine scan C:\WINDOWS\system32
11:03:39.905 AVAST engine scan C:\WINDOWS\system32\drivers
11:04:02.812 AVAST engine scan C:\Documents and Settings\kenneth
11:10:40.480 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\kenneth\Desktop\MBR.dat"
11:10:40.590 The log file has been saved successfully to "C:\Documents and Settings\kenneth\Desktop\aswMBR.txt"
I hope I did this right! Thanks for your help in advance!
Please download 
