- Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system
START
HKCU\...\Run: [SSync] - C:\Users\James\AppData\Roaming\SSync\SSync.exe [41984 2012-12-18] ()
HKCU\...\Run: [SCheck] - C:\Users\James\AppData\Roaming\SCheck\SCheck.exe [36864 2013-04-09] ()
HKCU\...\Run: [Intermediate] - C:\Users\James\AppData\Roaming\Intermediate\Intermediate.exe [41984 2012-12-18] ()
SearchScopes: HKLM - DefaultScope {5D57F309-FC2C-42CF-8ADB-394FD2ACAA2D} URL =
SearchScopes: HKCU - DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://searchqm.com/search.php?channel=msus200fbdgy6&q={searchTerms}
SearchScopes: HKCU - {5D57F309-FC2C-42CF-8ADB-394FD2ACAA2D} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3291325&CUI=UN30606003202646417&UM=2
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://searchqm.com/search.php?channel=msus200fbdgy6&q={searchTerms}
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2465} URL =
Task: {00B3E2AB-7E8E-4B01-8076-84B1F4662096} - System32\Tasks\4677 => C:\Windows\System32\wscript.exe [2009-04-11] (Microsoft Corporation)
Task: {44B100C6-2C0E-46BA-9392-CDF774936C14} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-2412800826-1674594253-1344594430-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe No File
Task: {4C3E9186-DAA0-4075-9792-7CBA79947C3E} - System32\Tasks\AVG\PC Tuneup\Integrator\Start On James Logon => C:\Program Files\AVG\AVG PC Tuneup\BoostSpeed.exe No File
Task: {5166C57E-8FC6-457F-8EF0-1CDB9696BE5C} - System32\Tasks\FixCleaner Startup => C:\Program Files\FixCleaner\FixCleaner.exe No File
Task: {53EDB7F0-3464-481D-AB87-1148DEF36951} - System32\Tasks\FixCleaner Scan => C:\Program Files\FixCleaner\FixCleaner.exe No File
Task: {EA438217-F2DA-4B2A-8E28-7AEDE52B9719} - System32\Tasks\Game_Booster_AutoUpdate => C:\Program Files\IObit\Game Booster 3\AutoUpdate.exe No File
Task: {F8F964FA-FC65-4A88-BADD-8B83DAAA6BD7} - System32\Tasks\LyricsSing Update => C:\Program Files\LyricSing\lSing.exe No File
C:\Users\James\AppData\Roaming\SSync
C:\Users\James\AppData\Roaming\SCheck
C:\Users\James\AppData\Roaming\Intermediate
C:\Users\James\AppData\Local\d3d8caps.dat
C:\Program Files\Conduit
C:\Program Files\AVG
C:\Program Files\FixCleaner
C:\Program Files\LyricSing
File: C:\Windows\System32\C2MP\UpdateChecker.exe
Folder: C:\Users\James\AppData\Roaming\library_dir
CMD: ipconfig /flushdns
END
-
Save notepad as fixlist.txt
NOTE. It’s important that both files, FRST and fixlist.txt are in the same location or the fix will not work.
-
Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.
=========== THEN ============
Re-run FRST.exe ;
Put checkmark on box for options “Addition.txt”
Press Scan button …
Please attach here bouth fresh created FRST and Addition.txt logs