system
13
- Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system
Start
MountPoints2: {0b6eebf2-ddb2-11e2-aa39-642737dac002} - G:\AutoRun.exe
MountPoints2: {0b6eec04-ddb2-11e2-aa39-642737dac002} - G:\AutoRun.exe
MountPoints2: {2e7b8ab3-bda4-11e1-a933-642737dac002} - H:\.\Setup.exe AUTORUN=1
MountPoints2: {7a378972-dfec-11e2-ac30-642737dac002} - G:\AutoRun.exe
MountPoints2: {7a37897d-dfec-11e2-ac30-642737dac002} - G:\AutoRun.exe
MountPoints2: {9c17fba7-de88-11e2-a7a1-642737dac002} - I:\AutoRun.exe
MountPoints2: {b6cfa238-960f-11e2-8ad2-642737dac002} - G:\.\StartModem.exe
SearchScopes: HKCU - {1A65A1A9-D546-4900-977F-FBA080E95536} URL = http://searchou.com/?q={searchTerms}&id=12087f38000000000000582c80139263&affilt=5&r=582
BHO: SmileysWeLoveToolbar - {e4ef8a64-0a30-48f5-b3fe-5fda978da775} - C:\Program Files\SqueekyChocolate, LLC\Smileys We Love Toolbar for IE\adxloader.dll ()
Toolbar: HKLM - privitize Toolbar - {1C46A0DD-D53E-46C4-A435-CA11103E255E} - C:\Program Files\Industriya\privitize\1.8.21.6\privitizeTlbr.dll No File
Toolbar: HKLM - SmileysWeLove - {cf0f43ab-9c23-4d7b-8040-201b82844854} - C:\Program Files\SqueekyChocolate, LLC\Smileys We Love Toolbar for IE\adxloader.dll ()
FF Homepage: hxxp://www.qvo6.com/?utm_source=b&utm_medium=adks&from=adks&uid=WDCXWD3200BPVT-75JJ5T0_WD-WXL1EA1CCTRRCCTRR&ts=1376061392
FF SelectedSearchEngine: qvo6
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ugxawyng.default\searchplugins\privitize.xml
FF Extension: No Name - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ugxawyng.default\Extensions\05dd836e-2cbd-4204-9ff3-2f8a8665967d@a8876730-fb0c-4057-a2fc-f9c09d438e81.com
FF Extension: Privitize.com - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ugxawyng.default\Extensions\ffxtlbr@privitize.com
FF Extension: WebCake - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ugxawyng.default\Extensions\plugin@getwebcake.com
FF Extension: uTorrentControl_v6 - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ugxawyng.default\Extensions\{96f454ea-9d38-474f-b504-56193e00c1a5}
FF Extension: torntv2 - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\ugxawyng.default\Extensions\torntv2@torntv.com.xpi
CHR HomePage: hxxp://www.qvo6.com/?utm_source=b&utm_medium=adks&from=adks&uid=WDCXWD3200BPVT-75JJ5T0_WD-WXL1EA1CCTRRCCTRR&ts=1376061392
CHR RestoreOnStartup: "hxxp://www.qvo6.com/?utm_source=b&utm_medium=adks&from=adks&uid=WDCXWD3200BPVT-75JJ5T0_WD-WXL1EA1CCTRRCCTRR&ts=1376061392"
CHR DefaultSearchURL: (qvo6) - http://search.qvo6.com/web/?utm_source=b&utm_medium=adks&from=adks&uid=WDCXWD3200BPVT-75JJ5T0_WD-WXL1EA1CCTRRCCTRR&ts=1376061392&type=default&q={searchTerms}
CHR DefaultSuggestURL: (qvo6) - "suggest_url": "",
CHR Extension: (hosts) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnlomafmkpiclmaaekkhpoecnclldmaa\1.23.4_0
CHR HKLM\...\Chrome\Extension: [dhfcbmlocifngpbjdpgnkbjmgkadkjpp] - C:\Program Files\Industriya\privitize\1.8.21.6\privitize.crx
CHR HKLM\...\Chrome\Extension: [fjbbjfdilbioabojmcplalojlmdngbjl] - C:\Users\User\AppData\Local\Temp\bhfiles\smileyswelovetoolbar_3_0_8_0.crx
CHR HKLM\...\Chrome\Extension: [nbmafkdmkkckhggblphicnnhlgljnoje] - C:\Program Files\TornTV.com\torn2_10.crx
Task: {18C2D485-4F55-4A17-B420-610461D317B2} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files\Ask.com\UpdateTask.exe No File
End
-
Save notepad as fixlist.txt
NOTE. It’s important that both files, FRST and fixlist.txt are in the same location or the fix will not work.
-
Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.
Re-run FRST and here attach FRST.txt