How the heck do you get rid of this? Everytime I change my homepage to a different site and reboot the computer, it goes right back to that, and it's very annoying. Any help appreciated!

Hi,

Welcome to HelpMyOs.com!

Please download OTL to your Desktop. (If you already have it downloaded, then just follow the instructions below).

• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  
• Under the Custom Scan box paste this in
  
  %systemroot%\*. /mp /s
  %systemroot%\system32\*.dll /lockedfiles
  %systemroot%\system32\*.exe /lockedfiles
  %systemroot%\Tasks\*.job /lockedfiles
  %systemroot%\system32\drivers\*.sys /lockedfiles
  %systemroot%\System32\config\*.sav
  %systemroot%\system32\*.sys
  %systemroot%\system32\drivers\*.dll
  %systemroot%\system32\drivers\*.ini
  %systemroot%\system32\drivers\*.exe
  %SYSTEMDRIVE%\*.*
  %PROGRAMFILES%\*.
  %appdata%\*.*
  netsvcs
  msconfig
  safebootminimal
  safebootnetwork
  activex
  drivers32
  /md5start
  eventlog.dll
  scecli.dll
  netlogon.dll
  cngaudit.dll
  sceclt.dll
  ntelogon.dll
  logevent.dll
  iaStor.sys
  nvstor.sys
  atapi.sys
  IdeChnDr.sys
  viasraid.sys
  AGP440.sys
  vaxscsi.sys
  nvatabus.sys
  viamraid.sys
  nvata.sys
  nvgts.sys
  iastorv.sys
  ViPrt.sys
  eNetHook.dll
  ahcix86.sys
  KR10N.sys
  disk.sys
  nvstor32.sys
  ahcix86s.sys
  nvrd32.sys
  symmpi.sys
  adp3132.sys
  mv61xx.sys
  usbstor.sys
  /md5stop
  CREATERESTOREPOINT
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
  
  
• Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  
  
  
  • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
    
  • Please copy (Edit->Select All, Edit->Copy) and paste (Edit->Paste) the contents of these files, one at a time

Note: in the event that OTL fails to run, please use alternate download links to try again:

http://oldtimer.geekstogo.com/OTL.com
http://oldtimer.geekstogo.com/OTL.scr

OTL Extras logfile created on: 10/12/2010 4:54:06 PM - Run 1
OTL by OldTimer - Version 3.2.15.1 Folder = C:\Users\Nelson\Desktop
64bit-Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

6.00 Gb Total Physical Memory | 4.00 Gb Available Physical Memory | 65.00% Memory free
12.00 Gb Paging File | 10.00 Gb Available in Paging File | 83.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 683.95 Gb Total Space | 467.42 Gb Free Space | 68.34% Space Free | Partition Type: NTFS
Drive D: | 14.65 Gb Total Space | 4.45 Gb Free Space | 30.36% Space Free | Partition Type: NTFS
Drive K: | 6.22 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive N: | 1.86 Gb Total Space | 1.35 Gb Free Space | 72.74% Space Free | Partition Type: FAT

Computer Name: NELSON-PC | User Name: Nelson | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" ()
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l ()
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] -- cmd.exe /s /k pushd "%V" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"AutoUpdateDisableNotify" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = 9F 9E 16 8C DC 5B C8 01 [binary data]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"oobe_av" = 1

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files (x86)\BitTorrent\bittorrent.exe" = C:\Program Files (x86)\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent -- File not found
"C:\Program Files (x86)\BitTorrent\bittorrent.exe" = C:\Program Files (x86)\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent -- File not found


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{214D22A5-0F4D-44FC-A79E-2F9EA448A3AE}" = lport=138 | protocol=17 | dir=in | app=system |
"{27E785BC-00BA-4B3B-85C4-96D017637699}" = rport=445 | protocol=6 | dir=out | app=system |
"{4D55E244-3C25-4A5A-B0CD-F29144EF3E94}" = lport=139 | protocol=6 | dir=in | app=system |
"{5EB38011-FDCF-45FF-81B4-1145F4884959}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{7BC0C40F-189E-4F27-AB6A-5487AAAD0745}" = lport=2869 | protocol=6 | dir=in | app=system |
"{805DFE31-618C-48E7-9B76-7FFA24482ED8}" = lport=445 | protocol=6 | dir=in | app=system |
"{8A169C19-DE9A-45AE-9428-4F0A2B0F0224}" = rport=138 | protocol=17 | dir=out | app=system |
"{974D7D8F-4420-49C9-B03C-9A7A48B2A28A}" = rport=139 | protocol=6 | dir=out | app=system |
"{A9AB6E2C-4E44-48B1-B8B8-1877BC49678A}" = lport=137 | protocol=17 | dir=in | app=system |
"{B62D1792-5B1D-49D9-B244-36663EC43E94}" = rport=137 | protocol=17 | dir=out | app=system |
"{D9D26DFE-15DA-411E-AB93-AAECD0DF7C98}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{DA16DC98-1DF9-4D1F-A4C9-83DDDB1A2CA6}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01002DC9-AEBB-434E-8840-327B0F7C0179}" = protocol=6 | dir=in | app=c:\program files (x86)\iwin games\webupdater.exe |
"{03FF632E-2A7F-4FEA-B0F1-7CC1B91F3E70}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{055AAE12-BC7F-4311-8A40-04382AAFC562}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{0AE2BB41-F0E7-42EA-8D28-D1291D5F80AA}" = dir=in | app=c:\program files (x86)\avg\avg8\avgupd.exe |
"{0B947AEA-B146-4A24-A720-C06A5A46846D}" = protocol=6 | dir=in | app=c:\users\nelson\appdata\local\temp\~os57f4.tmp\rlvknlg.exe |
"{0F32A217-A043-49CB-9060-37043C405B32}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\aol\loader\aolload.exe |
"{0F877857-594B-415A-A232-026796FC673B}" = protocol=17 | dir=in | app=c:\program files (x86)\aim6\aim6.exe |
"{11C80A53-0ADE-4A27-B0D5-5E6BB99540E3}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\aol\loader\aolload.exe |
"{1C770CFE-F9B3-482A-9254-A9586A369995}" = protocol=17 | dir=in | app=c:\program files (x86)\stardock games\demigod demo\bin\demigod.exe |
"{2022909C-3B8C-40F7-84DB-3CBBD829AF49}" = protocol=6 | dir=in | app=c:\program files (x86)\frostwire\frostwire.exe |
"{2588FBCF-B87C-413A-A571-7DB8B215CE8C}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\aol\loader\aolload.exe |
"{38D16407-036C-4142-B0DD-B277136FDDC2}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{3B870EB5-6662-421E-A8FA-B6C5EF839302}" = protocol=17 | dir=in | app=c:\program files (x86)\relevantknowledge\rlvknlg.exe |
"{5344E1AD-2823-484A-BFAB-F6D765393C03}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{6734A5E6-352E-4AED-AA0B-7CF516D47984}" = protocol=17 | dir=in | app=c:\program files (x86)\frostwire\frostwire.exe |
"{6EF757A4-A0DB-466D-B3CA-955546A3A52A}" = dir=in | app=c:\program files (x86)\avg\avg8\avgemc.exe |
"{70A4A7C0-0460-4D3B-A69A-959A7F56FA7C}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{72181CFC-CDB3-415A-8DDC-2F780D3249C4}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{7A01D210-487B-4E37-B3B9-DD8B3AB59721}" = protocol=6 | dir=in | app=c:\program files (x86)\aim\aim.exe |
"{8010030C-97E0-4508-9CE1-7F0CB0B62FA3}" = protocol=17 | dir=in | app=c:\program files (x86)\iwin games\webupdater.exe |
"{80338C8C-4FEA-4F8F-B159-5F9475D13931}" = protocol=6 | dir=in | app=c:\unreal anthology\ut2004\system\ut2004.exe |
"{8490058A-8847-4FB9-90FB-9465DB8DC131}" = protocol=6 | dir=in | app=c:\program files (x86)\yahoo!\messenger\yahoomessenger.exe |
"{9C78F587-88AA-4540-B34A-7D2CD2A9EBBA}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\aol\loader\aolload.exe |
"{9E9DD7AC-DE59-4C05-9ADF-A09E51174063}" = dir=in | app=c:\program files (x86)\avg\avg8\avgnsa.exe |
"{9EAC3807-895A-4CF0-B5B7-424DAF552AA2}" = protocol=6 | dir=in | app=c:\program files (x86)\iwin games\iwingames.exe |
"{A28FB256-F791-49C6-B058-5FD07E70630E}" = protocol=6 | dir=in | app=c:\program files (x86)\aim6\aim6.exe |
"{A8E11602-2783-4B4F-96AD-41D412013472}" = protocol=17 | dir=in | app=c:\program files (x86)\iwin games\iwingames.exe |
"{AFF82D9B-6C49-42F0-B3B2-7448A89814D4}" = protocol=17 | dir=in | app=c:\program files (x86)\yahoo!\messenger\yahoomessenger.exe |
"{C3E81063-79AB-48B2-A5E8-3239609913C8}" = protocol=17 | dir=in | app=c:\program files (x86)\bittorrent\bittorrent.exe |
"{CA54C9D1-14C1-4046-AA1A-BF8CEFCE0269}" = protocol=17 | dir=in | app=c:\unreal anthology\ut2004\system\ut2004.exe |
"{CD85658B-987A-423A-B2C0-2F10DEBDD40F}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{CF5418C0-1951-4D10-8A01-082557A8C19A}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{DA347BEE-7A2D-4C0C-91D2-47EAB4801FBB}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{DD757018-D9FF-49B8-B056-B2C6864BA2C5}" = protocol=17 | dir=in | app=c:\program files (x86)\aim\aim.exe |
"{E5279CCE-C7DE-4357-8022-E462E81F0BD7}" = protocol=6 | dir=in | app=c:\program files (x86)\bittorrent\bittorrent.exe |
"{E6F24D75-FF16-49EA-980E-9C2AA4CC4C0F}" = protocol=6 | dir=in | app=c:\program files (x86)\stardock games\demigod demo\bin\demigod.exe |
"{E780E780-5388-49F9-A6A9-C10BCD405C59}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{F2885F76-6B4A-4CD2-9A83-7B8BC3763F4E}" = protocol=6 | dir=in | app=c:\program files (x86)\relevantknowledge\rlvknlg.exe |
"{FCB5F170-B2A4-4E22-B8C8-C2DA81E32779}" = dir=in | app=c:\program files (x86)\windows live\messenger\wlcsdk.exe |
"TCP Query User{0031FEC6-4609-4643-A930-F287693E86A6}C:\program files (x86)\croteam\serious sam - the second encounter\bin\serioussam.exe" = protocol=6 | dir=in | app=c:\program files (x86)\croteam\serious sam - the second encounter\bin\serioussam.exe |
"TCP Query User{012F81DC-585C-4CE0-9363-D3FE94C80306}C:\program files (x86)\aim6\aim6.exe" = protocol=6 | dir=in | app=c:\program files (x86)\aim6\aim6.exe |
"TCP Query User{07129DAE-2CA4-46D9-9EEE-65B3CE2FDC11}C:\program files (x86)\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files (x86)\internet explorer\iexplore.exe |
"TCP Query User{0B3AFEF7-5ACE-41D6-B4EA-930CF0C28176}C:\program files (x86)\java\jre6\bin\java.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre6\bin\java.exe |
"TCP Query User{3493D14D-BEEE-4B67-A54D-8C167A47FF2D}C:\program files (x86)\bittorrent\bittorrent.exe" = protocol=6 | dir=in | app=c:\program files (x86)\bittorrent\bittorrent.exe |
"TCP Query User{454A4F9E-AF77-49D8-A0E6-BAE5A0612CF3}C:\program files (x86)\aim\aim.exe" = protocol=6 | dir=in | app=c:\program files (x86)\aim\aim.exe |
"TCP Query User{4ED9D026-E8C4-46F2-8143-21FB6C0D2AC8}C:\program files (x86)\frostwire\frostwire.exe" = protocol=6 | dir=in | app=c:\program files (x86)\frostwire\frostwire.exe |
"TCP Query User{6DDD08EB-C69B-4D08-B564-BCD796E99905}C:\program files (x86)\mirc\mirc.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mirc\mirc.exe |
"TCP Query User{91F8CFC4-13A2-4929-9320-9BC179C3F6E0}C:\program files (x86)\savage 2 - a tortured soul\savage2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\savage 2 - a tortured soul\savage2.exe |
"TCP Query User{97391EEC-D57C-447A-828E-B3FEA0DA98DB}C:\users\nelson\program files (x86)\dna\btdna.exe" = protocol=6 | dir=in | app=c:\users\nelson\program files (x86)\dna\btdna.exe |
"TCP Query User{AD4DD217-38E7-479B-A6D8-31C401B88E30}C:\my games\smallball\smallball.exe" = protocol=6 | dir=in | app=c:\my games\smallball\smallball.exe |
"TCP Query User{CC5C125D-0E6C-425C-8270-FE1FBB23A03E}C:\program files (x86)\mirc\mirc.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mirc\mirc.exe |
"TCP Query User{CC7A2853-1944-4F21-8162-62785DF49621}C:\program files (x86)\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre6\bin\javaw.exe |
"TCP Query User{D4F72049-8687-4DB6-9181-A15CAE344CBA}C:\users\nelson\program files (x86)\dna\btdna.exe" = protocol=6 | dir=in | app=c:\users\nelson\program files (x86)\dna\btdna.exe |
"TCP Query User{FA365CBD-B1BD-4BBA-A317-B439E88DC44D}C:\program files (x86)\dna\btdna.exe" = protocol=6 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"UDP Query User{04B0C713-8EB2-4A41-8EA9-9B603654CB15}C:\program files (x86)\mirc\mirc.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mirc\mirc.exe |
"UDP Query User{180470FA-52C9-4F13-8950-CF3AFBC03723}C:\program files (x86)\aim6\aim6.exe" = protocol=17 | dir=in | app=c:\program files (x86)\aim6\aim6.exe |
"UDP Query User{27309A70-5EFB-4E03-BE3F-E877A2067246}C:\program files (x86)\frostwire\frostwire.exe" = protocol=17 | dir=in | app=c:\program files (x86)\frostwire\frostwire.exe |
"UDP Query User{347FC26F-C638-4789-BEE6-6FD36AF2B3D8}C:\program files (x86)\dna\btdna.exe" = protocol=17 | dir=in | app=c:\program files (x86)\dna\btdna.exe |
"UDP Query User{459602F1-5328-4803-977E-B393F2675909}C:\program files (x86)\croteam\serious sam - the second encounter\bin\serioussam.exe" = protocol=17 | dir=in | app=c:\program files (x86)\croteam\serious sam - the second encounter\bin\serioussam.exe |
"UDP Query User{78D347AB-B7D3-40A0-9513-C844D1902926}C:\program files (x86)\mirc\mirc.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mirc\mirc.exe |
"UDP Query User{794D2C47-373D-4EA8-A2D7-9F6B14D8CA58}C:\program files (x86)\aim\aim.exe" = protocol=17 | dir=in | app=c:\program files (x86)\aim\aim.exe |
"UDP Query User{810361A7-4B54-40AD-B64B-FCF1D0F59947}C:\program files (x86)\bittorrent\bittorrent.exe" = protocol=17 | dir=in | app=c:\program files (x86)\bittorrent\bittorrent.exe |
"UDP Query User{9164DAE2-53E9-4B84-A067-799B49CA34FA}C:\users\nelson\program files (x86)\dna\btdna.exe" = protocol=17 | dir=in | app=c:\users\nelson\program files (x86)\dna\btdna.exe |
"UDP Query User{B49D8B47-2BD6-4F19-A67C-C0C83600AF5F}C:\my games\smallball\smallball.exe" = protocol=17 | dir=in | app=c:\my games\smallball\smallball.exe |
"UDP Query User{B6B7C879-9361-4168-B214-3BB7854C0BBD}C:\program files (x86)\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files (x86)\internet explorer\iexplore.exe |
"UDP Query User{E2B7F0FB-FE6C-47F0-91AC-D5580ABC9D8C}C:\program files (x86)\savage 2 - a tortured soul\savage2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\savage 2 - a tortured soul\savage2.exe |
"UDP Query User{E5E5555F-D030-4AC3-A513-A20A65001818}C:\users\nelson\program files (x86)\dna\btdna.exe" = protocol=17 | dir=in | app=c:\users\nelson\program files (x86)\dna\btdna.exe |
"UDP Query User{F06C3B99-7205-450F-B8A8-25C557B5C2F9}C:\program files (x86)\java\jre6\bin\java.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre6\bin\java.exe |
"UDP Query User{F5C952AB-65BC-4E3E-84DD-3465ED868C60}C:\program files (x86)\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre6\bin\javaw.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0335701D-8E28-4A7F-B0EF-312974755BB2}" = Modem Diagnostic Tool
"{17E02F38-FF2D-4c3d-83DF-ECE2A1D20A5E}" = AIO_CDB_ToolboxIni64
"{33EB1061-ABF1-4470-A540-32E97A610536}" = Apple Mobile Device Support
"{41BF0DE4-5BAE-4B88-AFD3-86A30B222186}" = Bonjour
"{5F02C14D-A630-4771-8409-0BA89FCCA8D6}" = iTunes
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007
"{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9F560BEB-021F-43AC-825F-AA60442D8DE4}" = 64 Bit HP CIO Components Installer
"{C916D86C-AB76-49c7-B0E4-A946E0FD9BC2}" = HP Photosmart, Officejet, PSC and Deskjet All-In-One Driver Software 8.0.B
"{F6CB42B9-F033-4152-8813-FF11DA8E6A78}" = Dell Dock
"49CF605F02C7954F4E139D18828DE298CD59217C" = Windows Driver Package - Garmin (grmnusb) GARMIN Devices (06/03/2009 2.3.0.0)
"CNXT_MODEM_PCI_HSF" = Conexant D850 PCI V.92 Modem
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"HP Imaging Device Functions" = HP Imaging Device Functions 8.0
"HP Solution Center & Imaging Support Tools" = HP Solution Center 8.0
"HPExtendedCapabilities" = HP Customer Participation Program 8.0
"HPOCR" = HP OCR Software 8.0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{021C4C4F-C93C-4425-BFFD-C2D16776BFAE}" = Visual C++ 8.0 Runtime Setup Package (x64)
"{08E81ABD-79F7-49C2-881F-FD6CB0975693}" = Roxio Creator Data
"{09760D42-E223-42AD-8C3E-55B47D0DDAC3}" = Roxio Creator DE
"{0D2E9DCB-9938-475E-B4DD-8851738852FF}" = AIO_Scan
"{0D3F9802-689F-9B6D-8E44-B55971F0CCBB}" = FlipShare
"{10C69612-017B-45F5-B986-7D113D5A2EA3}" = MSN Toolbar
"{14AA72DA-DB40-4A34-93A6-401A81D7AF9E}" = Unreal Anthology
"{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}" = Microsoft Works
"{15F4085A-BC98-4590-AFFD-03BBBE49524E}" = Garmin Communicator Plugin
"{1746EA69-DCB6-4408-B5A5-E75F55439CDF}" = Scan
"{179C56A4-F57F-4561-8BBF-F911D26EB435}" = WebReg
"{1F54DAFA-9261-4A62-B59D-6C9F26B48FE4}" = Roxio Creator Tools
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java(TM) 6 Update 11
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Roxio Update Manager
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
"{3F92ABBB-6BBF-11D5-B229-002078017FBF}" = NetWaiting
"{45235788-142C-44BE-8A4D-DDE9A84492E5}" = AGEIA PhysX v7.09.13
"{45338B07-A236-4270-9A77-EBB4115517B5}" = Windows Live Sign-in Assistant
"{49F2B650-2D7B-4F59-B33D-346F63776BD3}" = DocProc
"{510D2239-6C2E-457B-9590-485EC552D94D}" = Garmin USB Drivers
"{5BDAA2F7-8E48-4AFF-AA92-B559D0CDF1AD}" = Serious Sam: The Second Encounter
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{67D3F1A0-A1F2-49b7-B9EE-011277B170CD}" = HPProductAssistant
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6B7B6D4D-8F9B-4CB3-8CA4-BCA9CC4C1A22}" = EDocs
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{70DECFBF-9119-4434-B2D3-A3C283D15E45}" = WeatherBug
"{73A4F29F-31AC-4EBD-AA1B-0CC5F18C8F83}" = Roxio Creator Audio
"{7456BBA3-642F-4E59-9F89-7639977D7C39}" = Cozi
"{77DCDCE3-2DED-62F3-8154-05E745472D07}" = Acrobat.com
"{7A7DC702-DEDE-42A8-8722-B3BA724D546F}" = Fax
"{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}" = Dell Getting Started Guide
"{81128EE8-8EAD-4DB0-85C6-17C2CE50FF71}" = Windows Live Essentials
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111715607}" = The Poppit! Show
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112722940}" = Boggle
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-114780403}" = Word Riot Deluxe
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115286387}" = Operation Mania
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11562057}" = PICTUREKA! MUSEUM MAYHEM
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-116436960}" = Word Whomp( TM) Underground
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{87E2B986-07E8-477a-93DC-AF0B6758B192}" = DocProcQFolder
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6027FD-53DC-446D-BB75-CACD7028A134}" = HP Update
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{95D08F4E-DFC2-4ce3-ACB7-8C8E206217E9}" = MarketResearch
"{978C25EE-5777-46e4-8988-732C297CBDBD}" = Status
"{9B1FD9CE-0776-4f0b-A6F5-C6AB7B650CDF}" = Destinations
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A36CD345-625C-4d6c-B3E2-76E1248CB451}" = SolutionCenter
"{A3B7C670-4A1E-4EE2-950E-C875BC1965D0}" = Copy
"{A85FD55B-891B-4314-97A5-EA96C0BD80B5}" = Windows Live Messenger
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-7AD7-1033-7B44-A90000000001}" = Adobe Reader 9
"{B6A26DE5-F2B5-4D58-9570-4FC760E00FCD}" = Roxio Creator Copy
"{B935C985-A17F-484B-8470-09E4FC27DC26}" = Dell-eBay
"{BE77A81F-B315-4666-9BF3-AE70C0ADB057}" = BufferChm
"{C39A4E1F-9AF1-4FE1-A80E-A5B867FABB42}" = Dell Best of Web
"{C4124E95-5061-4776-8D5D-E3D931C778E1}" = Microsoft VC9 runtime libraries
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C716522C-3731-4667-8579-40B098294500}" = Toolbox
"{DAEAFD68-BB4A-4507-A241-C8804D2EA66D}" = Apple Application Support
"{E06F04B9-45E6-4AC0-8083-85F7515F40F7}" = UnloadSupport
"{E09575B2-498D-4C8B-A9D2-623F78574F29}" = AIO_CDB_Software
"{E2CB21A2-FD45-4353-888B-FFD071270F35}" = 6300
"{E646DCF0-5A68-11D5-B229-002078017FBF}" = Digital Line Detect
"{E7112940-5F8E-4918-B9FE-251F2F8DC81F}" = AIO_CDB_ProductContext
"{EB21A812-671B-4D08-B974-2A347F0D8F70}" = HP Photosmart Essential
"{EB75DE50-5754-4F6F-875D-126EDF8E4CB3}" = HPSSupply
"{EB900AF8-CC61-4E15-871B-98D1EA3E8025}" = QuickTime
"{ED439A64-F018-4DD4-8BA5-328D85AB09AB}" = Roxio Creator DE
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F6BD194C-4190-4D73-B1B1-C48C99921BFE}" = Windows Live Call
"{FF075778-6E50-47ed-991D-3B07FD4E3250}" = TrayApp
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"169E7C03-35E3-4E8A-855F-225246CE3E5E" = Polar Golfer from WildGames (remove only)
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"AIM MusicLink 4.0.0.0" = AIM MusicLink 4.0.0.0
"AIM MusicLink 4.1.0.0" = AIM MusicLink 4.1.0.0
"AIM_7" = AIM 7
"AOL Instant Messenger" = AOL Instant Messenger
"AutocompletePro3_is1" = AutocompletePro
"AVG8Uninstall" = AVG 8.5
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"Double Play Family Feud and Family Feud II_is1" = Double Play Family Feud and Family Feud II
"FLV Player" = FLV Player 2.0 (build 25)
"FrostWire" = FrostWire 4.17.2
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"iWinArcade" = iWin Games (remove only)
"Jewel Quest 2" = Jewel Quest 2 (remove only)
"Jewel Quest III" = Jewel Quest III
"Loader-Full_ 1.9.9" = Loader-Full_ 1.9.9
"Magic ISO Maker v5.5 (build 0276)" = Magic ISO Maker v5.5 (build 0276)
"mIRC" = mIRC
"Mozilla Firefox (3.0.19)" = Mozilla Firefox (3.0.19)
"Palace" = Palace Uninstall
"PalaceChat_is1" = PalaceChat version 4.0.6.52
"Peggle Deluxe 1.01" = Peggle Deluxe 1.01
"Peggle Nights Deluxe 1.0" = Peggle Nights Deluxe 1.0
"Phalanx" = Phalanx v4.0
"SlimBrowser" = FlashPeak SlimBrowser
"SoftwareUpdUtility" = Download Updater (AOL LLC)
"SyTools Open Office Writer Recovery - DEMO Version 2.0_is1" = SyTools Open Office Writer Recovery
"ViewpointMediaPlayer" = Viewpoint Media Player
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR archiver
"Yahoo! Messenger" = Yahoo! Messenger

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 7/17/2010 11:06:12 PM | Computer Name = Nelson-PC | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "C:\Program Files (x86)\AVG\AVG8\avglvea.dll".
Dependent
Assembly Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 7/17/2010 11:06:17 PM | Computer Name = Nelson-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 7/18/2010 8:44:40 AM | Computer Name = Nelson-PC | Source = WinMgmt | ID = 10
Description =

Error - 7/18/2010 8:56:19 AM | Computer Name = Nelson-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 7/18/2010 8:56:51 AM | Computer Name = Nelson-PC | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "C:\Program Files (x86)\AVG\AVG8\avglvea.dll".
Dependent
Assembly Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 7/18/2010 9:05:43 AM | Computer Name = Nelson-PC | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "C:\Program Files (x86)\AVG\AVG8\avglvea.dll".
Dependent
Assembly Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 7/19/2010 8:07:02 AM | Computer Name = Nelson-PC | Source = WinMgmt | ID = 10
Description =

Error - 7/19/2010 8:11:29 AM | Computer Name = Nelson-PC | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "C:\Program Files (x86)\AVG\AVG8\avglvea.dll".
Dependent
Assembly Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 7/19/2010 8:11:32 AM | Computer Name = Nelson-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 7/19/2010 8:18:13 AM | Computer Name = Nelson-PC | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "C:\Program Files (x86)\AVG\AVG8\avglvea.dll".
Dependent
Assembly Microsoft.VC80.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"
could not be found. Please use sxstrace.exe for detailed diagnosis.

[ Media Center Events ]
Error - 10/5/2010 11:35:33 AM | Computer Name = Nelson-PC | Source = Media Center Guide | ID = 0
Description = Event Info: ERROR: SqmApiWrapper.TimerRecord failed; Win32 GetLastError
returned 10000105 Process: DefaultDomain Object Name: Media Center Guide

Error - 10/5/2010 11:35:56 AM | Computer Name = Nelson-PC | Source = Media Center Guide | ID = 0
Description = Event Info: ERROR: SqmApiWrapper.TimerRecord failed; Win32 GetLastError
returned 10000105 Process: DefaultDomain Object Name: Media Center Guide

Error - 10/5/2010 11:37:59 AM | Computer Name = Nelson-PC | Source = Media Center Guide | ID = 0
Description = Event Info: ERROR: SqmApiWrapper.TimerRecord failed; Win32 GetLastError
returned 10000105 Process: DefaultDomain Object Name: Media Center Guide

Error - 10/5/2010 11:38:16 AM | Computer Name = Nelson-PC | Source = Media Center Guide | ID = 0
Description = Event Info: ERROR: SqmApiWrapper.TimerRecord failed; Win32 GetLastError
returned 10000105 Process: DefaultDomain Object Name: Media Center Guide

Error - 10/5/2010 11:38:20 AM | Computer Name = Nelson-PC | Source = Media Center Guide | ID = 0
Description = Event Info: ERROR: SqmApiWrapper.TimerRecord failed; Win32 GetLastError
returned 10000105 Process: DefaultDomain Object Name: Media Center Guide

Error - 10/7/2010 12:01:52 PM | Computer Name = Nelson-PC | Source = Media Center Guide | ID = 0
Description = Event Info: ERROR: SqmApiWrapper.TimerRecord failed; Win32 GetLastError
returned 10000105 Process: DefaultDomain Object Name: Media Center Guide

Error - 10/7/2010 12:03:50 PM | Computer Name = Nelson-PC | Source = Media Center Guide | ID = 0
Description = Event Info: ERROR: SqmApiWrapper.TimerRecord failed; Win32 GetLastError
returned 10000105 Process: DefaultDomain Object Name: Media Center Guide

Error - 10/8/2010 2:40:02 PM | Computer Name = Nelson-PC | Source = Media Center Guide | ID = 0
Description = Event Info: ERROR: SqmApiWrapper.TimerRecord failed; Win32 GetLastError
returned 10000105 Process: DefaultDomain Object Name: Media Center Guide

Error - 10/12/2010 2:14:44 PM | Computer Name = Nelson-PC | Source = Media Center Guide | ID = 0
Description = Event Info: ERROR: SqmApiWrapper.TimerRecord failed; Win32 GetLastError
returned 10000105 Process: DefaultDomain Object Name: Media Center Guide

Error - 10/12/2010 2:15:34 PM | Computer Name = Nelson-PC | Source = Media Center Guide | ID = 0
Description = Event Info: ERROR: SqmApiWrapper.TimerRecord failed; Win32 GetLastError
returned 10000105 Process: DefaultDomain Object Name: Media Center Guide

[ OSession Events ]
Error - 4/7/2009 11:58:16 PM | Computer Name = Nelson-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 1920
seconds with 240 seconds of active time. This session ended with a crash.

Error - 9/6/2009 4:34:16 PM | Computer Name = Nelson-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 45
seconds with 0 seconds of active time. This session ended with a crash.

Error - 6/7/2010 3:06:22 PM | Computer Name = Nelson-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 6
seconds with 0 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 10/6/2010 7:39:20 AM | Computer Name = Nelson-PC | Source = HTTP | ID = 15016
Description =

Error - 10/6/2010 7:40:59 AM | Computer Name = Nelson-PC | Source = HTTP | ID = 15016
Description =

Error - 10/7/2010 8:00:46 AM | Computer Name = Nelson-PC | Source = HTTP | ID = 15016
Description =

Error - 10/7/2010 7:55:04 PM | Computer Name = Nelson-PC | Source = HTTP | ID = 15016
Description =

Error - 10/8/2010 8:13:52 AM | Computer Name = Nelson-PC | Source = HTTP | ID = 15016
Description =

Error - 10/9/2010 7:51:54 AM | Computer Name = Nelson-PC | Source = HTTP | ID = 15016
Description =

Error - 10/10/2010 7:49:59 AM | Computer Name = Nelson-PC | Source = HTTP | ID = 15016
Description =

Error - 10/10/2010 1:14:36 PM | Computer Name = Nelson-PC | Source = HTTP | ID = 15016
Description =

Error - 10/11/2010 7:47:46 AM | Computer Name = Nelson-PC | Source = HTTP | ID = 15016
Description =

Error - 10/12/2010 7:37:19 AM | Computer Name = Nelson-PC | Source = HTTP | ID = 15016
Description =


< End of report >

The other file is too big to post.

Hi,

Please use http://pastebin.com to post them, once you have pasted your log into pastebin please post the link.

OTL:
http://pastebin.com/dMCfWf6r

Extras:
http://pastebin.com/yqyWkme5

Hi,

Please download Malwarebytes Anti-Malware from Here.


Double Click mbam-setup.exe to install the application.

• Make sure a checkmark is placed next to Update Malwarebytes Anti-Malware and Launch Malwarebytes Anti-Malware, then click Finish.
  
• If an update is found, it will download and install the latest version.
  
• Once the program has loaded, select "Perform Quick Scan", then click Scan.
  
• The scan may take some time to finish,so please be patient.
  
• When the scan is complete, click OK, then Show Results to view the results.
  
• Make sure that everything is checked, and click Remove Selected.
  
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
  
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  
• Copy&Paste the entire report in your next reply.
  

Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediatly.