Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

App crash error message - rundll32.exe


  • Please log in to reply
14 replies to this topic

#1 KineretT

KineretT

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:03 PM

Posted 11 March 2014 - 04:23 AM

I have recently started getting an error message pop up, about once a day, saying

"Windows Host Process (rundll.32.exe) has stopped working"

The full contents of the info available in that window are below.

 

Any tips on how to solve this will be greatly appreciated.

Thanks.

 

Problem signature:

  Problem Event Name:                        APPCRASH

  Application Name:                             rundll32.exe

  Application Version:                           6.1.7600.16385

  Application Timestamp:                     4a5bc637

  Fault Module Name:                          SYSPLA~2.DLL

  Fault Module Version:                        1.0.0.5

  Fault Module Timestamp:                  52b1f07e

  Exception Code:                                  c0000005

  Exception Offset:                                0006c98c

  OS Version:                                          6.1.7601.2.1.0.256.1

  Locale ID:                                             1037

  Additional Information 1:                  0a9e

  Additional Information 2:                  0a9e372d3b4ad19135b953a78882e789

  Additional Information 3:                  0a9e

  Additional Information 4:                  0a9e372d3b4ad19135b953a78882e789



BC AdBot (Login to Remove)

 


#2 dls62

dls62

  • Members
  • 623 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Berkshire, UK
  • Local time:02:03 PM

Posted 11 March 2014 - 06:42 AM

Have you recently installed SysPlayer by Goobzo?  If so, this could be a remnant of the installation process.

 

Please download Process Explorer.

Unzip the downloaded file, right-click on procexp.exe and select ‘Run as administrator’.

Once the program has loaded, click on File > Save, and save it with the file name: ProcessExplorer and the Save as type: Process Explorer Data.

Attach the file to your next post (More Reply Options > Attach Files).

 

Please download Autoruns.
Unzip the downloaded file, right-click on autoruns.exe and select ‘Run as administrator’.
Once the scan has completed, click on File > Save
, and save it with the file name: AutoRuns and the Save as type: Text.
Attach the file to your next post (More Reply Options > Attach Files).

 



#3 KineretT

KineretT
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:03 PM

Posted 11 March 2014 - 09:12 AM

I've never even heard of sysplayer.

I did install a program called Wondershare video editor - but I can't recall if the problems began prior to the installation or afterwards.

Files attached as reqested.

 

Thank you!

Attached Files



#4 dls62

dls62

  • Members
  • 623 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Berkshire, UK
  • Local time:02:03 PM

Posted 11 March 2014 - 10:44 AM

SysPlayer is installed on your system.  There is also another program on the system which is part of the Wondershare installation that can cause popups - we can deal with is if it causes you a problem.

 

Please go to Control Panel > Programs and Features and look for SysPlayer in your installed programs list.  If it is there and you don't want the program go ahead and uninstall it.

 

Then start the Autoruns program again.  Locate the following entries and uncheck each one (if you were able to uninstall the program some or all of these entries may be absent) - the lines in bold are the section headings under which the entries will appear:-

 

HKCU\Software\Classes\*\ShellEx\ContextMenuHandlers

SysPlayerMenuExt

 

HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers

SysPlayerMenuExt

 

HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers

SysPlayerMenuExt

 

HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers

SysPlayerMenuExt

 

Task Scheduler

\Microsoft\Windows\Maintenance\SPMupdate2

\Microsoft\Windows\Multimedia\SPMupdate3

\SPMupdate1

 

Then restart your system and post how you got on back here.


Edited by dls62, 11 March 2014 - 10:48 AM.


#5 KineretT

KineretT
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:03 PM

Posted 11 March 2014 - 12:16 PM

I'm sorry, but looking at the programs list on the Control Panel, there is no sys player.

 

Should I just go ahead with the rest of the instructions?

 

Thanks



#6 dls62

dls62

  • Members
  • 623 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Berkshire, UK
  • Local time:02:03 PM

Posted 11 March 2014 - 12:17 PM

Yes, carry on with the other instructions.



#7 hamluis

hamluis

    Moderator


  • Moderator
  • 55,413 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:08:03 AM

Posted 11 March 2014 - 04:33 PM

http://www.shouldiremoveit.com/sysplayer-101003-program.aspx

 

Moved topic to Am I Infected.

 

Louis



#8 KineretT

KineretT
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:03 PM

Posted 12 March 2014 - 04:15 PM

The problem seems to have been resolved - I have not had the error message show up today.

There seem to have been a couple of side effects - one being that the serial port on my PC to which a Davis weather station data logger is connected, was erroneously recognized as a serial mouse and a driver for such a mouse was automatically installed. I solved this by installing an update for the weather station.

The other problem was that the FTP program associated with Weather Display Live software for the weatherstation (which uploads the data to the web) seems now to be occasionally jamming and getting timed out. I am not sure if I've been able to resolve this, I'll have to watch it for another day or so to see.

 

Thank you, dls62 for your help on this - MUCH appreciated!



#9 dls62

dls62

  • Members
  • 623 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Berkshire, UK
  • Local time:02:03 PM

Posted 12 March 2014 - 04:27 PM

As you can see from Louis' post, SysPlayer has been linked to malware. May I sugest that, as a minimum, you run a full scan with Kaspersky AV and we can advise on using other tools to give you some reassurance that you are not infected.

#10 KineretT

KineretT
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:03 PM

Posted 15 March 2014 - 11:14 AM

I've run a full scan with Kaspersky and another with Malwarebytes Pro (sorry, forgot to list my having that as I only use it for scans once in a while, not ongoing prevention).

Malwarebytes detected a couple of minor issues and corrected them, but they were not related to Goobzo. Other than that, nothing.

 

Is there any other check I should do or can I consider my PC clean?

Also, did unchecking the various items in your above list with the Autoruns program remove everything, or did it just stop it from running?

 

Thanks


Edited by KineretT, 15 March 2014 - 11:16 AM.


#11 dls62

dls62

  • Members
  • 623 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Berkshire, UK
  • Local time:02:03 PM

Posted 15 March 2014 - 11:39 AM

Can you please copy and paste the content of the Malwarebytes log so that we can see what has been removed.

 

Unchecking the items in Autoruns has only stopped the program from running, it has not deleted it.

 

Once we have the Malwarebytes log we can advise on any further action that may be required.


Edited by dls62, 15 March 2014 - 11:39 AM.


#12 KineretT

KineretT
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:03 PM

Posted 15 March 2014 - 11:51 AM

Malwarebytes Anti-Malware (PRO) 1.75.0.1300
www.malwarebytes.org

Database version: v2014.03.13.03

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 11.0.9600.16518
USER :: MOMS-PC [administrator]

Protection: Disabled

13/03/2014 14:56:12
mbam-log-2014-03-13 (14-56-12).txt

Scan type: Full scan (C:\|D:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P
Scan options disabled:
Objects scanned: 868224
Time elapsed: 3 hour(s), 35 minute(s), 56 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 1
HKCU\Software\AppDataLow\Software\PriceGong (PUP.Optional.PriceGong.A) -> Quarantined and deleted successfully.

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 2
C:\Users\USER\AppData\Local\Temp\FreemakeVideoConverter_4.1.3.5.exe (PUP.Optional.OpenCandy) -> Quarantined and deleted successfully.
D:\Program Downloads\Video editing software\video rotator\FreemakeVideoConverterSetup.exe (PUP.Optional.OpenCandy) -> Quarantined and deleted successfully.

(end)
 



#13 dls62

dls62

  • Members
  • 623 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Berkshire, UK
  • Local time:02:03 PM

Posted 15 March 2014 - 11:57 AM

Please download AdwCleaner by Xplode to your Desktop.

  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click the Scan button and wait for the process to complete.
  • Go through the identified items and uncheck any that you know are good and wish to keep.
  • Click on the Clean button and follow the prompts.
  • A log file will automatically open after the system has restarted.
  • Please copy and paste the content of that log in your next post.

 

 

Please download Junkware Removal Tool to your Desktop.

  • Please disable your security software (e.g. Antivirus) to avoid potential conflicts.
  • Run JRT by double-clicking it. (If you are using Windows Vista or 7, right- click it and select ‘Run as administrator’.)
  • A command prompt window will open.  Press any key to start the scan.
  • On completion, a log will automatically open.

Please copy and paste the contents of the log in your post.



#14 KineretT

KineretT
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Gender:Female
  • Local time:03:03 PM

Posted 18 March 2014 - 02:39 PM

AdwCleaner log:

# AdwCleaner v3.022 - Report created 18/03/2014 at 21:05:45
# Updated 13/03/2014 by Xplode
# Operating System : Windows 7 Ultimate Service Pack 1 (32 bits)
# Username : USER - MOMS-PC
# Running from : C:\Users\USER\Desktop\bug remover\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\vShare
Folder Deleted : C:\ProgramData\Ask
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\ProgramData\boost_interprocess
Folder Deleted : C:\ProgramData\ParetoLogic
Folder Deleted : C:\ProgramData\Premium
Folder Deleted : C:\ProgramData\ShopperPro
Folder Deleted : C:\ProgramData\Trymedia
Folder Deleted : C:\Program Files\Conduit
Folder Deleted : C:\Program Files\continuetosave
Folder Deleted : C:\Program Files\iMesh Applications
Folder Deleted : C:\Program Files\Mobogenie
Folder Deleted : C:\Program Files\Optimizer Pro
Folder Deleted : C:\Program Files\ShopperPro
Folder Deleted : C:\Program Files\targus
Folder Deleted : C:\USERs\USER\AppData\Local\Conduit
Folder Deleted : C:\USERs\USER\AppData\Local\Mobogenie
Folder Deleted : C:\USERs\USER\AppData\Local\PackageAware
Folder Deleted : C:\USERs\USER\AppData\LocalLow\boost_interprocess
Folder Deleted : C:\USERs\USER\AppData\LocalLow\Conduit
Folder Deleted : C:\USERs\USER\AppData\LocalLow\PriceGong
Folder Deleted : C:\USERs\USER\AppData\Roaming\Babylon
Folder Deleted : C:\USERs\USER\AppData\Roaming\DriverCure
Folder Deleted : C:\USERs\USER\AppData\Roaming\goforfiles
Folder Deleted : C:\USERs\USER\AppData\Roaming\hotspot shield
Folder Deleted : C:\USERs\USER\AppData\Roaming\ParetoLogic
Folder Deleted : C:\USERs\USER\Documents\Mobogenie
Folder Deleted : C:\Program Files\Mozilla Firefox\Extensions\ffxtlbr@babylon.com
Folder Deleted : C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\okemjkdkkihnhdaanohnleknbaddlddb
File Deleted : C:\END
File Deleted : C:\Windows\system32\conduitEngine.tmp
File Deleted : C:\USERs\USER\AppData\Roaming\Mozilla\Firefox\Profiles\4r0hu9eq.default\user.js
File Deleted : C:\Program Files\Mozilla Firefox\user.js
File Deleted : C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_apps.conduit.com_0.localstorage
File Deleted : C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_apps.conduit.com_0.localstorage-journal
File Deleted : C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_home.sweetim.com_0.localstorage
File Deleted : C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_home.sweetim.com_0.localstorage-journal
File Deleted : C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_images.search.conduit.com_0.localstorage
File Deleted : C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_images.search.conduit.com_0.localstorage-journal
File Deleted : C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.conduit.com_0.localstorage
File Deleted : C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.conduit.com_0.localstorage-journal

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\Google\Chrome\Extensions\okemjkdkkihnhdaanohnleknbaddlddb
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Key Deleted : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker-1_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker-1_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASMANCS
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_09b71135
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT1060933
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT1425416
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2786678
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_htc-sync_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_htc-sync_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_internet-explorer_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_internet-explorer_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7854F00C-DC77-477E-A10E-603F48442D3B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4250488A-CB24-0893-C066-B1AEA57BCFF2}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\Ask&Record
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\GoforFiles
Key Deleted : HKCU\Software\Imesh
Key Deleted : HKCU\Software\ParetoLogic
Key Deleted : HKCU\Software\SmartBar
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\YahooPartnerToolbar
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKCU\Software\AppDataLow\Software\Toolbar
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\ParetoLogic
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\Software\SP Global
Key Deleted : HKLM\Software\SProtector
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\464AA55239C100F32AF2D438EDDC0F47
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5652BA3D5FB98AE31B337BF0AF939856
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EB95E1AFCBABE3DB9ECCC669B99494

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16521


-\\ Mozilla Firefox v27.0.1 (en-US)

[ File : C:\USERs\USER\AppData\Roaming\Mozilla\Firefox\Profiles\i0zl1opu.default-1377065521851\prefs.js ]

Line Deleted : user_pref("aol_toolbar.default.homepage.check", false);
Line Deleted : user_pref("aol_toolbar.default.search.check", false);
Line Deleted : user_pref("extensions.BabylonToolbar.prtkDS", 0);
Line Deleted : user_pref("extensions.BabylonToolbar.prtkHmpg", 0);
Line Deleted : user_pref("extensions.crossrider.bic", "1439ef63651575ff9dc3ba826e051abb");
Line Deleted : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "");
Line Deleted : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");
Line Deleted : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "");
Line Deleted : user_pref("sweetim.toolbar.previous.keyword.URL", "");
Line Deleted : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", ".*");
Line Deleted : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", "1");
Line Deleted : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", "1");
Line Deleted : user_pref("sweetim.toolbar.searchguard.enable", "false");

-\\ Google Chrome v33.0.1750.154

[ File : C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [10549 octets] - [18/03/2014 20:55:35]
AdwCleaner[S0].txt - [10785 octets] - [18/03/2014 21:05:45]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [10846 octets] ##########
 

 

 

 

 

 

JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 7 Ultimate x86
Ran by USER on Tue 03/18/2014 at 21:32:16.03
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\addlyrics1050_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\addlyrics1050_RASMANCS



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Users\USER\appdata\local\cre"
Successfully deleted: [Folder] "C:\Users\USER\appdata\locallow\datamngr"
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{0046C73F-C1E8-4759-8569-58D6B8F96D05}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{02F416FF-A45C-4232-A49F-EC90E0E4C379}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{0417C30E-BA86-4249-830A-D3DF6629A70F}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{049ECF9F-070B-4343-90B1-363BB9B1A23A}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{053CFC2D-25C0-43D1-88FE-CCC9DC3A3563}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{06204184-4CFB-4125-9449-31535EB3B90B}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{069D311C-E055-4DB5-8170-5D234D0969D8}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{0708B980-0B4D-4FC7-ADE0-6EFE4F70FDC9}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{07E37AE6-C8A3-4316-A498-9FAFF7FED30B}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{08D7326D-2311-4BB7-9937-877B9FBB633E}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{098AA19B-EC6A-44C5-8866-E3625AB42F42}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{0AD642A0-6142-42C6-9FDC-4BBA38D45E5E}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{0BED2164-CFD6-4DE3-A69C-B3F1EF40B3FE}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{0C4C4FED-9D28-4806-8041-FEBCECC8E7F6}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{0C82C01B-404E-428C-B19C-BE197845C464}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{0D1E5DC5-577D-45CE-9F05-39159C829DA5}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{11B00B92-ED83-47C9-AF55-F9754A63AD0A}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{127811E2-F364-40FA-ABC1-6BE436D858F6}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{1280A689-EC03-4C81-9A1F-BF0324781446}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{1295599F-73E9-439B-9D19-3C51242F1BCA}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{13AF9152-05BB-4F16-92AA-FBA5CB47FF70}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{148D0304-3D78-481F-B5B6-6F45A7935DFB}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{18C64B5E-CE4F-4892-8992-38205919D1FC}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{19B7272D-AB45-431D-8CDD-FBD6E10BF889}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{1AF98470-D00C-4BE7-969B-212E37C94C83}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{1D3B8603-6BED-44E7-917C-2F2C3EF4FD46}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{1F8C09DC-B318-4D61-91BD-5538146CD443}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{210DDEB8-8014-4BBF-AA68-BAE13A914EAA}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{211D9D08-07AC-4249-B763-C28DCACB7366}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{22D3C3E8-110A-40A5-8726-48F158CD0231}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{233C2955-1B96-40E6-8F6E-3330846447D9}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{24DA1948-776B-488D-A7CD-B1F43AB0F24B}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{25B5D1CB-E515-4604-97CC-2A6F54D3E745}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{27000B29-2BC1-4C0F-9ECB-A0B951643410}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{2A4D95E6-227F-4B39-AD8D-9777DD23F543}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{2AE9DE40-4F2A-4424-8148-5EC22C5BB73B}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{2C07B86F-71F9-40E5-98AE-FA362E09001C}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{2C2EF76E-64C5-4652-9907-B6A17A415190}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{2DBAA1E5-77BE-44BE-9A41-2EA103A80EC9}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{2FAC776B-2C9E-4354-8EFC-E52428FA7C43}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{301FC472-427D-4A31-9096-45418B29D39C}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{306C020D-BCEB-49E1-B48D-3E25A769C020}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{31121380-9F94-4FF5-9DBC-C38583F4F36E}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{35367194-1246-4CF7-9BB9-45C17DCCE898}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{35B60D11-C615-469B-AA85-B2365AA85776}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{35C5C57D-FABC-453A-A098-346AFF4F5C61}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{3630A955-AD87-441A-BE78-8003F2667AA5}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{37B64F77-71E9-4C0E-B357-884D0AB0C340}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{37BDA1CE-E711-440E-BE1A-F9DC85FB74BF}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{37E9547F-74A4-4E35-AF34-6FAD36C8FCCD}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{391DA6B3-3E45-4B87-82E2-E2D56CDE51C8}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{3BD6DEBA-6C07-40E2-B5B3-9C6002BBC6FA}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{3F4F8180-1A9B-40D5-8092-FC92F576919C}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{3F88D47F-540E-4C1A-A161-1EC5257382F9}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{43D1EC15-35F5-40E1-BE5F-F225990E9C7B}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{4429388C-B788-44E4-8A92-64B95E0DB598}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{451A139E-6110-468F-B264-CF60E84998F6}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{4724FC46-2917-40F1-977C-04F166C82A44}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{48CC62A1-7263-469C-A72E-B69FA50B12F4}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{49AAD03C-CDFB-4956-AC3E-3C26D6102F0C}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{4AD97732-212E-489B-9FB5-D0F526325525}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{4B7E74AB-AEA0-49E3-BF7F-F96F220D878F}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{515F9E47-8CF1-4A18-A4C5-9B02D4576199}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{51D3172A-FEAD-44C2-A400-CE437106C8ED}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{521DB7DC-E779-43CE-B16D-858833BCCA6F}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{524110A9-6F52-4452-BA98-AE6AFAC258E1}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{5356921E-8952-4E41-A308-5944AAC5B9CC}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{53ED4D2B-F470-4507-BD98-40A2052DA5B5}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{581A1F42-EFAA-4A0F-BC82-C79F7D086C59}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{59056DB3-3373-4EDC-BBB0-A1FED2237C81}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{59574E4F-0143-4BB1-8845-255AD87DB0F8}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{5C34DE43-9F47-4B28-8DEF-5BFA7C02D773}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{5CC55522-5D4E-4854-B933-14A277BDF741}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{5DAC8E97-AE2E-4807-A0EB-16B7313B060B}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{5E176FFE-4EC3-4FC1-9AC9-DBEB552C2922}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{5FA0E367-DBD1-4D56-9F30-309C73761514}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{61FD724D-94F5-4D61-9256-76E71F8EEFAE}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{63F88933-92C4-4CB4-A497-AC332C03E887}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{64F88CEE-1655-4B6D-A102-1313A4513559}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{65319BA4-2AF6-487B-B129-002ACFCBF97D}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{672972F5-21F9-4EE9-AFA1-6AE7F8F9CC47}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{672F4B2D-8FE1-41CE-A513-7BE98EA00DD6}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{67F8E33B-5E09-4A71-B5B5-0C784E62B7C9}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{6CB1111B-0A7C-4A18-88AF-CEEA05CE4C62}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{6CD66635-5103-4169-82ED-F0C968581358}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{6EFCB8E3-2577-49A3-8FE0-CE4780716690}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{6FBED8A2-DF6D-4D8E-B922-C8A38022F325}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{78956E85-B83B-47D5-9AE0-34F12FE51848}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{7B762204-55C8-4DE3-8B42-FF2A447F6A76}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{7BC77DDE-01C6-4F22-9B9C-1DB39B28A3A3}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{7DFDF75F-5402-427D-BBF1-81F1C80BB8C1}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{7E9B3ED8-BADE-4BE5-9387-57DF608B7E19}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{7ECCEB9B-2A1D-4CBC-B6C5-57AC9F0381CB}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{80385ABF-9C70-410C-8375-0D04802B446E}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{816975DE-56DE-4556-ADDA-127B918C4883}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{81817334-7284-451C-8405-970EA68D4932}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{8207D89F-6299-44C5-86F4-E7A82D100A44}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{87549F78-5073-4062-B991-8FF065F6DD20}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{899A180C-03C3-48EC-B4A6-1D068E4F5147}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{8A7E59A4-3A31-4A82-9549-F0953188770E}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{8AD5B4C5-BC85-4D73-BDAD-DF82140F9E5F}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{8B5B033F-69E2-4839-8EC0-CBEC1349F868}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{8B81C92A-ABC3-4371-B3D1-211915425604}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{8C6B6B5C-A695-4673-B358-FCEFF329F065}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{8D51A9EA-CF76-4DEC-A4DB-DF2CED139D53}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{8FD9C9DC-9F09-4FB9-9FF4-8BE61DC4A96E}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{91707F30-4F15-4FEF-B110-F6EA2ED65707}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{92085004-EAC7-4F89-8A95-A7AC535CC4B2}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{92373594-37E8-4E18-B9B3-089602AB078F}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{92940CB8-DEA8-4792-8A97-4307E7148310}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{93F68CC3-AC9B-4983-9241-1361E34DA4EF}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{95470757-6950-4681-BDE0-A9B356E3C44B}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{9809208F-C521-4ABF-A3F6-AA9928FAF4D4}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{99543F91-DBBF-48E7-B1C0-1C95E551F50C}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{9A7AA36B-3CD5-41FF-AC54-722C7C4125D9}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{9AAC8C99-C171-4845-B83E-57D27C286F93}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{9D9D2B26-5B49-4933-8448-7FBFA93EFE2B}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{A1CBF267-102C-4D8A-9F64-23E218CEAB2D}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{A5D51186-CF4D-46F6-AFF1-DD55F4239C42}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{A70CB795-0B5F-4D9B-AA32-9C8C0C44D0FE}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{A7E21053-0D56-411F-935D-C8B9869CB2D5}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{A9752562-4B80-4573-839A-B6697E760AF7}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{AACF46D5-8790-45AC-8F0E-597AA5015EE9}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{ABCF296C-FA57-4323-87CA-02D715446300}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{AC50E10A-FC2B-458F-A64C-FFE2A72D2518}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{AD586740-FCA8-4A9D-ACE2-0ADEFD4F4000}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{AFF16D36-74BB-4F00-A467-4A2D680A926F}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{B025BCF7-4E2F-49BF-93E5-5E7A742B1110}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{B195C211-3889-432B-90D9-ECAB2C224782}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{B19C40B0-8EDD-4591-8DB9-5CD29F8C3FC2}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{B245BCD1-86D6-4A65-BA09-B2C432091D4E}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{B4C1E3F7-BB5E-4914-A6EF-6B7CC3CE8396}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{B4C967BC-3DE4-4C5A-87FC-1862C8A3F6B2}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{B75F653E-367F-46D2-A345-41C648813A6E}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{B7E9AB98-610C-4325-8EEA-DD7EFFEB9C2E}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{B896D368-30CF-4519-A6D2-83DF6BBB299F}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{B8F8883A-14B1-4C57-B8AE-9372272BF890}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{B934C2D7-5D84-489E-B675-549B158D8DEA}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{B9A053D7-5F93-422E-8464-EF4EB0E0DEC9}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{BAB76420-C07E-4BD0-8252-F7792A73D3C5}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{BC676463-361F-4D36-B472-D6FA6E8FF6E6}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{BD7B737F-8AB7-4D37-9449-C13511BDD612}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{C3C9CFA4-E7FD-4665-A7EF-013F812C3E15}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{C438293B-4094-4704-9BAC-5D45D5D2649D}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{C526781B-2F08-45E5-BF40-09EB1950A9C9}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{C5B05286-65FD-4045-ADAF-EDBD88BB865B}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{C5B30D6C-7A22-46C4-813E-DA56C7F4A4EC}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{C5F1C906-DFEE-42ED-99C1-ED876B1DEFC2}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{C5FF703E-9C85-4B76-9EB6-B0CF41E6CE2D}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{C77B1466-825F-459B-82DE-3991A0218982}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{C85BCD51-8B15-4179-ADA5-9C99F1F9FBE1}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{C8DAAA96-9572-4294-B4E4-3638E95592EF}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{C9BD79CD-BDB8-474E-B2B9-541940F2BDAD}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{CB626F14-E661-4CBA-BADD-1B5C6A749B32}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{CBC8F07D-9D72-49B7-96DB-F1327E4CD915}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{CE54A8EA-AF99-414F-A33D-422B2AE0BC11}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{CF32FEA9-DE86-4BB7-93E1-7DF6D87EA80B}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{D21D1F65-27AF-4EA2-A563-13C2D208FE5E}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{D25AA1E7-F79E-4669-8D39-E1BACECF19D1}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{D45087E3-CF91-4DA4-A633-74456B84D167}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{D7D4B643-F6F8-4DAC-9A77-A88F2B12CB0D}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{D856860D-4E9A-4FCF-B6AD-4EA51512C1CB}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{D9DB31E8-EA5C-4EBC-A56D-ADF6FDAF7259}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{D9DCEFE8-8AB0-4504-9674-A73E512CC848}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{DA034927-A22B-46CC-9109-1951879E454E}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{DB40C919-E47D-47B0-9CA7-2FCB40C23276}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{DBA8832B-F2B7-4C3C-A91E-FEE4DB3DFB1D}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{DBD60BB4-CD3A-4998-B881-9E698F34CC51}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{DC98FA08-01DD-4CE7-A3D3-7F33D3662CAA}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{DCB8F9B3-822B-4A97-96B5-6D60211F627A}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{DDB4C9EA-01B3-4BA8-9BB7-DBF30F3AF20C}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{DDB55B9C-0AE2-4462-A416-688B18F23AFA}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{E0ABBE6F-15B0-476F-A558-30CBEDD626E9}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{E14EC54A-B5C2-4DC8-B312-2A5C4210E990}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{E201886F-8D71-4A5D-8305-E20B658C3939}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{E2E54681-7DF9-4186-9333-30D95AD93DD0}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{E614B30B-6566-45AB-BBB3-FBC7FDBF7A8F}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{E7E05CE0-D400-4769-928F-6C6632BB8F8C}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{E8B411B8-D781-40BC-ACFA-91C92C871EAE}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{E94824E6-36C6-4DA4-88D7-49EBEAD0537A}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{E95E447E-D895-45CD-AD4B-79882AD66D41}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{EB74F06B-E540-4550-9935-D70CE14B646B}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{EC59E87C-5E24-4712-B543-1E10067A029A}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{F2F000A9-E66A-4696-A797-B7E111CDC9A6}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{F49E8715-5241-4395-9A2A-B5A1269D7EDB}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{F561991C-4A2D-43C6-85A1-5BA4337EA271}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{F784A1F7-3B6E-45D0-BAFD-391A0DF5E31D}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{F7E8AEF5-E73C-4A21-A53C-4E83EE9BDBE3}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{F8C35FAD-7D0F-4C42-80A9-1A36D5EA9074}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{F8D25863-C66D-4A9F-AC01-ABB1A95BC936}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{FA501313-1E84-4E9C-9791-5388EA84B3D4}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{FB46B29E-F4FE-42C7-80D8-2282BE829107}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{FB515358-081B-4207-B095-511226128666}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{FDC30E1A-9B58-481D-8BF4-DD1CF0496778}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{FEA708B8-2824-44FF-9018-2ACDA1EF120D}
Successfully deleted: [Empty Folder] C:\Users\USER\appdata\local\{FF1B6F9A-7895-40C6-A889-3A636057A5F4}



~~~ FireFox

Successfully deleted: [File] C:\user.js
Emptied folder: C:\Users\USER\AppData\Roaming\mozilla\firefox\profiles\i0zl1opu.default-1377065521851\minidumps [289 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Tue 03/18/2014 at 21:37:01.81
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 



#15 myrti

myrti

    Sillyberry


  • Malware Study Hall Admin
  • 33,768 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:At home
  • Local time:03:03 PM

Posted 26 March 2014 - 07:13 AM

Hi,

 

sorry for the delay. Are you still getting the message?

 

regards

myrti


is that a bird?  a plane? nooo it's the flying blueberry!

If I have been helping you and haven't replied in 2 days, feel free to shoot me a PM! Please don't send help request via PM, unless I am already helping you. Use the forums!

 

Follow BleepingComputer on: Facebook | Twitter | Google+





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users