system
8
Turn SearchSettings in MSCONFIG and then:
1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system
Start
SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZOkiLMwdFQEJrUhxOnbg7hI8xoE2W42M7oNoUk5gUT1KyuAPE1oHhlw2kFb-t2wc9K1Q1Fh4SbhPQsYPohO-1KpzUEDNu4pTbn8fykZFf1CLpvohzKlEOm1KzFtELCNCToHyuqoD4wdiw,,&q={searchTerms}
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZOkiLMwdFQEJrUhxOnbg7hI8xoE2W42M7oNoUk5gUT1KyuAPE1oHhlw2kFb-t2wc9K1Q1Fh4SbhPQsYPohO-1KpzUEDNu4pTbn8fykZFf1CLpvohzKlEOm1KzFtELCNCToHyuqoD4wdiw,,&q={searchTerms}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJlBATeRnAqXYyYJDXLfK6eZOkiLMwdFQEJrUhxOnbg7hI8xoE2W42M7oNoUk5gUT1KyuAPE1oHhlw2kFb-t2wc9K1Q1Fh4SbhPQsYPohO-1KpzUEDNu4pTbn8fykZFf1CLpvohzKlEOm1KzFtELCNCToHyuqoD4wdiQ,,&q={searchTerms}
BHO: free ven - {11111111-1111-1111-1111-110511161180} - C:\Program Files (x86)\free ven\free ven-bho64.dll No File
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
FF Extension: vis - C:\Users\akgun\AppData\Roaming\Mozilla\Firefox\Profiles\33diszw8.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM [2013-10-25]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
C:\Users\akgun\3635win2k.EXE
C:\Users\akgun\CPUID.dll
C:\Users\akgun\FixBlast.exe
C:\Users\akgun\Interactive Test Engine-350-0182.12.exe
C:\Users\akgun\ISUTIL.DLL
C:\Users\akgun\tmaker.exe
BrowserProtect (HKLM-x32\...\{15D2D75C-9CB2-4efd-BAD7-B9B4CB4BC693}) (Version: - Bit89 Inc) <==== ATTENTION
Bundled software uninstaller (HKLM-x32\...\bi_uninstaller) (Version: - ) <==== ATTENTION
Delta Chrome Toolbar (HKLM-x32\...\{177586E7-E42E-4F38-83D1-D15B4AF5B714}) (Version: 1.0.0.0 - DeltaInstaller) <==== ATTENTION
Shopping Helper Smartbar (HKLM-x32\...\{AC6E9B2A-A7E6-4B17-8A6C-29D519673E12}) (Version: 10.215.63.15249 - ReSoft Ltd.) <==== ATTENTION
VIS (HKLM-x32\...\VIS) (Version: - ) <==== ATTENTION
Task: {3A5A6687-8FEE-4415-889E-0EC7441708E4} - System32\Tasks\BrowserProtect => Sc.exe start BrowserProtect <==== ATTENTION
AlternateDataStreams: C:\Users\akgun\rr22.csv:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
AlternateDataStreams: C:\ProgramData\Temp:AC6124CA
FF HKCU\...\Firefox\Extensions: [{58bd07eb-0ee0-4df0-8121-dc9b693373df}] - C:\ProgramData\BrowserProtect\2.6.1095.52\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension
Toolbar: HKLM - Shopping Helper Smartbar - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll (Microsoft Corporation)
Toolbar: HKLM-x32 - Shopping Helper Smartbar - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
CMD: DEL %TEMP%\*.* /F /S /Q
CMD: RD /S /Q %TEMP%
End
2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It’s important that both files, FRST and fixlist.txt are in the same location or the fix will not work.
3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.
.
Re-run FRST and attach here logs