Let me know how the computer is after this
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
CreateRestorePoint: HKLM Group Policy restriction on software: C:\Program Files\AVAST Software <====== ATTENTION HKU\S-1-5-21-1751710046-3777886213-2851062482-1000\...\Run: [gpmmrbml] => "C:\Users\char\AppData\Local\psxcjanu.exe" AppInit_DLLs-x32: c:\progra~3\browse~1\261095~1.52\{c16c1~1\browse~1.dll => "c:\progra~3\browse~1\261095~1.52\{c16c1~1\browse~1.dll" File Not Found HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\S-1-5-21-1751710046-3777886213-2851062482-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION URLSearchHook: HKU\S-1-5-21-1751710046-3777886213-2851062482-1000 - (No Name) - {196252dc-bf6d-4aa2-bb39-038d9495b561} - No File URLSearchHook: HKU\S-1-5-21-1751710046-3777886213-2851062482-1000 - (No Name) - {7b13ec3e-999a-4b70-b9cb-2617b8323822} - No File URLSearchHook: HKU\S-1-5-21-1751710046-3777886213-2851062482-1000 - (No Name) - {de6c5f41-7812-41c4-8a87-30f0bfbe0a3e} - No File URLSearchHook: HKU\S-1-5-21-1751710046-3777886213-2851062482-1000 - (No Name) - {327f75ed-061b-4339-8cc6-5dd45ad1396d} - C:\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\57SrcAs.dll (MindSpark) SearchScopes: HKLM -> DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search-results.com/sr?src=ieb&appid=169&systemid=406&sr=0&q={searchTerms} SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search-results.com/sr?src=ieb&appid=169&systemid=406&sr=0&q={searchTerms} SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search-results.com/sr?src=ieb&appid=169&systemid=406&sr=0&q={searchTerms} BHO-x32: No Name -> {074d3229-0a22-491b-b9dd-ff3171d75f25} -> No File BHO-x32: Search Assistant BHO -> {0eeaa2c3-0cd7-4364-b82e-f9257081c860} -> C:\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\57SrcAs.dll (MindSpark) BHO-x32: ArcadeCandy Games -> {AB6BD08C-DB6B-4F02-8A22-4BD343E990FF} -> C:\Users\char\AppData\Local\ArcadeCandy\candyEX.dll (ArcadeCandy LLC) Toolbar: HKLM - No Name - !{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - No File Toolbar: HKLM - No Name - !{a6547405-a964-4600-8326-e91c95218964} - No File Toolbar: HKLM - No Name - !{a899079d-206f-43a6-be6a-07e0fa648ea0} - No File Toolbar: HKLM-x32 - No Name - !{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - No File Toolbar: HKLM-x32 - No Name - !{a6547405-a964-4600-8326-e91c95218964} - No File Toolbar: HKLM-x32 - No Name - !{a899079d-206f-43a6-be6a-07e0fa648ea0} - No File Toolbar: HKLM-x32 - Marine Aquarium Lite - {07189b84-b33b-4a1e-9b32-ad203c983c20} - C:\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin\57bar.dll (MindSpark) Toolbar: HKU\S-1-5-21-1751710046-3777886213-2851062482-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File Toolbar: HKU\S-1-5-21-1751710046-3777886213-2851062482-1000 -> No Name - {196252DC-BF6D-4AA2-BB39-038D9495B561} - No File Toolbar: HKU\S-1-5-21-1751710046-3777886213-2851062482-1000 -> No Name - {7B13EC3E-999A-4B70-B9CB-2617B8323822} - No File Toolbar: HKU\S-1-5-21-1751710046-3777886213-2851062482-1000 -> No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\system32\urlmon.dll (Microsoft Corporation) Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - No File FF Extension: No Name - C:\Program Files (x86)\MarineAquarium3Free_57\bar\1.bin [2013-10-01] S1 hlisyywj; \??\C:\Windows\system32\drivers\hlisyywj.sys [X] 2015-01-15 12:05 - 2015-01-15 12:05 - 00055104 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\qbmghztm.sys 2015-01-13 15:50 - 2015-01-13 15:51 - 00000000 ___DC () C:\Users\char\AppData\Local\{0ECD5AAD-A6CE-4637-AA60-2E9C6974BCEC} 2015-01-12 20:19 - 2015-01-12 20:19 - 00000000 ____D () C:\Users\ron\AppData\Local\{65BDC442-7A25-40C6-8B83-BF99AC764796} 2015-01-12 16:26 - 2015-01-12 16:26 - 00000000 ___DC () C:\Users\char\AppData\Local\{3A6883E0-6B53-4A0E-9C1A-EA2537E12B4E} 2015-01-12 16:24 - 2015-01-12 16:24 - 00000000 ___DC () C:\Users\char\AppData\Local\{B073D1E3-A9FA-4588-BD3E-F3D8442DD617} 2015-01-08 11:16 - 2015-01-08 11:16 - 00000000 ___DC () C:\Users\char\AppData\Local\{F69CEB44-0C7E-4C7F-8134-1508AE1EF0FB} 2015-01-06 11:05 - 2015-01-06 11:05 - 00000000 ___DC () C:\Users\char\AppData\Local\{04E2C566-C920-4957-B21A-5574AE2EA590} 2015-01-04 12:19 - 2015-01-04 12:19 - 00000000 ___DC () C:\Users\char\AppData\Local\{AD826EA3-6532-432D-B411-E496F4D73CA1} 2015-01-02 13:27 - 2015-01-02 13:27 - 00309665 ____C () C:\Users\char\AppData\Local\fxcgfwae.exe 2014-12-31 10:41 - 2014-12-31 10:41 - 00309659 ____C () C:\Users\char\AppData\Local\gdsobxww.exe 2014-12-30 15:57 - 2014-12-30 15:57 - 00296338 ____C () C:\Users\char\AppData\Local\inolwqmf.exe 2014-12-30 11:27 - 2014-12-30 11:27 - 00000000 ___DC () C:\Users\char\AppData\Local\{E8F8E79F-AC1B-4F4A-8FC0-3CE68CE9C47D} 2014-12-29 19:15 - 2014-12-29 19:15 - 00366019 ____C () C:\Users\char\AppData\Local\ukbsvggj.exe 2014-12-28 13:24 - 2014-12-28 13:24 - 00259520 ____C () C:\Users\char\AppData\Local\gwclotkb.exe 2014-12-27 08:39 - 2014-12-27 08:39 - 00259430 ____C () C:\Users\char\AppData\Local\vuvvfqux.exe 2014-12-26 10:34 - 2014-12-26 10:34 - 00292207 ____C () C:\Users\char\AppData\Local\fmjsxmaa.exe 2015-01-25 10:21 - 2014-12-23 18:02 - 00000000 ___DC () C:\Users\char\AppData\Local\{3f38a78d-6480-afb5-0d9a-6373975bfc96} 2015-01-20 18:45 - 2014-03-09 11:33 - 00000000 ___DC () C:\Users\char\AppData\Local\Torch 2015-01-13 22:52 - 2014-12-23 12:28 - 00000000 ___DC () C:\Users\char\AppData\Roaming\Doepexmo 2015-01-13 22:52 - 2014-12-22 12:45 - 00000000 ___DC () C:\Users\char\AppData\Roaming\Ykqepyta 2014-12-24 00:14 - 2014-12-24 00:14 - 0300351 ____C () C:\Users\char\AppData\Local\cbkwdopx.exe 2014-10-21 09:10 - 2014-10-21 09:10 - 0068415 ____C () C:\Users\char\AppData\Local\cbtbddll 2014-12-26 10:34 - 2014-12-26 10:34 - 0292207 ____C () C:\Users\char\AppData\Local\fmjsxmaa.exe 2015-01-02 13:27 - 2015-01-02 13:27 - 0309665 ____C () C:\Users\char\AppData\Local\fxcgfwae.exe 2014-12-31 10:41 - 2014-12-31 10:41 - 0309659 ____C () C:\Users\char\AppData\Local\gdsobxww.exe 2014-10-22 01:35 - 2014-10-22 01:35 - 0103424 ____C () C:\Users\char\AppData\Local\ghatkhot.exe 2014-12-28 13:24 - 2014-12-28 13:24 - 0259520 ____C () C:\Users\char\AppData\Local\gwclotkb.exe 2014-12-30 15:57 - 2014-12-30 15:57 - 0296338 ____C () C:\Users\char\AppData\Local\inolwqmf.exe 2014-10-21 12:43 - 2014-10-21 12:43 - 0103424 ____C () C:\Users\char\AppData\Local\ppxiugvf.exe 2014-10-21 13:23 - 2014-10-21 13:23 - 0103424 ____C () C:\Users\char\AppData\Local\qbosjhkw.exe 2014-10-22 08:49 - 2014-10-22 08:49 - 0103424 ____C () C:\Users\char\AppData\Local\qltqiavj.exe 2014-10-23 09:45 - 2014-10-23 09:45 - 0577536 ____C () C:\Users\char\AppData\Local\qwcmuhuc.exe 2014-10-21 19:17 - 2014-10-21 19:17 - 0095232 ____C () C:\Users\char\AppData\Local\scmfruix.exe 2014-12-29 19:15 - 2014-12-29 19:15 - 0366019 ____C () C:\Users\char\AppData\Local\ukbsvggj.exe 2014-12-27 08:39 - 2014-12-27 08:39 - 0259430 ____C () C:\Users\char\AppData\Local\vuvvfqux.exe 2011-09-07 17:34 - 2011-09-07 17:34 - 0000057 ____C () C:\ProgramData\Ament.ini 2011-05-18 02:29 - 2011-05-18 02:38 - 0000208 ____C () C:\ProgramData\c2787NbJhJmF0834 C:\Users\ron\AppData\Local\{307f42c6-7886-5c73-8c77-478f05b33c7e} C:\Users\char\AppData\Local\psxcjanu.exe C:\Windows\system32\drivers\hlisyywj.sysEmptyTemp:
CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that
THEN
Please download AdwCleaner by Xplode onto your desktop.
[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.