New
#11
Post #7 is a 32 bit version
X86 is 32 bit .
Click here Farbar Recovery Scan Tool
Select the one that goes with your OS either 64-bit or 32-bit
Open Notepad . Inside Notepad paste the highlighted text inside notepad
start
() C:\Users\ela\AppData\Roaming\BrowserCompanion\tcbhn.exe
() C:\ProgramData\IBUpdaterService\ibsvc.exe
(cake bake) C:\Program Files\WDesktop.Updater.exe
HKLM\...\Run: [SweetIM] - C:\Program Files\SweetIM\Messenger\SweetIM.exe [111928 2010-10-13] (SweetIM Technologies Ltd.)
HKLM\...\Run: [DATAMNGR] - C:\PROGRA~1\WI3C8A~1\Datamngr\DATAMN~1.EXE [x]
HKLM\...\Run: [facemoods] - "C:\Program Files\facemoods.com\facemoods\1.4.17.10\facemoodssrv.exe" /md I [x]
HKLM\...\Run: [Otshot] - c:\program files\otshot\otshot.exe -minimize [x]
R2 WebCake Desktop Updater; C:\Program Files\WDesktop.Updater.exe [51992 2013-07-29] (cake bake)
S3 MozillaMaintenance; "C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe" [x]
S2 otshot; C:\program files\otshot\ZalmanUpdateService.exe [x]
C:\ProgramData\hash.dat
end
Click on File ====> Save As
File Name : Fixlist.txt
Save as type : All Files
Location : Desktop
Click on the [Save] button .
Open FRST tool again from the desktop and click on the [Fix] button . Once complete it will create a new log called Fixlog.txt . Upload the new log created in your reply . It should be on the desktop .
Then run these programs
AdwCleaner
Click here AdwCleaner
Click on Download Now button
Save to the Desktop
Right-click on AdwCleaner.exe and choose
Click on Delete and confirm the prompt.
Your computer will be rebooted automatically. A text file will open after the restart.
Upload the log : The log file is at C:\AdwCleaner[Sn].txt
Download Junkware Removal Toolkit
Click here Junkware Removal Tool to download
Drag the JRT.exe from the Downloads folder to your Desktop
Right click JRT.exe and choose
Once done upload the JRT.txt file
<==== Download Link
<==== Download Link
Click on one of the links above that goes with your Windows 7 bit versions
Save to the Desktop.
Close all windows and browsers
Right click on and choose
Press: SCAN
provide the RKreport.txt (Mode: Scan) in your reply.