Computer is full of malware and I can't reinstall Windows
Hi guys,
New to the forum. My brother's laptop has popups and random software on his Windows 7 laptop that I'm finding very difficult to remove. I was told by my IT guy at work to come here for some help. You would be able to help me run a few tests and identify the problems.
He doesn't want to backup any files so I tried reinstalling windows. I made a backup dvd and then when I did the reinstall windows program it couldn't read the disc. I tried multiple times with dvds and cds but I can't get it to work. Is a virus or malware hindering the process?
Hoping this community can give me a hand. Let me know what to do next. I just want to refresh this computer with a clean slate.
Please read the above and go to Post # 2 and provide the DDS and aswMbr logs that are requested so that we can analyze your system and see whats going on
I'm new to this so I will follow the instructions and get the details to you as soon as I can. Is there a video online I can watch on how to get these logs?
aswMBR checks for a rootkit type of infection and that log is fine, no rootkit
Not looking at any actual viruses but you have a lot of bogus toolbars and search engines that are really lousing up your system. For the rest of the logs and reports I ask for please just copy and paste them in like you did for DDS in lew of attaching them unless I ask for it to be attached
-AdwCleaner-by Xplode
Click on this link to download : ADWCleaner
Click on ONE of the Two Blue Download Now buttons That have a blue arrow beside them and save it to your desktop.
Do not click on any links in the top Advertisment.
Double click on AdwCleaner.exe to run the tool. Vista/Windows 7/8 users right-click and select Run As Administrator.
Click on the Scan button.
AdwCleaner will begin...be patient as the scan may take some time to complete.
After the scan has finished, click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
The contents of the log file may be confusing. Unless you see a program name that you know should not be removed, don't worry about it. If you see an entry you want to keep, let me know about it.
Copy and paste the contents of that logfile in your next reply.
A copy of all logfiles are saved in the C:\AdwCleaner folder which was created when running the tool.
Ran the ADW tool. Removed some of my toolbars. The browser looks normal for once! Log is below. Please let me know if you need any other logs.
Also, do you see anything in the logs that is telling me why I can't run a proper reinstall of Windows from the disc?
# AdwCleaner v3.211 - Report created 02/06/2014 at 20:59:51
# Updated 26/05/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Georgios Vallas - GEORGIOSVALLAS
# Running from : C:\Users\Georgios Vallas\Downloads\AdwCleaner.exe
# Option : Scan
***** [ Services ] *****
Service Found : CltMngSvc
Service Found : DefaultTabUpdate
***** [ Files / Folders ] *****
File Found : C:\END
File Found : C:\Program Files (x86)\Mozilla Firefox\nsprotector.js
File Found : C:\Program Files (x86)\Mozilla Firefox\user.js
File Found : C:\Users\Georgios Vallas\AppData\Roaming\Mozilla\Firefox\Profiles\k3p7w7nh.default\Extensions\addon@defaulttab.com.xpi
File Found : C:\Users\Georgios Vallas\AppData\Roaming\Mozilla\Firefox\Profiles\k3p7w7nh.default\searchplugins\Web Search.xml
File Found : C:\Users\Georgios Vallas\AppData\Roaming\Mozilla\Firefox\Profiles\k3p7w7nh.default\user.js
File Found : C:\Windows\System32\Tasks\BackgroundContainer Startup Task
File Found : C:\Windows\System32\Tasks\Dealply
File Found : C:\Windows\System32\Tasks\DealPlyUpdate
File Found : C:\Windows\System32\Tasks\DTReg
File Found : C:\Windows\System32\Tasks\Scheduled Update for Ask Toolbar
File Found : C:\Windows\System32\Tasks\VisualBeeRecovery
Folder Found : C:\Program Files (x86)\Conduit
Folder Found : C:\Program Files (x86)\DefaultTab
Folder Found : C:\Program Files (x86)\FantastiGames
Folder Found : C:\Program Files (x86)\iLivid
Folder Found : C:\Program Files (x86)\SearchProtect
Folder Found : C:\Program Files (x86)\VideoPlayerV3
Folder Found : C:\Program Files (x86)\WebexpEnhancedV1
Folder Found : C:\ProgramData\Ask
Folder Found : C:\ProgramData\FantastiGames
Folder Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\otshot
Folder Found : C:\ProgramData\ParetoLogic
Folder Found : C:\ProgramData\Partner
Folder Found : C:\ProgramData\Tarma Installer
Folder Found : C:\ProgramData\Trymedia
Folder Found : C:\ProgramData\VisualBee
Folder Found : C:\SearchProtect
Folder Found : C:\Users\GEORGI~1\AppData\Local\Temp\CT3284668
Folder Found : C:\Users\GEORGI~1\AppData\Local\Temp\CT3298566
Folder Found : C:\Users\Georgios Vallas\AppData\Local\apn
Folder Found : C:\Users\Georgios Vallas\AppData\Local\Conduit
Folder Found : C:\Users\Georgios Vallas\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl
Folder Found : C:\Users\Georgios Vallas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdkednngfjmpnljkolbapdednncafhen
Folder Found : C:\Users\Georgios Vallas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdkednngfjmpnljkolbapdednncafhen
Folder Found : C:\Users\Georgios Vallas\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc
Folder Found : C:\Users\Georgios Vallas\AppData\Local\Ilivid Player
Folder Found : C:\Users\Georgios Vallas\AppData\Local\SearchProtect
Folder Found : C:\Users\Georgios Vallas\AppData\Local\SwvUpdater
Folder Found : C:\Users\Georgios Vallas\AppData\Local\VisualBeeExe
Folder Found : C:\Users\Georgios Vallas\AppData\Local\Zoom_Downloader
Folder Found : C:\Users\Georgios Vallas\AppData\LocalLow\AskToolbar
Folder Found : C:\Users\Georgios Vallas\AppData\LocalLow\BabylonToolbar
Folder Found : C:\Users\Georgios Vallas\AppData\LocalLow\Conduit
Folder Found : C:\Users\Georgios Vallas\AppData\LocalLow\KeyBar_1.6
Folder Found : C:\Users\Georgios Vallas\AppData\LocalLow\PriceGong
Folder Found : C:\Users\Georgios Vallas\AppData\LocalLow\searchquband
Folder Found : C:\Users\Georgios Vallas\AppData\LocalLow\searchresultstb
Folder Found : C:\Users\Georgios Vallas\AppData\Roaming\DealPly
Folder Found : C:\Users\Georgios Vallas\AppData\Roaming\DefaultTab
Folder Found : C:\Users\Georgios Vallas\AppData\Roaming\DriverCure
Folder Found : C:\Users\Georgios Vallas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Ride Games
Folder Found : C:\Users\Georgios Vallas\AppData\Roaming\Mozilla\Firefox\Profiles\k3p7w7nh.default\CT3298566
Folder Found : C:\Users\Georgios Vallas\AppData\Roaming\Mozilla\Firefox\Profiles\k3p7w7nh.default\Extensions\{1122b43d-30ee-403f-9bfa-3cc99b0caddd}
Folder Found : C:\Users\Georgios Vallas\AppData\Roaming\Mozilla\Firefox\Profiles\k3p7w7nh.default\Extensions\{1122b43d-30ee-403f-9bfa-3cc99b0caddd}
Folder Found : C:\Users\Georgios Vallas\AppData\Roaming\Mozilla\Firefox\Profiles\k3p7w7nh.default\Extensions\{65f9f6b7-2dae-46fc-bfaf-f88e4af1beca}
Folder Found : C:\Users\Georgios Vallas\AppData\Roaming\Mozilla\Firefox\Profiles\k3p7w7nh.default\Extensions\{7aeae561-714b-45f6-ace3-4a8aed6e227b}
Folder Found : C:\Users\Georgios Vallas\AppData\Roaming\Mozilla\Firefox\Profiles\k3p7w7nh.default\Extensions\{bb45ef8e-1e36-4535-a017-ec908fb1e335}
Folder Found : C:\Users\Georgios Vallas\AppData\Roaming\Mozilla\Firefox\Profiles\k3p7w7nh.default\Extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}
Folder Found : C:\Users\Georgios Vallas\AppData\Roaming\Mozilla\Firefox\Profiles\k3p7w7nh.default\Extensions\toolbar@ask.com
Folder Found : C:\Users\Georgios Vallas\AppData\Roaming\ParetoLogic
Folder Found : C:\Windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}
Folder Found : C:\Windows\SysWOW64\SearchProtect
***** [ Shortcuts ] *****
***** [ Registry ] *****
Data Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll
Data Found : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll
Key Found : HKCU\Software\APN
Key Found : HKCU\Software\APN DTX
Key Found : HKCU\Software\AppDataLow\Software
Key Found : HKCU\Software\AppDataLow\Software\AskToolbar
Key Found : HKCU\Software\AppDataLow\Software\BackgroundContainer
Key Found : HKCU\Software\AppDataLow\Software\Conduit
Key Found : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Found : HKCU\Software\AppDataLow\Software\DefaultTab
Key Found : HKCU\Software\AppDataLow\Software\KeyBar_1.6
Key Found : HKCU\Software\AppDataLow\Software\PriceGong
Key Found : HKCU\Software\AppDataLow\Software\searchqutoolbar
Key Found : HKCU\Software\AppDataLow\Software\SmartBar
Key Found : HKCU\Software\AppDataLow\Toolbar
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\Default Tab
Key Found : HKCU\Software\DefaultTab
Key Found : HKCU\Software\Google\Chrome\Extensions\fdkednngfjmpnljkolbapdednncafhen
Key Found : HKCU\Software\Google\Chrome\Extensions\fdkednngfjmpnljkolbapdednncafhen
Key Found : HKCU\Software\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje
Key Found : HKCU\Software\ilivid
Key Found : HKCU\Software\InstallCore
Key Found : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\conduit.com
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1824FF90-C98E-48A6-838F-E3B6572B0C77}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{65F9F6B7-2DAE-46FC-BFAF-F88E4AF1BECA}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6E3C6B04-08FE-43BC-8E50-F90285024DEA}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8271B5D6-76D3-4ABF-AEB3-1721161C76BC}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1824FF90-C98E-48A6-838F-E3B6572B0C77}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{65F9F6B7-2DAE-46FC-BFAF-F88E4AF1BECA}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6E3C6B04-08FE-43BC-8E50-F90285024DEA}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8271B5D6-76D3-4ABF-AEB3-1721161C76BC}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D3E2E670-AEE3-4ED8-A380-1E7284307F73}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Found : HKCU\Software\ParetoLogic
Key Found : HKCU\Software\SmartBar
Key Found : HKCU\Software\Softonic
Key Found : HKCU\Software\visualbee
Key Found : [x64] HKCU\Software\APN
Key Found : [x64] HKCU\Software\APN DTX
Key Found : [x64] HKCU\Software\Conduit
Key Found : [x64] HKCU\Software\Default Tab
Key Found : [x64] HKCU\Software\DefaultTab
Key Found : [x64] HKCU\Software\ilivid
Key Found : [x64] HKCU\Software\InstallCore
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Key Found : [x64] HKCU\Software\ParetoLogic
Key Found : [x64] HKCU\Software\SmartBar
Key Found : [x64] HKCU\Software\Softonic
Key Found : [x64] HKCU\Software\visualbee
Key Found : HKLM\Software\APN
Key Found : HKLM\Software\AskToolbar
Key Found : HKLM\SOFTWARE\Classes\AppID\{38495740-0035-4471-851E-F5BBB86AB085}
Key Found : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Key Found : HKLM\SOFTWARE\Classes\AppID\{72D89EBF-0C5D-4190-91FD-398E45F1D007}
Key Found : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Key Found : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Key Found : HKLM\SOFTWARE\Classes\AppID\DefaultTabBHO.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Key Found : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Key Found : HKLM\SOFTWARE\Classes\CLSID\{00B11DA2-75ED-4364-ABA5-9A95B1F5E946}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{65F9F6B7-2DAE-46FC-BFAF-F88E4AF1BECA}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{8271B5D6-76D3-4ABF-AEB3-1721161C76BC}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{D3E2E670-AEE3-4ED8-A380-1E7284307F73}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowser
Key Found : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowser.1
Key Found : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowserActiveX
Key Found : HKLM\SOFTWARE\Classes\DefaultTabBHO.DefaultTabBrowserActiveX.1
Key Found : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Key Found : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Key Found : HKLM\SOFTWARE\Classes\ilivid
Key Found : HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Key Found : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Found : HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
Key Found : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Found : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key Found : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key Found : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key Found : HKLM\SOFTWARE\Classes\Prod.cap
Key Found : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Key Found : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3101810
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3268494
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3284668
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT3298566
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{BEAA0C04-ED15-4C17-800B-28716025A4E4}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{FEB62B15-CC00-4736-AAEC-BA046C9DFF73}
Key Found : HKLM\Software\Conduit
Key Found : HKLM\Software\Default Tab
Key Found : HKLM\Software\DefaultTab
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\dedmngkbaffkenlfdcbganndoghblmap
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\fdkednngfjmpnljkolbapdednncafhen
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\fdkednngfjmpnljkolbapdednncafhen
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\poheodfamflhhhdcmjfeggbgigeefaco
Key Found : HKLM\Software\ilivid
Key Found : HKLM\Software\KeyBar_1.6
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{618F2DFF-CDE9-4B7C-A3C9-C78E2734D7DB}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\App24x7Help_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\App24x7Help_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\biclient_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\biclient_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\mconduitinstaller_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\mconduitinstaller_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\optimizerpro_rasapi32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\optimizerpro_rasmancs
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\pricepeep_130001_0101_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\pricepeep_130001_0101_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\Searchqu Toolbar uninstall_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\Searchqu Toolbar uninstall_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasapi32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasmancs
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\wsconduit__166_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\wsconduit__166_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{65F9F6B7-2DAE-46FC-BFAF-F88E4AF1BECA}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8271B5D6-76D3-4ABF-AEB3-1721161C76BC}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3E2E670-AEE3-4ED8-A380-1E7284307F73}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2B7BDADB-EC8C-4C54-B5DD-CE45A016D3A7}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DefaultTab
Key Found : HKLM\Software\ParetoLogic
Key Found : HKLM\Software\Trymedia Systems
Key Found : HKLM\Software\visualbee
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key Found : [x64] HKLM\SOFTWARE\Tarma Installer
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{65F9F6B7-2DAE-46FC-BFAF-F88E4AF1BECA}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [BackgroundContainer]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{65F9F6B7-2DAE-46FC-BFAF-F88E4AF1BECA}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{65F9F6B7-2DAE-46FC-BFAF-F88E4AF1BECA}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater]
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [12x3q@3244516.com]
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [xz123@ya456.com]
***** [ Browsers ] *****
-\\ Internet Explorer v9.0.8112.16464
Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page] - hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=CA&userid=7d1be068-67a0-43cf-9af3-47063bbb6cf2&searchtype=ds&q={searchTerms}&installDate=28/06/2013
Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar] - hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=CA&userid=7d1be068-67a0-43cf-9af3-47063bbb6cf2&searchtype=ds&q={searchTerms}&installDate=28/06/2013
Setting Found : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL] - hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=CA&userid=7d1be068-67a0-43cf-9af3-47063bbb6cf2&searchtype=ds&q={searchTerms}&installDate=28/06/2013
Setting Found : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant] - hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=CA&userid=7d1be068-67a0-43cf-9af3-47063bbb6cf2&searchtype=ds&q={searchTerms}&installDate=28/06/2013
Setting Found : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default] - hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=CA&userid=7d1be068-67a0-43cf-9af3-47063bbb6cf2&searchtype=ds&q={searchTerms}&installDate=28/06/2013
Line Found : user_pref("CT3101810.autoDisableScopes", 10);
Line Found : user_pref("CT3101810.installDate", "21/1/2013 20:48:37");
Line Found : user_pref("CT3268494.UserID", "UN14902018019091251");
Line Found : user_pref("CT3268494.addressUrlXPETakeover", "true");
Line Found : user_pref("CT3268494.autoDisableScopes", -1);
Line Found : user_pref("CT3268494.browser.search.defaultthis.engineName", "true");
Line Found : user_pref("CT3268494.defaultSearchXPETakeover", "true");
Line Found : user_pref("CT3268494.installDate", "20/1/2013 20:43:00");
Line Found : user_pref("CT3268494.keyword", "true");
Line Found : user_pref("CT3284668.FF19Solved", "true");
Line Found : user_pref("CT3284668.UserID", "UN10755550243075280");
Line Found : user_pref("CT3284668.addressUrlXPETakeover", "true");
Line Found : user_pref("CT3284668.autoDisableScopes", 10);
Line Found : user_pref("CT3284668.browser.search.defaultthis.engineName", "true");
Line Found : user_pref("CT3284668.defaultSearchXPETakeover", "true");
Line Found : user_pref("CT3284668.installDate", "19/3/2013 11:22:12");
Line Found : user_pref("CT3284668.installerVersion", "1.3.6.5");
Line Found : user_pref("CT3284668.keyword", "true");
Line Found : user_pref("CT3298566.FF19Solved", "true");
Line Found : user_pref("CT3298566.UserID", "UN33019647043755252");
Line Found : user_pref("CT3298566.addressUrlXPETakeover", "true");
Line Found : user_pref("CT3298566.autoDisableScopes", 0);
Line Found : user_pref("CT3298566.browser.search.defaultthis.engineName", "true");
Line Found : user_pref("CT3298566.defaultSearchXPETakeover", "true");
Line Found : user_pref("CT3298566.fullUserID", "UN33019647043755252.IN.2013062821314");
Line Found : user_pref("CT3298566.installDate", "28/06/2013 2:13:13");
Line Found : user_pref("CT3298566.installSessionId", "{96AA4369-7C8F-4DEF-BB19-762B6C985540}");
Line Found : user_pref("CT3298566.installSp", "TRUE");
Line Found : user_pref("CT3298566.installerVersion", "1.5.4.1");
Line Found : user_pref("CT3298566.keyword", "true");
Line Found : user_pref("CT3298566.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3268494&octid=CT3268494&SearchSource=61&CUI=SB_CUI&UP=SP6B300A60-2270-475A-9046-4ACF390CFF17");
Line Found : user_pref("CT3298566.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3284668&SearchSource=2&CUI=UN10755550243075280&UM=2&q=");
Line Found : user_pref("CT3298566.originalSearchEngine", "KeyBar 1.6 Customized Web Search");
Line Found : user_pref("CT3298566.searchRevert", "false");
Line Found : user_pref("CT3298566.searchUserMode", "2");
Line Found : user_pref("CT3298566.smartbar.homepage", "true");
Line Found : user_pref("CT3298566.startPageXPETakeover", "true");
Line Found : user_pref("CT3298566.versionFromInstaller", "10.16.4.710");
Line Found : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3284668&SearchSource=2&CUI=UN10755550243075280&UM=2&q=");
Line Found : user_pref("browser.search.defaultengine", "Ask.com Search");
Line Found : user_pref("browser.search.defaultenginename", "Ask.com Search");
Line Found : user_pref("browser.search.defaultthis.engineName", "MixiDJ V30 Customized Web Search");
Line Found : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3298566&CUI=UN33019647043755252&UM=2&SearchSource=3&q={searchTerms}");
Line Found : user_pref("browser.search.order.1", "Ask.com Search");
Line Found : user_pref("browser.search.selectedEngine", "Web Search");
Line Found : user_pref("browser.startup.homepage", "hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=CA&userid=7d1be068-67a0-43cf-9af3-47063bbb6cf2&searchtype=hp&installDate=28/06/2013");
Line Found : user_pref("ct3268494.UserID", "UN14902018019091251");
Line Found : user_pref("extensions.asktb.ff-original-keyword-url", "");
Line Found : user_pref("keyword.URL", "hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=CA&userid=7d1be068-67a0-43cf-9af3-47063bbb6cf2&searchtype=ds&installDate=28/06/2013&q=");
Line Found : user_pref("smartbar.addressBarOwnerCTID", "CT3298566");
Line Found : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3268494&octid=CT3268494&SearchSource=61&CUI=SB_CUI&UP=SP6B300A60-2270-475A-9046-4ACF390CFF17,hxxp://search.conduit.com/?cti[...]
Line Found : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3268494&SearchSource=2&CUI=UN14902018019091251&q=,hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3[...]
Line Found : user_pref("smartbar.defaultSearchOwnerCTID", "CT3298566");
Line Found : user_pref("smartbar.homePageOwnerCTID", "CT3298566");
Line Found : user_pref("smartbar.machineId", "NYNTRXGHJGDFHTA/TZ7NV+HJTYFHCXNG4IXIMTPPGIELH2XNX4Z9SA+BYFJ6AL2+BEO97YYXBPEVJW3M2W1JYW");
Line Found : user_pref("smartbar.originalHomepage", "hxxp://www.searchnu.com/406");
Line Found : user_pref("smartbar.originalSearchAddressUrl", "hxxp://dts.search-results.com/sr?src=ffb&appid=384&systemid=406&sr=0&q=");
Line Found : user_pref("smartbar.originalSearchEngine", "Google");
Found [Homepage] : hxxp://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=CA&userid=7d1be068-67a0-43cf-9af3-47063bbb6cf2&searchtype=hp&installDate=28/06/2013
Found [Extension] : amfclgbdpgndipgoegfpkkgobahigbcl
Found [Extension] : booedmolknjekdopkepjjeckmjkdpfgl
Found [Extension] : fdkednngfjmpnljkolbapdednncafhen
Found [Extension] : flpcjncodpafbgdpnkljologafpionhb
Found [Extension] : kdidombaedgpfiiedeimiebkmbilgmlc
Shut down your protection software now to avoid potential conflicts.
Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
Post the contents of JRT.txt into your next message.
Computer is full of malware and I can't reinstall Windows
Please download 
