jeffj768

# AdwCleaner v6.030 - Logfile created 06/11/2016 at 09:49:58 # Updated on 19/10/2016 by Malwarebytes # Database : 2016-11-05.1 [Server] # Operating System : Windows 10 Home (X64) # Username : user - HP # Running from : C:\Users\user\Downloads\AdwCleaner.exe # Mode: Clean # Support : hxxps://www.malwarebytes.com/support ***** [ Services ] ***** ***** [ Folders ] ***** ***** [ Files ] ***** ***** [ DLL ] ***** ***** [ WMI ] ***** ***** [ Shortcuts ] ***** ***** [ Scheduled Tasks ] ***** ***** [ Registry ] ***** ***** [ Web browsers ] ***** [-] [C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Deleted: ask.com ************************* :: "Tracing" keys deleted :: Winsock settings cleared ************************* C:\AdwCleaner\AdwCleaner[C0].txt - [2840 Bytes] - [05/11/2016 18:10:56] C:\AdwCleaner\AdwCleaner[C2].txt - [922 Bytes] - [06/11/2016 09:49:58] C:\AdwCleaner\AdwCleaner[S0].txt - [3875 Bytes] - [05/11/2016 18:10:19] C:\AdwCleaner\AdwCleaner[S1].txt - [1328 Bytes] - [06/11/2016 09:49:22] ########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [1140 Bytes] ##########

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Malwarebytes Version: 8.0.9 (09.30.2016) Operating System: Windows 10 Home x64 Ran by user (Administrator) on 2016-11-06 at 9:34:38.46 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ File System: 0 Registry: 0 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 2016-11-06 at 9:39:45.85 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Fix result of Farbar Recovery Scan Tool (x64) Version: 04-11-2016 Ran by user (06-11-2016 09:26:32) Run:1 Running from C:\Users\user\Desktop Loaded Profiles: user & (Available Profiles: user) Boot Mode: Normal ============================================== fixlist content: ***************** Start CreateRestorePoint: CloseProcesses: HKU\S-1-5-21-686175298-4145572272-2788465362-1001\...\Run: [GoogleChromeAutoLaunch_4E874A737D5662A34EBBEADB3A9C4A09] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [921192 2016-10-30] (Google Inc.) HKU\S-1-5-21-686175298-4145572272-2788465362-1001\...\MountPoints2: {587fa364-a3c6-11e6-82b9-9457a5011000} - "E:\setup64.exe" HKU\S-1-5-21-686175298-4145572272-2788465362-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [GoogleChromeAutoLaunch_4E874A737D5662A34EBBEADB3A9C4A09] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [921192 2016-10-30] (Google Inc.) HKU\S-1-5-21-686175298-4145572272-2788465362-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {587fa364-a3c6-11e6-82b9-9457a5011000} - "E:\setup64.exe" SearchScopes: HKLM-x32 -> {44775DA8-56AC-4810-A381-EC4D8837A1A7} URL = hxxp://www.amazon.ca/s/ref=azs_osd_ieaca?ie=UTF-8&tag=hp-ca2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKU\S-1-5-21-686175298-4145572272-2788465362-1001 -> {44775DA8-56AC-4810-A381-EC4D8837A1A7} URL = hxxp://www.amazon.ca/s/ref=azs_osd_ieaca?ie=UTF-8&tag=hp-ca2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKU\S-1-5-21-686175298-4145572272-2788465362-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {44775DA8-56AC-4810-A381-EC4D8837A1A7} URL = hxxp://www.amazon.ca/s/ref=azs_osd_ieaca?ie=UTF-8&tag=hp-ca2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms} CHR Extension: (Google Slides) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-03-21] CHR Extension: (Google Drive) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-03-21] CHR Extension: (Chrome Web Store Payments) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-01] CHR Extension: (Chrome Media Router) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-29] U3 aspnet_state; no ImagePath C:\Users\user\AppData\Local\Temp\libeay32.dll C:\Users\user\AppData\Local\Temp\msvcr120.dll C:\Users\user\AppData\Local\Temp\SpotifyUninstall.exe C:\Users\user\AppData\Local\Temp\sqlite3.dll Task: {0016E758-8423-4D41-A23E-938081252422} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION Task: {2742367D-64A0-4AAE-B262-F96492E2C0D5} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> No File <==== ATTENTION Task: {35770F23-12C9-4C60-8603-A6E86596B55D} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> No File <==== ATTENTION Task: {3940C4F8-1423-4428-A4F1-D7B6D9636BF7} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION Task: {3A385A96-8152-4674-A9C5-48D03906E830} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION Task: {4E5C829D-5C5A-4992-A4E0-4503447B1A4F} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION Task: {59E15F7E-2F78-4743-965D-4FAFF34B2605} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> No File <==== ATTENTION Task: {63A611C1-9FD8-4FA9-9F5C-88A5B3D9C659} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION Task: {6E91C407-0745-491A-B4B4-422B9CBDDF85} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION Task: {9C13038E-69E2-40D7-B633-FEF88F56DD1B} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION Task: {9E360161-A587-4D4F-AFF4-0F6AC273D215} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION Task: {A64EBAB1-B394-4510-BCC5-700845D1D317} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION Task: {D45BE533-7897-49E9-BA67-EC3698D91D4C} - \WPD\SqmUpload_S-1-5-21-686175298-4145572272-2788465362-1001 -> No File <==== ATTENTION Task: {F1FF0983-25AF-4CD7-AA0C-6F46C2F92D66} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION Task: {F50C325F-75CD-4F8D-BF8A-49A29D9C7513} - \McAfee\McAfee Idle Detection Task -> No File <==== ATTENTION HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service" HKLM\...\StartupApproved\Run32: => "AvgUi" HKLM\...\StartupApproved\Run32: => "AVG_UI" cmd: ipconfig /flushdns cmd: netsh advfirewall reset cmd: netsh advfirewall set allprofiles state on Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f CMD: bitsadmin /reset /allusers RemoveProxy: EmptyTemp: Reboot: end ***************** Restore point was successfully created. Processes closed successfully. HKU\S-1-5-21-686175298-4145572272-2788465362-1001\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_4E874A737D5662A34EBBEADB3A9C4A09 => value removed successfully "HKU\S-1-5-21-686175298-4145572272-2788465362-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{587fa364-a3c6-11e6-82b9-9457a5011000}" => key removed successfully HKCR\CLSID\{587fa364-a3c6-11e6-82b9-9457a5011000} => key not found. HKU\S-1-5-21-686175298-4145572272-2788465362-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_4E874A737D5662A34EBBEADB3A9C4A09 => value removed successfully HKU\S-1-5-21-686175298-4145572272-2788465362-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4} => key not found. HKCR\CLSID\{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4} => key not found. "HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{44775DA8-56AC-4810-A381-EC4D8837A1A7}" => key removed successfully HKCR\Wow6432Node\CLSID\{44775DA8-56AC-4810-A381-EC4D8837A1A7} => key not found. "HKU\S-1-5-21-686175298-4145572272-2788465362-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{44775DA8-56AC-4810-A381-EC4D8837A1A7}" => key removed successfully HKCR\CLSID\{44775DA8-56AC-4810-A381-EC4D8837A1A7} => key not found. "HKU\S-1-5-21-686175298-4145572272-2788465362-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{44775DA8-56AC-4810-A381-EC4D8837A1A7}" => key removed successfully HKCR\CLSID\{44775DA8-56AC-4810-A381-EC4D8837A1A7} => key not found. C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek => moved successfully C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf => moved successfully C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda => moved successfully C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm => moved successfully aspnet_state => service removed successfully C:\Users\user\AppData\Local\Temp\libeay32.dll => moved successfully C:\Users\user\AppData\Local\Temp\msvcr120.dll => moved successfully C:\Users\user\AppData\Local\Temp\SpotifyUninstall.exe => moved successfully C:\Users\user\AppData\Local\Temp\sqlite3.dll => moved successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0016E758-8423-4D41-A23E-938081252422}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0016E758-8423-4D41-A23E-938081252422}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2742367D-64A0-4AAE-B262-F96492E2C0D5}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2742367D-64A0-4AAE-B262-F96492E2C0D5}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{35770F23-12C9-4C60-8603-A6E86596B55D}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{35770F23-12C9-4C60-8603-A6E86596B55D}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3940C4F8-1423-4428-A4F1-D7B6D9636BF7}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3940C4F8-1423-4428-A4F1-D7B6D9636BF7}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3A385A96-8152-4674-A9C5-48D03906E830}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3A385A96-8152-4674-A9C5-48D03906E830}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4E5C829D-5C5A-4992-A4E0-4503447B1A4F}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4E5C829D-5C5A-4992-A4E0-4503447B1A4F}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{59E15F7E-2F78-4743-965D-4FAFF34B2605}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{59E15F7E-2F78-4743-965D-4FAFF34B2605}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{63A611C1-9FD8-4FA9-9F5C-88A5B3D9C659}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{63A611C1-9FD8-4FA9-9F5C-88A5B3D9C659}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{6E91C407-0745-491A-B4B4-422B9CBDDF85}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6E91C407-0745-491A-B4B4-422B9CBDDF85}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9C13038E-69E2-40D7-B633-FEF88F56DD1B}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9C13038E-69E2-40D7-B633-FEF88F56DD1B}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9E360161-A587-4D4F-AFF4-0F6AC273D215}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9E360161-A587-4D4F-AFF4-0F6AC273D215}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A64EBAB1-B394-4510-BCC5-700845D1D317}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A64EBAB1-B394-4510-BCC5-700845D1D317}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D45BE533-7897-49E9-BA67-EC3698D91D4C}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D45BE533-7897-49E9-BA67-EC3698D91D4C}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WPD\SqmUpload_S-1-5-21-686175298-4145572272-2788465362-1001" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F1FF0983-25AF-4CD7-AA0C-6F46C2F92D66}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F1FF0983-25AF-4CD7-AA0C-6F46C2F92D66}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F50C325F-75CD-4F8D-BF8A-49A29D9C7513}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F50C325F-75CD-4F8D-BF8A-49A29D9C7513}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\McAfee\McAfee Idle Detection Task" => key removed successfully "HKLM\System\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc" => key removed successfully HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32\\AvgUi => value removed successfully HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\AvgUi => value not found. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32\\AVG_UI => value removed successfully HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\AVG_UI => value could not remove. ========= ipconfig /flushdns ========= Windows IP Configuration Successfully flushed the DNS Resolver Cache. ========= End of CMD: ========= ========= netsh advfirewall reset ========= Ok. ========= End of CMD: ========= ========= netsh advfirewall set allprofiles state on ========= Ok. ========= End of CMD: ========= ========= reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f ========= The operation completed successfully. ========= End of Reg: ========= ========= reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f ========= The operation completed successfully. ========= End of Reg: ========= ========= bitsadmin /reset /allusers ========= BITSADMIN version 3.0 BITS administration utility. (C) Copyright 2000-2006 Microsoft Corp. BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows. Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets. {C479C8BB-D058-4041-AAD4-67736403A483} canceled. {E26EB37C-CC62-4620-9D1B-5352CB181879} canceled. {4FAAFF0C-BBC6-4013-BC4A-F55E910A2271} canceled. {9D440691-636C-47EA-AA38-B28E74AFFD30} canceled. {A89BD5AD-FB4E-48F4-95C6-5725356C6B29} canceled. {71E88CFA-C365-4141-93FA-EC7FAF329A00} canceled. {884C9520-F28C-4A80-AE6E-5F0508FF77AD} canceled. {69E35D39-680D-4E96-B5CD-E962BDBA722C} canceled. {C076CD8A-16E8-4DD5-9D21-4D635CEE1DFD} canceled. {38CD361D-C7FD-4476-B8AC-451CF22E22ED} canceled. {A30BF692-6C1E-40C7-A8D6-93B4FAB2FBD0} canceled. 11 out of 11 jobs canceled. ========= End of CMD: ========= ========= RemoveProxy: ========= HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies\\ => value removed successfully HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully HKU\S-1-5-21-686175298-4145572272-2788465362-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully HKU\S-1-5-21-686175298-4145572272-2788465362-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully HKU\S-1-5-21-686175298-4145572272-2788465362-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully HKU\S-1-5-21-686175298-4145572272-2788465362-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully ========= End of RemoveProxy: ========= =========== EmptyTemp: ========== BITS transfer queue => 32768 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 121761139 B Java, Flash, Steam htmlcache => 2869 B Windows/system/drivers => 631456837 B Edge => 85135443 B Chrome => 919772570 B Firefox => 0 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B ProgramData => 0 B Public => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 1009988 B NetworkService => 16022 B user => 667464472 B RecycleBin => 0 B EmptyTemp: => 2.3 GB temporary data Removed. ================================ The system needed a reboot. ==== End of Fixlog 09:28:50 ==== THAT WAS THE FIXLOG FOR THE FIRST ONE

Wait actually this is the updated one, sorry! FRST.txt Addition.txt

FRST.txt Addition.txt

I'm running Windows 10 and I've noticed annoying popups. Whenever I click something, the new link will open in a new tab, and the old tab just becomes an ad... I installed AVG, and Malwarebytes-Anti Malware and removed the viruses and spyware. However, I still get these pop-ups, but as for now, Malwarebytes is blocking them from popping up... What should my next step be?? Any help would be appreciated! Thanks!