Delta and ASK toolbars

Please disable all anti-virus and anti-spyware programs while we do the following (re-enable when you are finished):

Run C:\MGtools\analyse.exe by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator). This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

• R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:8555;https=127.0.0.1:8555
• R3 - URLSearchHook: (no name) - {50fafaf0-70a9-419d-a109-fa4b4ffd4e37} - (no file)
• O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
• O4 - HKLM\..\Run: [SearchSettings] "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe"

After clicking Fix exit HJT.




http://img805.imageshack.us/img805/9659/rktigzy.gif Fix items using RogueKiller.

Double-click RogueKiller.exe to run. (Vista/7 right-click and select Run as Administrator)
When it opens, press the Scan button
Now click the Registry tab and locate these 2 detections:

• [RUN][SUSP PATH] HKCU\[...]\Run : Browser Infrastructure Helper (C:\Users\JV\AppData\Local\Smartbar\Application\QuickShare.exe startup) [x] -> FOUND
• [RUN][SUSP PATH] HKUS\S-1-5-21-1309123618-2042589069-379132944-1004[...]\Run : Browser Infrastructure Helper (C:\Users\JV\AppData\Local\Smartbar\Application\QuickShare.exe startup) [x] -> FOUND

Place a checkmark each of these items, leave the others unchecked.
Now press the Delete button.
When it is finished, there will be a log on your desktop called: RKreport[2].txt
Attach RKreport[2].txt to your next message. (How to attach)
Reboot the machine.



Re run Hitman and have it delete Potential Unwanted Programs.


Delete these:

• C:\ProgramData\Babylon
• C:\Program Files (x86)\Common Files\Spigot
• C:\Windows\A11U.INI
• C:\Users\JV\AppData\Local\Smartbar

http://imageshack.us/a/img841/7292/thisisujrt.gif Please download Junkware Removal Tool to your desktop.

• Shut down your protection software now to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Attach JRT.txt to your next message.

• Now run the C:\MGtools\GetLogs.bat file by double clicking on it. (Right click and run as admin if using Vista, Windows7 or Win8) Then attach the new C:\MGlogs.zip file that will be created by running this.
• Let me know of any problems you may have encountered with the above instructions and also let me know how things are running now!

 

There were a heck of alot found by Hitman. Can you re run a scan with it and attach log please.

 

Re run Hitman and have it delete Potential Unwanted Programs. (Claro items)

Now rescan yet again - just a scan) and attach new log.