Hi skeeter24,
Malware is now disinfected. We shall now use OTL to fix the remains.
Note: this is OTL’s fix, so press RunFix button, not RunScan button.
Re-run OTL.exe.
[*]Copy and paste the following text written inside of the quote box into the Custom Scans/Fixes box.
:OTL
IE - HKU\S-1-5-21-3786237071-1961379503-1528672897-1001\..\SearchScopes\{C5D499DD-5C6B-4389-AC2E-DB1A78EE0997}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3289847&CUI=UN24770683995210289&UM=2
:Files
C:\ProgramData\*.tmp
C:\ProgramData\*.tmp
C:\Windows\*.tmp
:COMMANDS
[EMPTYTEMP]
[*]Then click the Run Fix button at the top.
[*]Let the program run unhindered; it will reboot the system when it is done and open notepad with logreport. Attach here that logreport.
If the log doesn’t appear, it can be found here:
c:_OTL\MovedFiles\mmddyyyy_hhmmss.log