1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system
Start
HKLM-x32\...\Run: [mobilegeni daemon] - C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.aartemis.com/web/?type=ds&ts=1387810332&from=cor&uid=HitachiXHTS547575A9E384_J2140059DBVBEADBVBEAX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.aartemis.com/web/?type=ds&ts=1387810332&from=cor&uid=HitachiXHTS547575A9E384_J2140059DBVBEADBVBEAX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.aartemis.com/web/?type=ds&ts=1387810332&from=cor&uid=HitachiXHTS547575A9E384_J2140059DBVBEADBVBEAX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.aartemis.com/web/?type=ds&ts=1387810332&from=cor&uid=HitachiXHTS547575A9E384_J2140059DBVBEADBVBEAX&q={searchTerms}
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.aartemis.com/web/?type=ds&ts=1387810332&from=cor&uid=HitachiXHTS547575A9E384_J2140059DBVBEADBVBEAX&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.aartemis.com/web/?type=ds&ts=1387810332&from=cor&uid=HitachiXHTS547575A9E384_J2140059DBVBEADBVBEAX&q={searchTerms}
C:\Users\Vivian\ib2013_win_setup.exe
C:\Users\Vivian\AppData\Local\Temp\BackupSetup.exe
C:\Users\Vivian\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Vivian\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Vivian\AppData\Local\Temp\vlc-2.1.2-win32.exe
C:\Users\Vivian\AppData\Local\Temp\vlc-2.1.3-win32.exe
Task: {3FA06F8A-B072-400D-ACBD-AC73DDF55DB9} - System32\Tasks\UpdaterEX => C:\Users\Vivian\AppData\Roaming\UPDATE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\Windows\Tasks\UpdaterEX.job => C:\Users\Vivian\AppData\Roaming\UPDATE~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
End
2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.
3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.