Hi Tigaz,

This FRSTScript (FixList) shall remove that one + some adware remains … TFC shall clean all temp and cache from all user accounts. AdwCleaner is here as addition PUP (adware, toolbar…) scan routine.


FRST’s FixList


1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

Start C:\Program Files (x86)\Bench C:\Users\tigaz_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnnjbeaodpbichjblecaapnmlajmafmi C:\Users\tigaz_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbkiacofncjbllhahfdfgghbklfgkkdh C:\Windows\System32\Tasks\bench-sys C:\ProgramData\YoutubeAdblocker C:\ProgramData\ggreatsaVer C:\ProgramData\9f7efc3c8ee59d6b C:\ProgramData\InstallMate C:\Users\tigaz_000\AppData\Local\Torch C:\Users\HomeGroupUser$\AppData\Local\Torch C:\Users\Guest\AppData\Local\Torch C:\Users\HomeGroupUser$\AppData\Local\Comodo C:\Users\Administrator\AppData\Local\Torch C:\Users\Guest\AppData\Local\Comodo C:\Users\Administrator\AppData\Local\Torch C:\Users\Administrator\AppData\Local\Comod C:\Users\tigaz_000\AppData\Local\Temp\211nohh3x3421.jpg.exe C:\Users\tigaz_000\AppData\Local\Temp\7za.exe C:\Users\tigaz_000\AppData\Local\Temp\Calculator.exe C:\Users\tigaz_000\AppData\Local\Temp\core.exe C:\Users\tigaz_000\AppData\Local\Temp\dxdiag.exe C:\Users\tigaz_000\AppData\Local\Temp\install.exe C:\Users\tigaz_000\AppData\Local\Temp\max.exe C:\Users\tigaz_000\AppData\Local\Temp\MediaPlayer__3137_i319486485_il9265.exe C:\Users\tigaz_000\AppData\Local\Temp\Mobogenie_Setup_2.1.37_506.exe C:\Users\tigaz_000\AppData\Local\Temp\nvStInst.exe C:\Users\tigaz_000\AppData\Local\Temp\setupQaz2o.exe Task: {5319E569-863D-4F15-ACBA-9DD60F31F6E8} - System32\Tasks\bench-sys => C:\Program Files (x86)\Bench\Updater\updater.exe <==== ATTENTION Task: C:\Windows\Tasks\bench-sys.job => C:\Program Files (x86)\Bench\Updater\updater.exe <==== ATTENTION HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://websearch.searchinweb.info/?pid=2145&r=2014/01/28&hid=13303073038000284771&lg=EN&cc=CA&unqvl=47 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://websearch.searchinweb.info/?pid=2145&r=2014/01/28&hid=13303073038000284771&lg=EN&cc=CA&unqvl=47 SearchScopes: HKLM-x32 - DefaultScope {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.searchinweb.info/?l=1&q={searchTerms}&pid=2145&r=2014/01/28&hid=13303073038000284771&lg=EN&cc=CA&unqvl=47 SearchScopes: HKLM-x32 - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.searchinweb.info/?l=1&q={searchTerms}&pid=2145&r=2014/01/28&hid=13303073038000284771&lg=EN&cc=CA&unqvl=47 SearchScopes: HKCU - DefaultScope {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.searchinweb.info/?l=1&q={searchTerms}&pid=2145&r=2014/01/28&hid=13303073038000284771&lg=EN&cc=CA&unqvl=47 SearchScopes: HKCU - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.searchinweb.info/?l=1&q={searchTerms}&pid=2145&r=2014/01/28&hid=13303073038000284771&lg=EN&cc=CA&unqvl=47 CHR Extension: (YTTBookMark) - C:\Users\tigaz_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnnjbeaodpbichjblecaapnmlajmafmi [2014-01-27] CHR Extension: (SNT) - C:\Users\tigaz_000\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbkiacofncjbllhahfdfgghbklfgkkdh [2014-01-27] CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION CMD: ipconfig /flushdns End

2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It’s important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.

The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.


TFC


Please download TFC by OldTimer to your desktop

[*]Please double-click TFC.exe to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
[*]It will close all programs when run, so make sure you have saved all your work before you begin.
[*]Click the Start button to begin the process. Depending on how often you clean temp
files, execution time should be anywhere from a few seconds to a minute
or two. Let it run uninterrupted to completion.
[*]Once it’s finished it should reboot your machine. If it does not, please manually reboot the machine yourself to ensure a complete clean.


AdwCleaner


Please download AdwCleaner by Xplode and save to your Desktop.

Double click on AdwCleaner.exe to run the tool.

[*]Click on the Scan button.
[*]After the scan has finished click on the Clean button.

Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.

[*]After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
[*]Post logfile will also be saved in the C:\AdwCleaner folder.

=====================================

=> Tell me, how is your computer running now?