1.) Ya appdata is hidden by default. No worries.
2.) I did not see any iobit this time. Good job!
There is a setup file for it in your downloads folder though here:
c:\users\kevin\downloads\infohelper.exe
I would delete it.
3.)Herd protect found more: (Or I missed some before, I took my time looking at the log this time-apologies.)
Remove just like before the following:
Code:
File path: c:\users\kevin\appdata\roaming\getprivate\gp_upd.exe
Publisher:
MD5: 5a9f1e5cae14c680846fb62016139986
SHA-1: e020a54e6ef01cd35f1554688beea51242c8ba13
Created: 23/05/2014 14:50:35
Detections: 3
Determination: Inconclusive
Code:
File path: c:\users\kevin\appdata\local\temp\gpupd.exe
Publisher:
Signer: Closed Joint-Stock Company
MD5: 356cba6f32e67e7c607a0d467334a93e
SHA-1: c8ea747c00b74a4393057fceefdea96df5c2effc
Created: 26/05/2014 18:33:46
Detections: 4
Determination: Adware
Code:
File path: c:\windows\iun6002.exe
Publisher: Indigo Rose Corporation
MD5: 456462905091db042141487fe030e3c9
SHA-1: bb57b4850528c3c8d9bf159fb5b9f414ddc7d5d7
Created: 25/04/2013 12:49:28
Detections: 1
Code:
File path: c:\programdata\installmate\{b6fb7da3-dcc3-4756-9c74-f6e285b1e79a}\setup.exe
Publisher: Tarma Software Research Pty Ltd
Signer: Tarma Software Research Pty Ltd
MD5: c97564797b0780cdbd2c50337805257e
SHA-1: 4fc8449d2fcd970b9d5db764917d70b2d9fd0e25
Created: 01/04/2014 12:07:02
Detections: 1
Code:
File path: c:\programdata\installmate\{6586566d-cc51-4b6a-bdff-daee3173edca}\setup.exe
Publisher: Tarma Software Research Pty Ltd
Signer: Tarma Software Research Pty Ltd
MD5: c9e49b72b0e19e2757bfadc5c3ef8ece
SHA-1: 73c30425c6825e6d9ab4c964fa82f9543dcd1c71
Created: 11/03/2014 11:20:49
Detections: 2
Code:
File path: c:\users\kevin\appdata\roaming\settings manager\systemk\components\systemkhlpff10.dll
Publisher: Aztec Media Inc
Signer: AZTEC MEDIA INC.
MD5: 785916b14c94472c45864f1261f9df92
SHA-1: 875bf27a9d7ec8a57e1d22728a94605e77a66f99
Created: 26/05/2014 11:50:15
Detections: 3
Code:
File path: c:\users\kevin\appdata\roaming\settings manager\systemk\components\systemkhlpff11.dll
Publisher: Aztec Media Inc
Signer: AZTEC MEDIA INC.
MD5: 3b2d14bbf707833886d0a3a6a6b6aa84
SHA-1: d899a4b906a21bd09967dec18e585bbc0857613f
Created: 26/05/2014 11:50:15
Detections: 3
4.)Since you have show hidden files on,
Go into the c:\users\kevin\appdata\roaming\ file path and do a shift delete on the folder "settings manager". Lots of junk in there. Let me know the results. Shift delete will bypass the recycle bin and delete completely.
5.) -Uninstall spyhunter software. If not found in the uninstall a program, remove it in herdprotect.
6.)Restart the PC.
7.) How is the pc by the way? Pop up still appearing at boot? It shouldn't after the above is done.