Got a virus (pup)

Viruses and worms
1

I followed instructions. I will attach logs. If I am missing something, let me know

Thanks

2

PUP is not a virus, that why pup scan is default off in quick/full scan… but on in boot scan

PUP = Possible Unwanted program… so you need to know what is detected…and if you want it or not :wink:

what file is detected?
what is the file location…full file path?

3

These are the only PUPs I see

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF


:OTL
FF - prefs.js..keyword.URL: "http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?st=kwd&ptb=4D28AAE2-D5E0-4C5F-A3DF-605A4CB6B304&n=77ed7c85&ind=2012052613&id=YJxdm004CTus&ptnrS=YJxdm004CTus&searchfor="
[2012/11/20 10:23:36 | 000,001,590 | ---- | M] () -- C:\Users\Sean\AppData\Roaming\Mozilla\Firefox\Profiles\6fwag57h.default\searchplugins\ixquick-https.xml
O2 - BHO: (Shop to Win 14) - {8C423C72-F06E-43B3-A3E8-A435FFF9E9E0} - C:\Program Files (x86)\Shop to Win 14\Shop to Win 14.dll File not found
O3 - HKLM\..\Toolbar: (Guffins) - {de2fdf7c-2637-4ba3-b427-3fce2d331db5} - C:\Program Files (x86)\Guffins\bar\1.bin\u4bar.dll File not found
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-362863374-1084439285-3182670638-1001\..\Toolbar\WebBrowser: (no name) - {66BD2442-241B-44CD-8C7A-B51037053CDB} - No CLSID value found.
[2011/12/10 00:59:45 | 000,014,036 | -HS- | C] () -- C:\Users\Sean\AppData\Local\xtkyvq2w2hcu8gfj0iss0k137v7s
[2011/12/10 00:59:45 | 000,014,036 | -HS- | C] () -- C:\ProgramData\xtkyvq2w2hcu8gfj0iss0k137v7s
[2011/12/09 07:28:56 | 000,013,764 | -HS- | C] () -- C:\Users\Sean\AppData\Local\t6le76k8mp5pca
[2011/12/09 07:28:56 | 000,013,764 | -HS- | C] () -- C:\ProgramData\t6le76k8mp5pca

:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.