Hi,

Re-run OTL.exe.

[*]Copy and paste the following text written inside of the quote box into the Custom Scans/Fixes box.



:commands
[CREATERESTOREPOINT]

:OTL
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-2059696131-4009461580-3890389855-1000\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O33 - MountPoints2\{3d6c7641-0ed5-11e0-ae02-90e6ba59b0f4}\Shell - "" = AutoRun
O33 - MountPoints2\{3d6c7641-0ed5-11e0-ae02-90e6ba59b0f4}\Shell\AutoRun\command - "" = F:\unlock.exe autoplay=true
O33 - MountPoints2\{8815b8d6-1f03-11df-9416-90e6ba59b0f4}\Shell - "" = AutoRun
O33 - MountPoints2\{8815b8d6-1f03-11df-9416-90e6ba59b0f4}\Shell\AutoRun\command - "" = D:\INSTALL.EXE
O33 - MountPoints2\{989eaca2-4cfc-11e0-9028-90e6ba59b0f4}\Shell - "" = AutoRun
O33 - MountPoints2\{989eaca2-4cfc-11e0-9028-90e6ba59b0f4}\Shell\AutoRun\command - "" = F:\unlock.exe autoplay=true
@Alternate Data Stream - 126 bytes -> C:\ProgramData\Temp:BEB15613
@Alternate Data Stream - 110 bytes -> C:\ProgramData\Temp:90EE3BE1

:files
ipconfig /flushdns /c
netsh int ip reset c:\resetlog.txt /c

:commands
[purity]
[emptytemp]


[*]Then click the Run Fix button at the top.
[*]Let the program run unhindered; it will reboot the system when it is done and open notepad with logreport. Attach here that logreport.[/list]

If the log doesn’t appear, it can be found here:

c:_OTL\MovedFiles\mmddyyyy_hhmmss.log

======== Next =========

Please download zoek.exe and save it to your desktop.

[list]
[*] Close any open browsers.

[*] Temporarily disable your AntiVirus program. (If necessary)
If you are unsure how to do this please read this or this Instruction.

[*] Double click on zoek.exe to run the tool .
Please wait while the tool does not start…

[*] Copy the text present inside the code box below and paste it into the large window in the zoek tool:



process;
srinfo;
systemscpecs;
installedprogs;
C:\Program Files\ATKGFNEX\GFNEXSrv.exe;i
C:\Windows\system32\services.exe;i
C:\Windows\SysNative\services.exe;i
filesrcm;
startupall;
skipfix-iedefaults;
firefoxlook;
chromelook;



[*] Click on
http://www.mcshield.net/personal/magna86/Images/Run%20Script%20by%20zoek.png
button
Please wait until a logreport will open (this can be after reboot)

[*] Save notepad to your Desktop and attach here zoek-results.log

Note: It will also create a log in the C:\ directory named “zoek-results.log