thanks for any help

[rperkins0911]

thank you. I thought that it updated but did recieve a message that said it was now updated.

[magna86]

This should fix the problem.



1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

Code: [Select]

Start
SearchScopes: HKCU - {BB61CC64-ECC9-4183-B757-206FA00BEF37} URL = http://websearch.shopathome.com?user_id={0C0A8370-1960-427B-93B5-1389C772BCF6}&q={searchTerms}
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx
C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)
CMD: ipconfig /flushdns
CMD: DEL %TEMP%\*.* /F /S /Q
End

2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.


3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.

The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.

[rperkins0911]

here is the fixlog, thank you again

[magna86]

Is there any improvement?

If not, post me the fresh FRST logs

[rperkins0911]

im still getting a popup

[magna86]

After this ZoekScript, pop-up should be gone.




Please download zoek.zip or zoek.rar by smeenk () from here or here and save it to your Desktop.
Unpack the archive...

• Close any open browsers
• Temporarily disable your AntiVirus program. (If necessary)
  If you are unsure how to do this please read this or this Instruction.
  
  
• Double click on zoek.exe to run the tool .
  Please wait while the tool does not start...
  
  
• Copy the text present inside the code box below and paste it into the large window in the zoek tool:

Code: [Select]

EmptyCLSID;
jgpeafagnekjhocfnpplojnehgaidgmp;CHR
CHRDefaults;
AutoClean;

• Click on button.
  Please wait until a logreport will open (this can be after reboot)
  
  
• Save notepad to your Desktop and attach here zoek-results.log
  Note: It will also create a log in the C:\ directory named "zoek-results.log"
  

[rperkins0911]

the pop ups seem to be gone now. Here is the log you requested.

[magna86]

Good workman always cleans up after himself. 
• The following will implement some post-cleanup procedures:

=> Please download DelFix by Xplode to your Desktop.

Run the tool and check the following boxes below;
Remove disinfection tools
Create registry backup
Purge System Restore
Click Run button and wait a few seconds for the programme completes his work.
At this point all the tools we used here should be gone. Tool will create an report for you (C:\DelFix.txt)

The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning.