Redirect issues

Olgita · May 16, 2012

OTL.txt PART 2

==========[/color]

[2012/05/14 23:03:35 | 000,000,512 | ---- | C] () -- C:\Users\Olga\Desktop\MBR.dat
[2012/05/14 21:59:33 | 000,000,762 | ---- | C] () -- C:\Users\Public\Desktop\ZoneAlarm Security.lnk
[2012/05/14 21:56:58 | 000,002,290 | ---- | C] () -- C:\Users\Olga\Desktop\Resume ZoneAlarm Security Install.lnk
[2012/05/10 21:11:19 | 000,000,894 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/05/10 21:11:18 | 000,000,890 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/05/09 22:59:06 | 000,000,830 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/05/09 20:36:26 | 000,458,240 | ---- | C] () -- C:\Users\Olga\Desktop\CKScanner.exe
[2012/05/05 19:29:16 | 000,948,982 | R--- | C] () -- C:\Users\Olga\Documents\My Money Backup_2012-05-05_192914.mbf
[2012/05/05 19:29:08 | 000,948,982 | R--- | C] () -- C:\Users\Olga\Documents\My Money Backup_2012-05-05_192906.mbf
[2012/05/05 17:48:17 | 000,001,681 | ---- | C] () -- C:\Users\Olga\Documents\checking.qif
[2012/05/05 15:44:01 | 000,003,923 | ---- | C] () -- C:\Users\Olga\Documents\Attach.zip
[2012/05/05 15:06:45 | 000,001,112 | ---- | C] () -- C:\Users\Olga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk
[2012/05/05 15:06:23 | 000,000,932 | ---- | C] () -- C:\Users\Olga\Desktop\NTREGOPT.lnk
[2012/05/05 15:06:23 | 000,000,913 | ---- | C] () -- C:\Users\Olga\Desktop\ERUNT.lnk
[2012/05/05 13:35:30 | 000,001,117 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/04/30 22:48:36 | 000,053,951 | ---- | C] () -- C:\Users\Olga\Documents\zebra-living-room-zebra-design.jpg
[2012/04/18 21:17:19 | 000,031,800 | ---- | C] () -- C:\Users\Olga\Documents\pse bill march april.pdf
[2012/04/18 20:29:17 | 000,000,189 | ---- | C] () -- C:\Users\Olga\Desktop\Comcast Security.url
[2012/04/18 20:29:16 | 000,000,195 | ---- | C] () -- C:\Users\Olga\Desktop\Comcast Email.url
[2011/09/25 20:59:08 | 000,000,016 | ---- | C] () -- C:\Windows\popcinfo.dat
[2011/05/17 07:00:01 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2011/04/25 23:53:28 | 000,002,857 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat

========== LOP Check ==========

[2011/10/30 21:35:34 | 000,000,000 | ---D | M] -- C:\Users\Olga\AppData\Roaming\AVG2012
[2012/03/22 23:49:09 | 000,000,000 | ---D | M] -- C:\Users\Olga\AppData\Roaming\CheckPoint
[2012/05/05 14:40:09 | 000,000,000 | ---D | M] -- C:\Users\Olga\AppData\Roaming\DriverCure
[2012/04/15 23:23:52 | 000,000,000 | ---D | M] -- C:\Users\Olga\AppData\Roaming\Floodlight Games
[2012/02/24 20:43:03 | 000,000,000 | ---D | M] -- C:\Users\Olga\AppData\Roaming\funkitron
[2012/02/24 20:50:47 | 000,000,000 | ---D | M] -- C:\Users\Olga\AppData\Roaming\Namco
[2012/02/24 21:03:36 | 000,000,000 | ---D | M] -- C:\Users\Olga\AppData\Roaming\PlayFirst
[2012/04/09 23:36:36 | 000,000,000 | ---D | M] -- C:\Users\Olga\AppData\Roaming\runic games
[2012/05/05 14:40:09 | 000,000,000 | ---D | M] -- C:\Users\Olga\AppData\Roaming\SpeedMaxPc
[2011/09/26 21:22:38 | 000,000,000 | ---D | M] -- C:\Users\Olga\AppData\Roaming\Ulead Systems
[2012/04/11 00:11:54 | 000,000,000 | ---D | M] -- C:\Users\Olga\AppData\Roaming\WildTangentv1002
[2012/02/26 23:51:22 | 000,000,000 | ---D | M] -- C:\Users\Olga\AppData\Roaming\Windows Live Writer
[2012/04/15 23:20:29 | 000,032,536 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

< End of report >

diver79 · May 16, 2012

Hi Olgita,

Search Conduit showed up in the logs which could account for the redirects. We will remove it with a custom OTL fix

First, we need to remove some programs from the PC. You have two AV programs running which is not a good idea, see note below. Also you have too many security packages running, so we will remove them along with some vulnerable software.

multiple Anti Virus programs

It looks like you are operating your computer with multiple Anti Virus programs running in memory at once:

ZoneAlarm Free
AVG 2012

Click to expand...
Anti-virus programs take up an enormous amount of your computer's resources when they are actively scanning your computer.
Having two anti-virus programs running at the same time can cause your computer to run very slow, become unstable and even, in rare cases, crash.
Please remove one of them.
- Click on the start button
- In the Search Programs and files text area type appwiz.cpl and press Enter
- Press the "Remove" or "Change/Remove"...button to uninstall one of the programs listed above.

While you are here, please also uninstall the below programs.

Adobe Reader 9.5.1 MUI
AVG Security Toolbar
CA Pest Patrol Realtime Protection
Coupon Printer for Windows
Java(TM) 6 Update 29
XFINITY Toolbar

Now reboot the computer.
Note: You can re-install up to date versions of Adobe Reader and Java from the links below.
http://java.com/en/download/index.jsp
http://get.adobe.com/flashplayer/

Run OTL Script
We need to run an OTL Fix

Right click OTL.exe and select Run as Administrator to start the program.

Copy and Paste the following code into the

textbox. Do not include the word Code

Code:

:otl
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2645238
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.xfinity.com/?cid=insDate04182012
IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2645238
IE - HKCU\..\SearchScopes\Comcast: "URL" = http://search.xfinity.com/?cat=subweb&con=mmchrome&q={searchTerms}&cid=xfstart_tech_search
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll (Yahoo! Inc)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
O4 - HKCU..\Run: [Itibiti.exe] C:\Program Files (x86)\Itibiti Soft Phone\Itibiti.exe File not found
O15 - HKCU\..Trusted Domains: //@surf.mar@/ ([]money in Local intranet)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_29)
[2012/05/12 23:13:46 | 000,000,000 | ---D | C] -- C:\Users\Olga\AppData\Local\{F9097DFE-80F3-4AA5-847A-D224896EE763}
[2012/05/12 23:13:23 | 000,000,000 | ---D | C] -- C:\Users\Olga\AppData\Local\{AFFAED47-5D0C-4A68-BA2B-DC8DA9EE31F6}
[2012/05/12 23:13:04 | 000,000,000 | ---D | C] -- C:\Users\Olga\AppData\Local\{4C1DA19E-4DA7-4BB7-9F93-562FEA63AA68}
[2012/05/12 23:13:02 | 000,000,000 | ---D | C] -- C:\Users\Olga\AppData\Local\{ED959694-DBDB-4C30-8B59-37691E9E3E92}
[2012/05/12 23:12:49 | 000,000,000 | ---D | C] -- C:\Users\Olga\AppData\Local\{F6990D3F-65C4-4A47-983A-2C77FB14007E}
[2012/05/12 23:12:39 | 000,000,000 | ---D | C] -- C:\Users\Olga\AppData\Local\{1CB6FCC8-BC33-4CE8-8484-4596E6A02C33}
[2012/05/03 21:45:24 | 000,000,000 | ---D | C] -- C:\Users\Olga\AppData\Local\{3C453E72-4947-4756-A48B-9411C6948812}
[2012/05/03 21:44:41 | 000,000,000 | ---D | C] -- C:\Users\Olga\AppData\Local\{D69141D1-7B7B-4321-BC88-A1223EF628F2}
[2012/05/03 21:44:24 | 000,000,000 | ---D | C] -- C:\Users\Olga\AppData\Local\{4617493C-92FD-48CE-AA17-D81F9A664DE9}
:commands
[EMPTYTEMP]
[CREATERESTOREPOINT]

Then click the Run Fix button at the top.
Click

.
OTL may ask to reboot the machine. Please do so if asked.
The report should appear in Notepad after the reboot.Copy and Paste that report in your next reply.

Security Check

Please download Security Check by screen317 from one of the links below:
- Link 1
- Link 2
Save it to your Desktop.
Right click SecurityCheck.exe And select " Run as administrator " , then follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt
Please post the contents of that document.

Olgita · May 17, 2012

OTL report:

All processes killed
========== OTL ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{afdbddaa-5d3f-42ee-b79c-185a7020515b}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{searchTerms}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{searchTerms}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ deleted successfully.
C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}\ deleted successfully.
C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll moved successfully.
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}\ deleted successfully.
File C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}\ deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Itibiti.exe deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\//@surf.mar@/\ deleted successfully.
Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
C:\Users\Olga\AppData\Local\{F9097DFE-80F3-4AA5-847A-D224896EE763} folder moved successfully.
C:\Users\Olga\AppData\Local\{AFFAED47-5D0C-4A68-BA2B-DC8DA9EE31F6} folder moved successfully.
C:\Users\Olga\AppData\Local\{4C1DA19E-4DA7-4BB7-9F93-562FEA63AA68} folder moved successfully.
C:\Users\Olga\AppData\Local\{ED959694-DBDB-4C30-8B59-37691E9E3E92} folder moved successfully.
C:\Users\Olga\AppData\Local\{F6990D3F-65C4-4A47-983A-2C77FB14007E} folder moved successfully.
C:\Users\Olga\AppData\Local\{1CB6FCC8-BC33-4CE8-8484-4596E6A02C33} folder moved successfully.
C:\Users\Olga\AppData\Local\{3C453E72-4947-4756-A48B-9411C6948812} folder moved successfully.
C:\Users\Olga\AppData\Local\{D69141D1-7B7B-4321-BC88-A1223EF628F2} folder moved successfully.
C:\Users\Olga\AppData\Local\{4617493C-92FD-48CE-AA17-D81F9A664DE9} folder moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 56900 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Olga
->Temp folder emptied: 75903455 bytes
->Temporary Internet Files folder emptied: 304245528 bytes
->Java cache emptied: 228793 bytes
->Flash cache emptied: 38257 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 57549693 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 67630 bytes
RecycleBin emptied: 122819628 bytes

Total Files Cleaned = 535.00 mb

Restore point Set: OTL Restore Point

OTL by OldTimer - Version 3.2.43.0 log created on 05172012_001848

Files\Folders moved on Reboot...
C:\Users\Olga\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Olga\AppData\Local\Temp\~DF39BB49D3DA70236E.TMP moved successfully.
C:\Users\Olga\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPBJ2MW6\01[2].htm moved successfully.
C:\Users\Olga\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPBJ2MW6\aceUAC[1].htm moved successfully.
C:\Users\Olga\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZPBJ2MW6\st[5] moved successfully.
C:\Users\Olga\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UMQC87C0\fc[2].htm moved successfully.
C:\Users\Olga\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ND8WE7O7\xframe-proxy_20110929[1].htm moved successfully.
C:\Users\Olga\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\N4ILJ0FR\iframe3[4].htm moved successfully.
C:\Users\Olga\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GT1UKMLR\getAds[3].htm moved successfully.
C:\Users\Olga\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GT1UKMLR\xframe-proxy_20110929[1].htm moved successfully.
C:\Users\Olga\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7VRIL7C4\0[1].htm moved successfully.
C:\Users\Olga\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7VRIL7C4\0[2].htm moved successfully.
C:\Users\Olga\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\33BWDG2D\0[2].htm moved successfully.
C:\Users\Olga\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\33BWDG2D\csc-render[1].htm moved successfully.
C:\Users\Olga\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\33BWDG2D\ext-render-secure[2].htm moved successfully.
C:\Users\Olga\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\33BWDG2D\showthread[1].htm moved successfully.
C:\Users\Olga\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\25ZYM6PZ\0[1].htm moved successfully.
File move failed. C:\Windows\temp\dsiwmis.log scheduled to be moved on reboot.
File\Folder C:\Windows\temp\ZLT07de0.TMP not found!

Registry entries deleted on Reboot...

Olgita · May 17, 2012

Results of screen317's Security Check version 0.99.32
Windows 7 x64 (UAC is enabled)
Internet Explorer 9
``````````````````````````````
Antivirus/Firewall Check:
Windows Firewall Disabled!
ZoneAlarm Free Antivirus + Firewall
ZoneAlarm Antivirus
ZoneAlarm Firewall
ZoneAlarm Security
WMI entry may not exist for antivirus; attempting automatic update.
```````````````````````````````
Anti-malware/Other Utilities Check:
MVPS Hosts File
Spybot - Search & Destroy
````````````````````````````````
Process Check:
objlist.exe by Laurent
Spybot Teatimer.exe is disabled!
Symantec Norton Online Backup NOBuAgent.exe
CheckPoint ZoneAlarm vsmon.exe
CheckPoint ZoneAlarm zatray.exe
``````````End of Log````````````

diver79 · May 17, 2012

Hi Olgita,

Looks much better. How is the PC running now? Any more redirects?

Olgita · May 18, 2012

Hi,
looks like no more redirects. Thank you so much for your help!!!

diver79 · May 18, 2012

Congratulations your PC is now feee from infection Follow the below steps to remove infected restore points and tighten your systems security.

Clear infected Restore Points with OTL
We need to run an OTL Fix to remove your old restore points.

Right click OTL.exe and select Run as Administrator to start the program.
Copy and Paste the following code into the

textbox. Do not include the word Code
Code:
```
:commands
[CLEARALLRESTOREPOINTS]
```
Then click the Run Fix button at the top.
Click

.
OTL may ask to reboot the machine. Please do so if asked.
The report should appear in Notepad after the reboot.Copy and Paste that report in your next reply.

Clean up with OTL

Right click OTL.exe and select Run as Administrator to start the program. This will remove all the tools we used to clean your pc.
Close all other programs apart from OTL as this step will require a reboot
On the OTL main screen, press the CleanUp! button
Say Yes to the prompt and then allow the program to reboot your computer.

Update your Antivirus programs and other programs regularly.
Secunia Personal Software Inspector - Copyright © Secunia. This app will monitor programs on your computer for known vulnerabilities. You can set it to auto-update for you, or just prompt you if an update is available. I highly recommend it.
F-secure Health Check - Copyright © F-Secure Corporation. F-Secure Health Check is a free application that tells you if your computer is protected and helps you fix possible security issues.

Microsoft Windows Update
Microsoft releases patches for Windows and Office products regularly to patch up Windows and Office products loopholes and fix any bugs found. Install the updates immediately if they are found.
To update Windows
Go to Start > All Programs > Windows Update > Check for updates.
To update Office
Open up any Office program.
Go to Help > Check for Updates

I would be grateful if you could reply to this post so that I know you have read it and, if you've no other questions, the thread can be closed.

Safe surfing!

diver79.

Olgita · May 19, 2012

I have no other questions. Again, thank you so much for your time and your help! :thanks:

========== COMMANDS ==========
Restore point Set: OTL Restore Point

OTL by OldTimer - Version 3.2.43.0 log created on 05182012_192245

diver79 · May 19, 2012

Olgita said:
I have no other questions. Again, thank you so much for your time and your help! :thanks:

You're very welcome!

Safe surfin!

Redirect issues

Olgita

New member

diver79

New member

Olgita

New member

Olgita

New member

diver79

New member

Olgita

New member

diver79

New member

Olgita

New member

diver79

New member