OK, now some probably last fix and we need to rectify your security software.
Also please refrain from using any software by IOBit. This company is known for stealing intelectual properties of Malwarebytes’ and has rather bad reputation around here.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/warning.gif
Multiple Anti-Virus Software
I see that you’re running more than one antivirus program at the same time.
[]Avast
[]Micorsoft Security Essentials
This is a bad idea.
Using more than one AV will not give you any better protection, but may cause interferences between them, slow your machine or even completely block your OS. You should choose only one to stay, and remove any others. Think carefully and stay with only one AV. It should be done before any other steps in malware removal will be taken.
Please uninstall all but one using the tools you may find in the following link: Uninstallers (removal tools) for common Windows antivirus software.
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Fix with Farbar Recovery Scan Tool
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[b] This fix was created for this user for use on that particular machine.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[/b]
Press the
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/WindowsKey.png
- R on your keyboard at the same time. Type Notepad and click OK.
[*]Copy the entire content of the codebox below and paste into the Notepad document:
start
HKLM\...\Run: [] => [X]
SearchScopes: HKCU - 53465CB81CBE469CB45E475CEB94FFF5 URL = http://search.babylon.com/?q={searchTerms}&affID=115917&tt=3712_6&babsrc=SP_ss&mntrId=c0d247cb000000000000000ffec73f0b
CHR Plugin: (MindSpark Toolbar Platform Plugin Stub) - C:\Program Files\ChristmasHolidayLaughs_4m\bar\1.bin\NP4mStub.dll No File
C:\ProgramData\ewqofiw23.dat
EmptyTemp:
C:\Program Files\IObit
C:\Program Files\Yahoo!\Search Protection
HKU\S-1-5-21-2500983434-3591973408-2422651071-500\...\Run: [Advanced SystemCare 6] => "C:\Program Files\IObit\Advanced SystemCare 6\ASCTray.exe" /AutoStart
end
[*]Click File, Save As and type fixlist.txt as the File Name.
Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!
[*]Right-click on
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
XP users click run after receipt of Windows Security Warning - Open File.
8 users will be prompted about Windows SmartScreen protection - click More information and Run.
[*]Press the Fix button just once and wait.
[*]If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
[*]When finished FRST will generate a log on the Desktop, called Fixlog.txt.
Please include it in your reply.
https://sites.google.com/site/cannedfixes/security-check/51c9d14017fa0-SecurityCheck.PNG
Scan with Security Check
Please download Security Check by Screen317 and save it to your desktop.
[*]Right-click on
https://sites.google.com/site/cannedfixes/security-check/51c9d14017fa0-SecurityCheck.PNG
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
[*]Follow onscreen instructions inside the black box. This scan won’t take long.
[*]Soon a notepad document called checkup.txt will open automaticaly.
Please include the content of that document.