CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
CreateRestorePoint:
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
Handler: WSIEChrome - No CLSID Value
R1 BprotectEx; C:\Windows\System32\drivers\BprotectEx.sys [87360 2014-05-29] (Baidu, Inc.)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2015-03-20] ()
S3 PCFApiUtil; No ImagePath
2015-05-06 18:52 - 2015-05-08 16:10 - 00000000 ____D () C:\ProgramData\Avira
2015-05-03 14:37 - 2015-05-03 14:52 - 00000000 ____D () C:\Program Files (x86)\McAfee Security Scan
2015-05-03 14:37 - 2015-05-03 14:37 - 00000000 ____D () C:\ProgramData\McAfee
2015-05-03 12:55 - 2015-05-03 14:01 - 00246814 _____ () C:\Windows\system32\avgrep.txt
2015-05-02 00:10 - 2015-05-02 00:10 - 00000000 ____D () C:\Users\Franco\AppData\Roaming\AVG
2015-05-02 00:09 - 2015-05-02 00:09 - 00000000 ____D () C:\Users\Franco\AppData\Local\Avg
2015-05-02 00:07 - 2015-05-02 00:11 - 00000000 ____D () C:\ProgramData\AVG
2015-05-01 22:44 - 2015-05-10 12:51 - 00000526 _____ () C:\Windows\Tasks\AVG_SYS_TASK_0215pit.job
2015-05-01 22:44 - 2015-05-10 10:36 - 00000392 _____ () C:\Windows\Tasks\AVG_SYS_TASK_0215pit_DELETE.job
2015-05-01 22:44 - 2015-05-01 22:45 - 00002820 _____ () C:\Windows\System32\Tasks\AVG_SYS_TASK_0215pit
2015-05-01 22:44 - 2015-05-01 22:44 - 00002894 _____ () C:\Windows\System32\Tasks\AVG_SYS_TASK_0215pit_DELETE
2015-05-01 22:44 - 2015-05-01 22:44 - 00000000 ____D () C:\ProgramData\Avg_Update_0215pit
2015-05-01 22:35 - 2015-05-06 10:54 - 00000000 ____D () C:\ProgramData\MFAData
2015-05-01 22:35 - 2015-05-01 22:35 - 00000000 ____D () C:\Users\Franco\AppData\Local\MFAData
2015-04-29 11:52 - 2015-04-29 11:52 - 00000000 ____D () C:\Users\Franco\AppData\Roaming\WinCleaner
2015-04-21 11:20 - 2015-03-26 16:14 - 00000385 _____ () C:\Users\Franco\AppData\Roaming\UWVFQEE
CustomCLSID: HKU\S-1-5-21-1248697500-1778305513-1238575053-1000_Classes\CLSID\{67F4D210-BFC2-4ADD-9A2A-C9B9E1F42C4F}\InprocServer32 -> No File Path
Task: {21A31AE5-D5DF-414C-89A0-E2734C233085} - System32\Tasks\AVG_SYS_TASK_0215pit => C:\ProgramData\Avg_Update_0215pit\AVG-Secure-Search-Update_0215pit.exe [2015-02-17] ()
Task: {3D96EC12-690F-4AB2-86F4-D6B749B3A9DA} - \b2e0fae2-7cef-450e-8ef7-0de243483f10-1-6 No Task File <==== ATTENTION
Task: {7B3A15D5-E8D7-4D45-A9F0-807BA6B87640} - System32\Tasks\SpyHunter4Startup => C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe
Task: {81FD80A2-2725-4967-952E-8120762BAF10} - \b2e0fae2-7cef-450e-8ef7-0de243483f10-1-7 No Task File <==== ATTENTION
Task: {BCF556F5-9CF2-409A-BD97-B1086D51132E} - \b2e0fae2-7cef-450e-8ef7-0de243483f10-10_user No Task File <==== ATTENTION
Task: {D3333CED-DA5B-4850-8FBF-C5A3430DE72A} - \Adobe Flash Player Updater No Task File <==== ATTENTION
Task: {E8C8765B-4E66-4A24-9663-433955CA8C61} - \Rocket Updater No Task File <==== ATTENTION
Task: C:\Windows\Tasks\AVG_SYS_TASK_0215pit.job => C:\ProgramData\Avg_Update_0215pit\AVG-Secure-Search-Update_0215pit.exe
Task: C:\Windows\Tasks\AVG_SYS_TASK_0215pit_DELETE.job => C:\ProgramData\Avg_Update_0215pit\AVG-Secure-Search-Update_0215pit.exe
C:\Windows\System32\drivers\BprotectEx.sys
C:\Windows\System32\DRIVERS\EsgScanner.sys
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: ipconfig /flushdns
CMD: netsh winsock reset catalog
CMD: netsh int ip reset c:\resetlog.txt
CMD: ipconfig /release
CMD: ipconfig /renew
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
EmptyTemp:
CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that
THEN
Please download AdwCleaner by Xplode onto your desktop.
[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S0].txt as well.
