Jump to content

mnazrin

Members
 View Profile  See their activity

  • Posts

    11

  • Joined

  • Last visited

 Content Type 

Posts posted by mnazrin

    GPU load 98% on idle, I suspect it came from "svchost.exe".

    in Resolved Malware Removal Logs

    Posted

    Results of screen317's Security Check version 0.99.56

    Windows 7 x64 (UAC is enabled)

    Out of date service pack!!

    Internet Explorer 8 Out of date!

    ``````````````Antivirus/Firewall Check:``````````````

    Windows Firewall Enabled!

    Windows Firewall Disabled!

    Avira Desktop

    Antivirus up to date!

    `````````Anti-malware/Other Utilities Check:`````````

    PC Tools Spyware Doctor with AntiVirus 9.1

    Malwarebytes Anti-Malware version 1.70.0.1100

    JavaFX 2.1.1

    Java 7 Update 9

    Adobe Flash Player 9 Flash Player out of Date!

    Adobe Flash Player 11.5.502.146

    Adobe Reader 10.1.5 Adobe Reader out of Date!

    Mozilla Firefox (17.0.1)

    Google Chrome 21.0.1180.83

    Google Chrome 21.0.1180.89

    Google Chrome 22.0.1229.79

    Google Chrome 22.0.1229.92

    Google Chrome 22.0.1229.94

    Google Chrome 23.0.1271.64

    Google Chrome 23.0.1271.91

    Google Chrome 23.0.1271.95

    Google Chrome 23.0.1271.97

    ````````Process Check: objlist.exe by Laurent````````

    Avira Antivir avgnt.exe

    Avira Antivir avguard.exe

    `````````````````System Health check`````````````````

    Total Fragmentation on Drive C: 0%

    ````````````````````End of Log``````````````````````

    GPU load 98% on idle, I suspect it came from "svchost.exe".

    in Resolved Malware Removal Logs

    Posted

    <p> </p>

    <div># AdwCleaner v2.105 - Logfile created 01/11/2013 at 01:26:53</div>

    <div># Updated 08/01/2013 by Xplode</div>

    <div># Operating system : Windows 7 Ultimate  (64 bits)</div>

    <div># User : Nazrin - NAZRIN-PC</div>

    <div># Boot Mode : Normal</div>

    <div># Running from : C:\Users\Nazrin\Desktop\adwcleaner.exe</div>

    <div># Option [Delete]</div>

    <div> </div>

    <div> </div>

    <div>***** [services] *****</div>

    <div> </div>

    <div>Stopped & Deleted : Browser Manager</div>

    <div>Stopped & Deleted : Web Assistant Updater</div>

    <div> </div>

    <div>***** [Files / Folders] *****</div>

    <div> </div>

    <div>Deleted on reboot : C:\Program Files (x86)\BabylonToolbar</div>

    <div>Deleted on reboot : C:\Program Files (x86)\Perion</div>

    <div>Deleted on reboot : C:\Program Files\Web Assistant</div>

    <div>Deleted on reboot : C:\ProgramData\Babylon</div>

    <div>Deleted on reboot : C:\ProgramData\Browser Manager</div>

    <div>Deleted on reboot : C:\Users\Nazrin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph</div>

    <div>Deleted on reboot : C:\Users\Nazrin\AppData\LocalLow\BabylonToolbar</div>

    <div>Deleted on reboot : C:\Users\Nazrin\AppData\LocalLow\incredibar.com</div>

    <div>Deleted on reboot : C:\Users\Nazrin\AppData\Roaming\Babylon</div>

    <div>Deleted on reboot : C:\Users\Nazrin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Browser Manager</div>

    <div>Deleted on reboot : C:\Windows\SysWOW64\Browser Manager</div>

    <div>File Deleted : C:\user.js</div>

    <div>File Deleted : C:\Users\Nazrin\AppData\Roaming\Mozilla\Firefox\Profiles\65syudsg.default\bprotector_extensions.sqlite</div>

    <div>File Deleted : C:\Users\Nazrin\AppData\Roaming\Mozilla\Firefox\Profiles\65syudsg.default\bprotector_prefs.js</div>

    <div> </div>

    <div>***** [Registry] *****</div>

    <div> </div>

    <div>Data Deleted : HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\browse~1\23787~1.43\{16cdf~1\browse~1.dll</div>

    <div>Data Deleted : HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\browse~1\23787~1.43\{16cdf~1\browsemngr.dll</div>

    <div>Key Deleted : HKCU\Software\BabylonToolbar</div>

    <div>Key Deleted : HKCU\Software\BrowserMngr</div>

    <div>Key Deleted : HKCU\Software\DataMngr_Toolbar</div>

    <div>Key Deleted : HKCU\Software\IM</div>

    <div>Key Deleted : HKCU\Software\ImInstaller</div>

    <div>Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings</div>

    <div>Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}</div>

    <div>Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}</div>

    <div>Key Deleted : HKCU\Software\5b4dbddb46ee442</div>

    <div>Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}</div>

    <div>Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}</div>

    <div>Key Deleted : HKLM\Software\Babylon</div>

    <div>Key Deleted : HKLM\Software\BabylonToolbar</div>

    <div>Key Deleted : HKLM\Software\BrowserMngr</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\AppID\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\AppID\Extension.DLL</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\b</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\Babylon.dskBnd</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane.1</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\esrv.IncredibarESrvc</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\esrv.IncredibarESrvc.1</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\I</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\IncredibarApp.appCore</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\IncredibarApp.appCore.1</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{48C9C8B0-A546-46C1-A81F-47A31E623E9D}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}</div>

    <div>Key Deleted : HKLM\Software\DataMngr</div>

    <div>Key Deleted : HKLM\Software\incredibar.com</div>

    <div>Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_installer_RASAPI32</div>

    <div>Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_installer_RASMANCS</div>

    <div>Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASAPI32</div>

    <div>Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASMANCS</div>

    <div>Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32</div>

    <div>Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS</div>

    <div>Key Deleted : HKLM\Software\Web Assistant</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\5b4dbddb46ee442</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{336D0C35-8A85-403a-B9D2-65C292C39087}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C01315C7-B4E2-4864-B43D-5FAFC414D179}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C1545464-C77C-4130-A572-1C619E2895FE}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{ED0E67AD-926C-4008-87E5-03CF72AA2A7E}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EF7FEC6D-451B-4452-9D26-7E10C6B5DB6E}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F9639E4A-801B-4843-AEE3-03D9DA199E77}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohdhomoefph</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{74C36554-31F0-49DD-8857-ED6A64DF45BE}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IM</div>

    <div>Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\incredibar</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}</div>

    <div>Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd</div>

    <div>Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1</div>

    <div>Key Deleted : HKLM\SOFTWARE\Web Assistant</div>

    <div>Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]</div>

    <div>Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [browserMngr Start Page]</div>

    <div>Value Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]</div>

    <div>Value Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [browserMngrDefaultScope]</div>

    <div>Value Deleted : HKCU\Software\Mozilla\Firefox\Extensions [{b64982b1-d112-42b5-b1e4-d3867c4533f8}]</div>

    <div>Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]</div>

    <div>Value Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]</div>

    <div>Value Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{F9639E4A-801B-4843-AEE3-03D9DA199E77}]</div>

    <div> </div>

    <div>***** [internet Browsers] *****</div>

    <div> </div>

    <div>-\\ Internet Explorer v8.0.7600.16385</div>

    <div> </div>

    <div>Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://search.babylon.com/?affID=112542&tt=bandext_3312_8&babsrc=NT_ss&mntrId=02540b83000000000000e0cb4e5e09d6 --> hxxp://www.google.com</div>

    <div> </div>

    <div>-\\ Mozilla Firefox v17.0.1 (en-US)</div>

    <div> </div>

    <div>File : C:\Users\Nazrin\AppData\Roaming\Mozilla\Firefox\Profiles\65syudsg.default\prefs.js</div>

    <div> </div>

    <div>Deleted : user_pref("browser.search.defaultenginename", "Search the web (Babylon)");</div>

    <div>Deleted : user_pref("browser.search.order.1", "Search the web (Babylon)");</div>

    <div> </div>

    <div>-\\ Google Chrome v23.0.1271.97</div>

    <div> </div>

    <div>File : C:\Users\Nazrin\AppData\Local\Google\Chrome\User Data\Default\Preferences</div>

    <div> </div>

    <div>Deleted [l.13] : urls_to_restore_on_startup = [ "hxxp://google.com/", "hxxp://search.babylon.com/?affID=112[...]</div>

    <div>Deleted [l.2308] : urls_to_restore_on_startup = [ "hxxp://google.com/", "hxxp://search.babylon.com/?affID=112542[...]</div>

    <div> </div>

    <div>*************************</div>

    <div> </div>

    <div>AdwCleaner[R1].txt - [15535 octets] - [10/01/2013 21:07:48]</div>

    <div>AdwCleaner[R2].txt - [15596 octets] - [11/01/2013 01:19:11]</div>

    <div>AdwCleaner[s1].txt - [15378 octets] - [11/01/2013 01:26:53]</div>

    <div> </div>

    <div>########## EOF - C:\AdwCleaner[s1].txt - [15439 octets] ##########</div>

    <div> </div>

    GPU load 98% on idle, I suspect it came from "svchost.exe".

    in Resolved Malware Removal Logs

    Posted

    # AdwCleaner v2.105 - Logfile created 01/11/2013 at 01:26:53

    # Updated 08/01/2013 by Xplode

    # Operating system : Windows 7 Ultimate (64 bits)

    # User : Nazrin - NAZRIN-PC

    # Boot Mode : Normal

    # Running from : C:\Users\Nazrin\Desktop\adwcleaner.exe

    # Option [Delete]

    ***** [services] *****

    Stopped & Deleted : Browser Manager

    Stopped & Deleted : Web Assistant Updater

    ***** [Files / Folders] *****

    Deleted on reboot : C:\Program Files (x86)\BabylonToolbar

    Deleted on reboot : C:\Program Files (x86)\Perion

    Deleted on reboot : C:\Program Files\Web Assistant

    Deleted on reboot : C:\ProgramData\Babylon

    Deleted on reboot : C:\ProgramData\Browser Manager

    Deleted on reboot : C:\Users\Nazrin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph

    Deleted on reboot : C:\Users\Nazrin\AppData\LocalLow\BabylonToolbar

    Deleted on reboot : C:\Users\Nazrin\AppData\LocalLow\incredibar.com

    Deleted on reboot : C:\Users\Nazrin\AppData\Roaming\Babylon

    Deleted on reboot : C:\Users\Nazrin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Browser Manager

    Deleted on reboot : C:\Windows\SysWOW64\Browser Manager

    File Deleted : C:\user.js

    File Deleted : C:\Users\Nazrin\AppData\Roaming\Mozilla\Firefox\Profiles\65syudsg.default\bprotector_extensions.sqlite

    File Deleted : C:\Users\Nazrin\AppData\Roaming\Mozilla\Firefox\Profiles\65syudsg.default\bprotector_prefs.js

    ***** [Registry] *****

    Data Deleted : HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\browse~1\23787~1.43\{16cdf~1\browse~1.dll

    Data Deleted : HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\browse~1\23787~1.43\{16cdf~1\browsemngr.dll

    Key Deleted : HKCU\Software\BabylonToolbar

    Key Deleted : HKCU\Software\BrowserMngr

    Key Deleted : HKCU\Software\DataMngr_Toolbar

    Key Deleted : HKCU\Software\IM

    Key Deleted : HKCU\Software\ImInstaller

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}

    Key Deleted : HKCU\Software\5b4dbddb46ee442

    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}

    Key Deleted : HKLM\Software\Babylon

    Key Deleted : HKLM\Software\BabylonToolbar

    Key Deleted : HKLM\Software\BrowserMngr

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\Extension.DLL

    Key Deleted : HKLM\SOFTWARE\Classes\b

    Key Deleted : HKLM\SOFTWARE\Classes\Babylon.dskBnd

    Key Deleted : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1

    Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore

    Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1

    Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane

    Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane.1

    Key Deleted : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc

    Key Deleted : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1

    Key Deleted : HKLM\SOFTWARE\Classes\esrv.IncredibarESrvc

    Key Deleted : HKLM\SOFTWARE\Classes\esrv.IncredibarESrvc.1

    Key Deleted : HKLM\SOFTWARE\Classes\I

    Key Deleted : HKLM\SOFTWARE\Classes\IncredibarApp.appCore

    Key Deleted : HKLM\SOFTWARE\Classes\IncredibarApp.appCore.1

    Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap

    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}

    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{48C9C8B0-A546-46C1-A81F-47A31E623E9D}

    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}

    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}

    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

    Key Deleted : HKLM\Software\DataMngr

    Key Deleted : HKLM\Software\incredibar.com

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_installer_RASAPI32

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_installer_RASMANCS

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASAPI32

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASMANCS

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS

    Key Deleted : HKLM\Software\Web Assistant

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\5b4dbddb46ee442

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{336D0C35-8A85-403a-B9D2-65C292C39087}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C01315C7-B4E2-4864-B43D-5FAFC414D179}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C1545464-C77C-4130-A572-1C619E2895FE}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{ED0E67AD-926C-4008-87E5-03CF72AA2A7E}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EF7FEC6D-451B-4452-9D26-7E10C6B5DB6E}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F9639E4A-801B-4843-AEE3-03D9DA199E77}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohdhomoefph

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{74C36554-31F0-49DD-8857-ED6A64DF45BE}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IM

    Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\incredibar

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}

    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd

    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1

    Key Deleted : HKLM\SOFTWARE\Web Assistant

    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]

    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [browserMngr Start Page]

    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]

    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [browserMngrDefaultScope]

    Value Deleted : HKCU\Software\Mozilla\Firefox\Extensions [{b64982b1-d112-42b5-b1e4-d3867c4533f8}]

    Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]

    Value Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]

    Value Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{F9639E4A-801B-4843-AEE3-03D9DA199E77}]

    ***** [internet Browsers] *****

    -\\ Internet Explorer v8.0.7600.16385

    Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://search.babylon.com/?affID=112542&tt=bandext_3312_8&babsrc=NT_ss&mntrId=02540b83000000000000e0cb4e5e09d6 --> hxxp://www.google.com

    -\\ Mozilla Firefox v17.0.1 (en-US)

    File : C:\Users\Nazrin\AppData\Roaming\Mozilla\Firefox\Profiles\65syudsg.default\prefs.js

    Deleted : user_pref("browser.search.defaultenginename", "Search the web (Babylon)");

    Deleted : user_pref("browser.search.order.1", "Search the web (Babylon)");

    -\\ Google Chrome v23.0.1271.97

    File : C:\Users\Nazrin\AppData\Local\Google\Chrome\User Data\Default\Preferences

    Deleted [l.13] : urls_to_restore_on_startup = [ "hxxp://google.com/", "hxxp://search.babylon.com/?affID=112[...]

    Deleted [l.2308] : urls_to_restore_on_startup = [ "hxxp://google.com/", "hxxp://search.babylon.com/?affID=112542[...]

    *************************

    AdwCleaner[R1].txt - [15535 octets] - [10/01/2013 21:07:48]

    AdwCleaner[R2].txt - [15596 octets] - [11/01/2013 01:19:11]

    AdwCleaner[s1].txt - [15378 octets] - [11/01/2013 01:26:53]

    ########## EOF - C:\AdwCleaner[s1].txt - [15439 octets] ##########

    GPU load 98% on idle, I suspect it came from "svchost.exe".

    in Resolved Malware Removal Logs

    Posted

    Here's the contents, btw what do you mean by "Please look over what was found, we're going to delete it all in the next step....if there's something you may want to keep...please let me know and I'll explain to why it shouldn't be on your system."? Where should I go to look for those stuff that found?

    # AdwCleaner v2.105 - Logfile created 01/10/2013 at 21:07:48

    # Updated 08/01/2013 by Xplode

    # Operating system : Windows 7 Ultimate (64 bits)

    # User : Nazrin - NAZRIN-PC

    # Boot Mode : Normal

    # Running from : C:\Users\Nazrin\Desktop\adwcleaner.exe

    # Option [search]

    ***** [services] *****

    Found : Browser Manager

    Found : Web Assistant Updater

    ***** [Files / Folders] *****

    File Found : C:\user.js

    File Found : C:\Users\Nazrin\AppData\Roaming\Mozilla\Firefox\Profiles\65syudsg.default\bprotector_extensions.sqlite

    File Found : C:\Users\Nazrin\AppData\Roaming\Mozilla\Firefox\Profiles\65syudsg.default\bprotector_prefs.js

    Folder Found : C:\Program Files (x86)\BabylonToolbar

    Folder Found : C:\Program Files (x86)\Perion

    Folder Found : C:\Program Files\Web Assistant

    Folder Found : C:\ProgramData\Babylon

    Folder Found : C:\ProgramData\Browser Manager

    Folder Found : C:\Users\Nazrin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph

    Folder Found : C:\Users\Nazrin\AppData\LocalLow\BabylonToolbar

    Folder Found : C:\Users\Nazrin\AppData\LocalLow\incredibar.com

    Folder Found : C:\Users\Nazrin\AppData\Roaming\Babylon

    Folder Found : C:\Users\Nazrin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Browser Manager

    Folder Found : C:\Windows\SysWOW64\Browser Manager

    ***** [Registry] *****

    Data Found : HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\browse~1\23787~1.43\{16cdf~1\browse~1.dll

    Data Found : HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\browse~1\23787~1.43\{16cdf~1\browsemngr.dll

    Key Found : HKCU\Software\BabylonToolbar

    Key Found : HKCU\Software\BrowserMngr

    Key Found : HKCU\Software\DataMngr_Toolbar

    Key Found : HKCU\Software\IM

    Key Found : HKCU\Software\ImInstaller

    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings

    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}

    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}

    Key Found : HKCU\Software\5b4dbddb46ee442

    Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

    Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}

    Key Found : HKLM\Software\Babylon

    Key Found : HKLM\Software\BabylonToolbar

    Key Found : HKLM\Software\BrowserMngr

    Key Found : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}

    Key Found : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}

    Key Found : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

    Key Found : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}

    Key Found : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}

    Key Found : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}

    Key Found : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}

    Key Found : HKLM\SOFTWARE\Classes\AppID\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}

    Key Found : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

    Key Found : HKLM\SOFTWARE\Classes\AppID\escort.DLL

    Key Found : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL

    Key Found : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL

    Key Found : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL

    Key Found : HKLM\SOFTWARE\Classes\AppID\esrv.EXE

    Key Found : HKLM\SOFTWARE\Classes\AppID\Extension.DLL

    Key Found : HKLM\SOFTWARE\Classes\b

    Key Found : HKLM\SOFTWARE\Classes\Babylon.dskBnd

    Key Found : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1

    Key Found : HKLM\SOFTWARE\Classes\bbylnApp.appCore

    Key Found : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1

    Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane

    Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane.1

    Key Found : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc

    Key Found : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1

    Key Found : HKLM\SOFTWARE\Classes\esrv.IncredibarESrvc

    Key Found : HKLM\SOFTWARE\Classes\esrv.IncredibarESrvc.1

    Key Found : HKLM\SOFTWARE\Classes\I

    Key Found : HKLM\SOFTWARE\Classes\IncredibarApp.appCore

    Key Found : HKLM\SOFTWARE\Classes\IncredibarApp.appCore.1

    Key Found : HKLM\SOFTWARE\Classes\Prod.cap

    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}

    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{48C9C8B0-A546-46C1-A81F-47A31E623E9D}

    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}

    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}

    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

    Key Found : HKLM\Software\DataMngr

    Key Found : HKLM\Software\incredibar.com

    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_installer_RASAPI32

    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_installer_RASMANCS

    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASAPI32

    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASMANCS

    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32

    Key Found : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS

    Key Found : HKLM\Software\Web Assistant

    Key Found : HKLM\SOFTWARE\Wow6432Node\5b4dbddb46ee442

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{336D0C35-8A85-403a-B9D2-65C292C39087}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C01315C7-B4E2-4864-B43D-5FAFC414D179}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C1545464-C77C-4130-A572-1C619E2895FE}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{ED0E67AD-926C-4008-87E5-03CF72AA2A7E}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EF7FEC6D-451B-4452-9D26-7E10C6B5DB6E}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F9639E4A-801B-4843-AEE3-03D9DA199E77}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd

    Key Found : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg

    Key Found : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohdhomoefph

    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{74C36554-31F0-49DD-8857-ED6A64DF45BE}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}

    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar

    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IM

    Key Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\incredibar

    Key Found : HKLM\SOFTWARE\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}

    Key Found : HKLM\SOFTWARE\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}

    Key Found : HKLM\SOFTWARE\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}

    Key Found : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}

    Key Found : HKLM\SOFTWARE\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}

    Key Found : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}

    Key Found : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}

    Key Found : HKLM\SOFTWARE\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}

    Key Found : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}

    Key Found : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}

    Key Found : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}

    Key Found : HKLM\SOFTWARE\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}

    Key Found : HKLM\SOFTWARE\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}

    Key Found : HKLM\SOFTWARE\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}

    Key Found : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}

    Key Found : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}

    Key Found : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}

    Key Found : HKLM\SOFTWARE\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}

    Key Found : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}

    Key Found : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}

    Key Found : HKLM\SOFTWARE\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}

    Key Found : HKLM\SOFTWARE\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}

    Key Found : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}

    Key Found : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}

    Key Found : HKLM\SOFTWARE\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}

    Key Found : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}

    Key Found : HKLM\SOFTWARE\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}

    Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd

    Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd

    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1

    Key Found : HKLM\SOFTWARE\Web Assistant

    Key Found : HKU\S-1-5-21-2048211138-2074512518-661749268-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

    Key Found : HKU\S-1-5-21-2048211138-2074512518-661749268-1001\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}

    Value Found : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]

    Value Found : HKCU\Software\Microsoft\Internet Explorer\Main [browserMngr Start Page]

    Value Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]

    Value Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [browserMngrDefaultScope]

    Value Found : HKCU\Software\Mozilla\Firefox\Extensions [{b64982b1-d112-42b5-b1e4-d3867c4533f8}]

    Value Found : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]

    Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]

    Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{D0F4A166-B8D4-48b8-9D63-80849FE137CB}]

    Value Found : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{F9639E4A-801B-4843-AEE3-03D9DA199E77}]

    ***** [internet Browsers] *****

    -\\ Internet Explorer v8.0.7600.16385

    [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://search.babylon.com/?affID=112542&tt=bandext_3312_8&babsrc=NT_ss&mntrId=02540b83000000000000e0cb4e5e09d6

    -\\ Mozilla Firefox v17.0.1 (en-US)

    File : C:\Users\Nazrin\AppData\Roaming\Mozilla\Firefox\Profiles\65syudsg.default\prefs.js

    Found : user_pref("browser.search.defaultenginename", "Search the web (Babylon)");

    Found : user_pref("browser.search.order.1", "Search the web (Babylon)");

    -\\ Google Chrome v23.0.1271.97

    File : C:\Users\Nazrin\AppData\Local\Google\Chrome\User Data\Default\Preferences

    Found [l.13] : urls_to_restore_on_startup = [ "hxxp://google.com/", "hxxp://search.babylon.com/?affID=112542&tt=bandext_3312_8&babsrc=HP_ss&mntrId=02540b83000000000000e0cb4e5e09d6" ]

    Found [l.2298] : urls_to_restore_on_startup = [ "hxxp://google.com/", "hxxp://search.babylon.com/?affID=112542&tt=bandext_3312_8&babsrc=HP_ss&mntrId=02540b83000000000000e0cb4e5e09d6" ]

    *************************

    AdwCleaner[R1].txt - [15472 octets] - [10/01/2013 21:07:48]

    ########## EOF - C:\AdwCleaner[R1].txt - [15533 octets] ##########

    GPU load 98% on idle, I suspect it came from "svchost.exe".

    in Resolved Malware Removal Logs

    Posted

    Hello, need help here regarding malware/virus that makes my GPU load to 98% on idle. What I did to fix it was by open task manager and delete some of the apps on "process tab" until the one called "svchost.exe" under my USERNAME not SYSTEM. When I stop it my gpu load start to drop as normal on idle. I did scan my pc using Malwarebytes Anti-malware on safe mode and removed it and still it came back when I restart my pc.

    I've run DDS and here's the attachment.

    dds.txt

    attach.txt

    GPU load 98% on idle, I suspect it came from "svchost.exe".

    in Malwarebytes for Windows Support Forum

    Posted

    Hello, need help here regarding malware/virus that makes my GPU load to 98% on idle. What I did to fix it was by open task manager and delete some of the apps on "process tab" until the one called "svchost.exe" under my USERNAME not SYSTEM. When I stop it my gpu load start to drop as normal on idle. I did scan my pc using Malwarebytes Anti-malware on safe mode and removed it and still it came back when I restart my pc.

    What should I do to stop this?

    Thank you.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.