Hello, sorry for delay :slight_smile:

Please go to: VirusTotal

[*] Click the Choose File button.
[*] Please copy/paste the following text into the ‘File name:’ box:

C:\Program Files\Hear\Hear.exe

[*] Click Open then click the Scan it! button just below.
[*] This will scan the file. Please be patient.
[*] If you get a message saying File already analyzed: click Reanalyse
[*] Once scanned, copy and paste the URL from your browser address bar in your next reply.

Then…

1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

HKCU\...\Run: [COOL] - C:\Users\Carlos\AppData\Roaming\COOL.vbs [102953 2013-10-25] ()
C:\Users\Carlos\AppData\Roaming\COOL.vbs
MountPoints2: {02c6418e-acbc-11e2-bea2-bc5ff4650048} - "G:\setup.exe" 
MountPoints2: {0ef38694-be91-11e2-bec1-bc5ff4650048} - "C:\Windows\system32\RunDLL32.EXE" Shell32.DLL,ShellExec_RunDLL G:\Setup.exe
MountPoints2: {4a107a2e-ea8e-11e2-bf02-bc5ff4650048} - "G:\MotorolaDeviceManagerSetup.exe" -a
MountPoints2: {ce2d033e-c585-11e2-becb-bc5ff4650048} - "I:\Setup.exe"
Startup: C:\Users\Carlos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\COOL.vbs ()
CHR RestoreOnStartup: "hxxp://blekko.com/ws/?source=c3348dd4&toolbarid=blekkotb_031&u=3855FAB0870E7C62CA52A9502816DC04&tbp=homepage"
cmd: ipconfig /flushdns

2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It’s important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.

The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.

How are the things now?