system
14
Re-run OTL.exe.
[*]Copy and paste the following text written inside of the quote box into the Custom Scans/Fixes box.
:OTL
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}: C:\Program Files (x86)\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi [2013-05-02 21:21:44 | 000,037,909 | ---- | M] ()
O2 - BHO: (Wajam) - {A7A6995D-6EE1-4FD1-A258-49395D5BF99C} - C:\Program Files (x86)\Wajam\IE\priam_bho.dll (Wajam)
O2 - BHO: (SnagIt Toolbar Loader) - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files (x86)\TechSmith\Snagit 10\SnagitBHO.dll (TechSmith Corporation)
O2 - BHO: (lucky leap) - {d77aa852-def3-43cb-a3f5-bd679de72f32} - C:\Program Files (x86)\lucky leap\luckyleapbho.dll (luckyleap)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (Snagit) - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files (x86)\TechSmith\Snagit 10\DLLx64\SnagitIEAddin64.dll (TechSmith Corporation)
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (Snagit) - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files (x86)\TechSmith\Snagit 10\SnagitIEAddin.dll (TechSmith Corporation)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-2774669554-1835670337-2381682612-1001\..\Toolbar\WebBrowser: (no name) - {8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - No CLSID value found.
O4:[b]64bit:[/b] - HKLM..\Run: [] File not found
O4 - HKU\S-1-5-21-2774669554-1835670337-2381682612-1001..\Run: [{603380FE-28B7-4EFA-A9B9-A94C1D46A6EA}] "C:\Users\Yoda\Desktop\MixedInKey_Version5\MixedInKey_Version5\MixedInKey_Version5.exe" /cmdloc "HKCU\Software\Mixed In Key LLC AiTemp\{603380FE-28B7-4EFA-A9B9-A94C1D46A6EA}" File not found
O4 - HKU\S-1-5-21-2774669554-1835670337-2381682612-1001..\Run: [Desktop iCalendar Lite.exe] File not found
O33 - MountPoints2\{7662a6e8-2d6c-11e1-bccb-002318d5c991}\Shell - "" = AutoRun
O33 - MountPoints2\{7662a6e8-2d6c-11e1-bccb-002318d5c991}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{e60ee21c-2d53-11e1-9277-002318d5c991}\Shell - "" = AutoRun
O33 - MountPoints2\{e60ee21c-2d53-11e1-9277-002318d5c991}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{e60ee233-2d53-11e1-9277-002318d5c991}\Shell - "" = AutoRun
O33 - MountPoints2\{e60ee233-2d53-11e1-9277-002318d5c991}\Shell\AutoRun\command - "" = E:\AutoRun.exe
[2013-05-29 10:30:49 | 000,000,000 | ---D | C] -- C:\Users\Yoda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam
[2013-05-29 10:30:49 | 000,000,000 | ---D | C] -- C:\Users\Yoda\AppData\Local\Wajam
[2013-05-29 10:30:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Wajam
:files
C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe
:Services
WajamUpdater
:commands
[CREATERESTOREPOINT]
[emptytemp]
[*]Then click the Run Fix button at the top.
[*]Let the program run unhindered; it will reboot the system when it is done and open notepad with logreport. Attach here that logreport.
If the log doesn’t appear, it can be found here:
c:_OTL\MovedFiles\mmddyyyy_hhmmss.log
.
Set MCShield as shown.
http://fotkica.com/thumbs3/1_tmb_52998947_2013-08-31_190944.jpg
Connect the HD to the USB port.
Attach here log