Open OTL, press Quick Scan button, post log(s) please.
:OTL
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {7473B6BD-4691-4744-A82B-7854EB3D70B6} - No CLSID value found.
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 60
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - Explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - explorer.exe (Microsoft Corporation)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
[2012/11/08 15:53:52 | 000,000,000 | ---D | C] -- C:\Users\Matthew Tate\AppData\Local\{3626761D-4335-4C94-894C-DDDE909B3D60}
[2012/11/07 15:44:25 | 000,000,000 | ---D | C] -- C:\Users\Matthew Tate\AppData\Local\{17B0E49F-CAE0-4E52-A2E7-91DC8EB673D3}
[2012/11/06 15:43:43 | 000,000,000 | ---D | C] -- C:\Users\Matthew Tate\AppData\Local\{520F2AFD-89C9-406E-A25A-B87E6725AE88}
[2012/11/05 14:09:28 | 000,000,000 | ---D | C] -- C:\Users\Matthew Tate\AppData\Local\{0F21496F-48F6-4B01-B6E1-7F68C7DF3D2F}
[2012/11/04 12:49:57 | 000,000,000 | ---D | C] -- C:\Users\Matthew Tate\AppData\Local\{9E823BBA-6EF6-4E7E-89DB-8FB1FC762222}
[2012/11/04 00:25:08 | 000,000,000 | ---D | C] -- C:\Users\Matthew Tate\AppData\Local\{30C3CB49-D14C-41CA-909F-E8015D39F832}
[2012/11/03 12:24:30 | 000,000,000 | ---D | C] -- C:\Users\Matthew Tate\AppData\Local\{19ECDA31-8A9A-4C77-9FC0-B891DD227840}
[2012/11/02 23:46:06 | 000,000,000 | ---D | C] -- C:\Users\Matthew Tate\AppData\Local\{8197B13D-8D21-4634-B7E4-5D9115A696EC}
:files
ipconfig /flushdns /c
:commands
[emptytemp]
[reboot]
|
|