Thank you David

songbird72884

We will run OTS again but slightly differently this time, as OTS is unable to remove a service that is partially uninstalled (Norton)

Start OTS. Copy/Paste the information in the quotebox below into the panel where it says “Paste fix here” and then click the Run Fix button.

[Unregister Dlls]
[Registry - Safe List]
< Internet Explorer Settings [HKEY_USERS\S-1-5-21-2150399044-275700037-2335568422-1002\] > -> 
YN -> HKEY_USERS\S-1-5-21-2150399044-275700037-2335568422-1002\: URLSearchHooks\\"{472734EA-242A-422b-ADF8-83D1E48CC825}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
< FireFox Settings [Prefs.js] > -> C:\Users\Gareth\AppData\Roaming\Mozilla\FireFox\Profiles\q8zn0dnh.default\prefs.js
YN -> network.proxy.http -> "127.0.0.1"
YN -> network.proxy.http_port -> 50370
YN -> network.proxy.type -> 4
< FireFox Extensions [Program Folders] > -> 
YY -> Java Console   -> C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
YY -> Java Console   -> C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
YY -> XULRunner -> C:\USERS\GARETH\APPDATA\LOCAL\{7401291A-E0D5-460C-9BF6-3CB24B5DC176}
< Internet Explorer ToolBars [HKEY_USERS\.DEFAULT\] > -> HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\
YN -> WebBrowser\\"{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
< Internet Explorer ToolBars [HKEY_USERS\S-1-5-18\] > -> HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Toolbar\
YN -> WebBrowser\\"{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.]
< Run [HKEY_USERS\S-1-5-21-2150399044-275700037-2335568422-1002\] > -> HKEY_USERS\S-1-5-21-2150399044-275700037-2335568422-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
YY -> "Vguyucegaq" -> C:\Users\Gareth\AppData\Local\ohuraqilaquv.dll [rundll32.exe "C:\Users\Gareth\AppData\Local\ohuraqilaquv.dll",Startup]
[Files/Folders - Created Within 30 Days]
NY ->  {7401291A-E0D5-460C-9BF6-3CB24B5DC176} -> C:\Users\Gareth\AppData\Local\{7401291A-E0D5-460C-9BF6-3CB24B5DC176}
NY ->  ohuraqilaquv.dll -> C:\Users\Gareth\AppData\Local\ohuraqilaquv.dll
[Files/Folders - Modified Within 30 Days]
NY ->  Hgidupilidarex.bin -> C:\Users\Gareth\AppData\Local\Hgidupilidarex.bin
NY ->  1103toten.exe -> C:\Users\Gareth\AppData\Roaming\1103toten.exe
NY ->  81f82bi7.bat -> C:\Users\Gareth\AppData\Roaming\81f82bi7.bat
[Files - No Company Name]
NY ->  1103toten.exe -> C:\Users\Gareth\AppData\Roaming\1103toten.exe
NY ->  81f82bi7.bat -> C:\Users\Gareth\AppData\Roaming\81f82bi7.bat
NY ->  i2152v11p7d4sg8 -> C:\Users\Gareth\AppData\Local\i2152v11p7d4sg8
NY ->  i2152v11p7d4sg8 -> C:\ProgramData\i2152v11p7d4sg8
NY ->  Nfidiyerez.dat -> C:\Users\Gareth\AppData\Local\Nfidiyerez.dat
NY ->  Hgidupilidarex.bin -> C:\Users\Gareth\AppData\Local\Hgidupilidarex.bin
NY ->  mgxoschk.ini -> C:\Windows\mgxoschk.ini
[Custom Items]
:Files
c:\RecInfo
:end
[Empty Temp Folders]
[EmptyFlash]
[CreateRestorePoint]


  

The fix should only take a very short time. When the fix is completed a message box will popup telling you that it is finished. Click the Ok button and Notepad will open with a log of actions taken during the fix. Post that information back here

I will review the information when it comes back in.