LyndaV

Thank you so very much. It's been a GREAT help.

Results of screen317's Security Check version 0.99.84 Windows 7 Service Pack 1 x86 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Windows Firewall Enabled! WMI entry may not exist for antivirus; attempting automatic update. `````````Anti-malware/Other Utilities Check:````````` CCleaner Adobe Flash Player 13.0.0.214 Google Chrome 29.0.1547.66 Google Chrome 35.0.1916.153 ````````Process Check: objlist.exe by Laurent```````` Microsoft Security Essentials MSMpEng.exe Microsoft Security Essentials msseces.exe Malwarebytes Anti-Malware mbams

All processes killed ========== OTL ========== Error: No service named mbr was found to stop! Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mbr deleted successfully. File C:\Users\LYNDAB~1\AppData\Local\Temp\mbr.sys not found. Service LMIInfo stopped successfully! Service LMIInfo deleted successfully! Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{26605315-8a79-4ff6-bbb9-63363b9d86b3} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{26605315-8a79-4ff6-bbb9-63363b9d86b3}\ not found. HKEY_LOCAL_MAC

I think I may have posted the first part of the OTL twice. Not sure

Farbar Service Scanner Version: 10-06-2014 Ran by Lynda Bincent (administrator) on 16-06-2014 at 10:49:14 Running from "C:\Users\Lynda Bincent\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BC7UGNA5" Microsoft Windows 7 Home Basic Service Pack 1 (X86) Boot Mode: Normal **************************************************************** Internet Services: ============ Connection Status: ============== Localhost is accessible. LAN connected. Google IP is accessible. Google.com is accessible. Yahoo.com is accessible. Windows Firewall: ============= Firewall Dis

RogueKiller V9.0.2.0 [Jun 3 2014] by Adlice Software mail : http://www.adlice.com/contact/ Feedback : http://forum.adlice.com Website : http://www.adlice.com/softwares/roguekiller/ Blog : http://www.adlice.com Operating System : Windows 7 (6.1.7601 Service Pack 1) 32 bits version Started in : Normal mode User : Lynda Bincent [Admin rights] Mode : Remove -- Date : 06/16/2014 10:38:09 ¤¤¤ Bad processes : 0 ¤¤¤ ¤¤¤ Registry Entries : 6 ¤¤¤ [suspicious.Path] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mbr -> NOT SELECTED [suspicious.Path] HKEY_LOCAL_MACHINE\Syst

OTL Extras logfile created on: 6/16/2014 9:25:30 AM - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Lynda Bincent\Downloads Home Basic Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.17041) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 1015.30 Mb Total Physical Memory | 141.95 Mb Available Physical Memory | 13.98% Memory free 1.99 Gb Paging File | 0.83 Gb Available in Paging File | 41.76% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: |

========== Files/Folders - Created Within 30 Days ========== [2014/06/15 23:06:16 | 000,000,000 | ---D | C] -- C:\ProgramData\RogueKiller [2014/06/15 21:36:16 | 000,110,296 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys [2014/06/15 21:35:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware [2014/06/15 21:34:37 | 000,074,456 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamchameleon.sys [2014/06/15 21:34:37 | 000,051,928 | ---- | C] (Malwarebytes Corporation) -- C:\Wi

OTL logfile created on: 6/16/2014 9:25:30 AM - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Lynda Bincent\Downloads Home Basic Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.17041) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 1015.30 Mb Total Physical Memory | 141.95 Mb Available Physical Memory | 13.98% Memory free 1.99 Gb Paging File | 0.83 Gb Available in Paging File | 41.76% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %System

. ==== Installed Programs ====================== . Adobe Flash Player 13 Plugin Adobe Flash Player 14 ActiveX Apple Application Support Apple Software Update CCleaner Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition Facebook Video Calling 1.2.0.287 Google Chrome Google Talk Plugin Google Toolbar for Internet Explorer Google Update Helper Intel® Graphics Media Accelerator Driver Java 7 Update 7 Java Auto Updater Logitech Vid HD Logitech Webcam Software LogMeIn Hamachi Malwarebytes Anti-Malware version 2.0.2.1012 Microsoft .NET Framework 4.5.1 Microsoft

DDS (Ver_2012-11-20.01) - NTFS_x86 Internet Explorer: 11.0.9600.17041 BrowserJavaVersion: 10.7.2 Run by Lynda Bincent at 1:27:28 on 2014-06-16 . ============== Running Processes ================ . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe c:\Program Files\Microsoft Security Client\MsMpEng.exe C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_d5cfa0b8f21ea198\STacSV.exe C:\Windows\System32\spoolsv.exe C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86

RogueKiller V9.0.2.0 [Jun 3 2014] by Adlice Software mail : http://www.adlice.com/contact/ Feedback : http://forum.adlice.com Website : http://www.adlice.com/softwares/roguekiller/ Blog : http://www.adlice.com Operating System : Windows 7 (6.1.7601 Service Pack 1) 32 bits version Started in : Normal mode User : Lynda Bincent [Admin rights] Mode : Scan -- Date : 06/16/2014 01:09:56 ¤¤¤ Bad processes : 0 ¤¤¤ ¤¤¤ Registry Entries : 4 ¤¤¤ [PUM.Policies] HKEY_USERS\S-1-5-21-820361396-3150281825-3581644629-1004\Software\Microsoft\Windows\CurrentVersion\Policies\System | Disabl

Thank you

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.4 (04.06.2014:1) OS: Windows 7 Home Basic x86 Ran by Lynda Bincent on Sun 06/15/2014 at 21:04:46.05 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-820361396-3150281825-3581644629-1004\Software\sweetim Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracin

# AdwCleaner v3.212 - Report created 15/06/2014 at 20:38:51 # Updated 05/06/2014 by Xplode # Operating System : Windows 7 Home Basic Service Pack 1 (32 bits) # Username : Lynda Bincent - LYNDALAPTOP # Running from : C:\Users\Lynda Bincent\Downloads\adwcleaner_3.212 (1).exe # Option : Clean ***** [ Services ] ***** ***** [ Files / Folders ] ***** Folder Deleted : C:\ProgramData\Babylon Folder Deleted : C:\ProgramData\Media Get LLC Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Finder Folder Deleted : C:\Program Files\Conduit Folder Deleted : C:\Program Files