Solved Broadcaster Channel pop-ups

Malnutrition · Feb 22, 2017

Change the download folder setting in the default Browser only, so all tools we may use are saved to the Desktop:

Google Chrome - Click the "Customize and control Google Chrome" button in the upper right-corner of the browser.

Choose Settings. at the bottom of the screen click the
"Show advanced settings..." link. Scroll down to find the Downloads section and click the Change... button. Select your desktop and click OK.

Mozilla Firefox - Click the "Open Menu" button in the upper right-corner of the browser.

Choose Options. In the downloads section, click the Browse button, click on the Desktop folder and the click the "Select Folder" button. Click OK to get out of the Options menu.

Internet Explorer - Click the Tools menu in the upper right-corner of the browser.

Select View downloads. Select the Options link in the lower left of the window. Click Browse and select the Desktop and then choose the Select Folder button. Click OK to get out of the download options screen and then click Close to get out of the View Downloads screen.
NOTE: IE8 Does not support changing download locations in this manner. You will need to download the tool(s) to the default folder, usually Downloads, then copy them to the desktop.

Change default download folder location in Edge -Boot to a user account with admin status, select start > file explorer > right click on "Downloads" folder and select "Properties"

In the new window select "Location" tab > clear the text field box and type in or copy/paste %userprofile%\Desktop > select "Apply" then "OK"

Be aware you are not changing the Browser download folder location, you are changing the user’s download directory location.....

Isorene · Feb 22, 2017

I did the this last thing you asked, and here is the log of the FRST thingy.

Fix result of Farbar Recovery Scan Tool (x86) Version: 22-02-2017

Click to expand...

Ran by sandra123 (22-02-2017 18:21:10) Run:1
Running from C:\Users\sandra123\Desktop
Loaded Profiles: sandra123 (Available Profiles: sandra123)
Boot Mode: Normal

==============================================

fixlist content:
*****************
Start
CreateRestorePoint:
Closeprocesses:
Emptytemp:
C:\Program Files\NetRatingsNetSight
C:\Program Files\GfK Internet-Monitor
C:\Program Files\SUPERAntiSpyware
HKU\S-1-5-21-109433473-37108459-277044693-1001\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6828448 2017-02-08] (SUPERAntiSpyware)
HKU\S-1-5-21-109433473-37108459-277044693-1001\...\Run: [Wipe Maintance] => C:\Program Files\Wipe\net1.exe [880920 2016-12-26] (www.privacyroot.com)
HKU\S-1-5-21-109433473-37108459-277044693-1001\...\Run: [GoogleChromeAutoLaunch_72A44A76D81B451D279602D74567B17A] => C:\Program Files\Google\Chrome\Application\chrome.exe [945496 2017-02-01] (Google Inc.)
Startup: C:\Users\sandra123\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Wipe Tray Agent.lnk [2016-12-04]
ShortcutTarget: Wipe Tray Agent.lnk -> C:\Program Files\Wipe\Wipe.exe (PrivacyRoot.com)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{1E332B64-6BBF-45F0-AB2D-C43CD7E93446}: [DhcpNameServer] 192.168.0.1
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-109433473-37108459-277044693-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> DefaultScope {59E9C8B1-74FD-4CB6-A815-9E96102F97BD} URL = hxxp://www.google.com/search?hl={language}&q={searchTerms}
SearchScopes: HKLM -> {59E9C8B1-74FD-4CB6-A815-9E96102F97BD} URL = hxxp://www.google.com/search?hl={language}&q={searchTerms}
SearchScopes: HKU\S-1-5-21-109433473-37108459-277044693-1001 -> DefaultScope {59E9C8B1-74FD-4CB6-A815-9E96102F97BD} URL = hxxp://www.google.com/search?hl={language}&q={searchTerms}
SearchScopes: HKU\S-1-5-21-109433473-37108459-277044693-1001 -> {59E9C8B1-74FD-4CB6-A815-9E96102F97BD} URL = hxxp://www.google.com/search?hl={language}&q={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2016-12-13] (Microsoft Corporation)
BHO: GfK Internet-Monitor -> {4BEEA052-726D-4A6E-B65D-A6BD07C263F3} -> C:\Program Files\GfK Internet-Monitor\Gacela2.dll [2016-02-01] (GfK)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2016-11-15] (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2016-05-17] (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)
FF Extension: (GfK Internet) - C:\Program Files\GfK Internet-Monitor\FirefoxAddon.xpi [2017-02-21]
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
CHR Extension: (VouchShare - UK Voucher Codes) - C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Default\Extensions\bghnjgpffphlfnbdgcpgbnbkibekpcak [2016-05-07]
CHR Extension: (Yahoo Partner) - C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjicifbhnpakmaekfnphojjehhnifkmc [2017-01-18]
CHR Extension: (YouTube) - C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-26]
CHR Extension: (Google Search) - C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-30]
CHR Extension: (Quidco Cashback Reminder) - C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Default\Extensions\elfdpdgmnodokhbiabbcjabmhpdajcog [2016-05-20]
CHR Extension: (GfK Internet-Monitor) - C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Default\Extensions\ggfendnnkdmkiegggcbdpcmpfiincaap [2016-02-26]
CHR Extension: (B.S. Detector) - C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dlcgkekjiopopabcifhebmphmfmdbjod [2017-02-09]
CHR Extension: (Adobe Acrobat) - C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-02-01]
CHR Extension: (¿Qué cocino hoy?) - C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\enadeelnincmhhilgbiphjbjnnagnhmh [2016-11-09]
CHR Extension: (GfK Internet-Monitor) - C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ggfendnnkdmkiegggcbdpcmpfiincaap [2016-09-14]
CHR Extension: (Awesome Weather Widget [ANTP]) - C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\goeepbfnllchoihkoiecpkkekbpfiboc [2016-11-09]
CHR Extension: (Yahoo Homepage) - C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\jccfgghhbihbhomnlnadpjhkhmmboanj [2017-01-15]
CHR Extension: (Until AM Web App) - C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\kodigjkcpaoeodlnmcnekemakpnmegnk [2016-11-09]
CHR Extension: (Webcam Toy) - C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lfbgimoladefibpklnfmkpknadbklade [2016-11-09]
CHR Extension: (Writer) - C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pnengefjfhgcceajaepbjhanoojifmog [2016-11-09]
CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [143776 2017-02-08] (SUPERAntiSpyware.com)
R2 GfK-Reporting-Service; C:\Program Files\GfK Internet-Monitor\GfK-Reporting.exe [1940032 2016-02-01] ()
R2 GfK-Update-Service; C:\Program Files\GfK Internet-Monitor\GfK-Updater.exe [1475776 2015-08-24] ()
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [12880 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [67664 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
2017-02-20 20:25 - 2017-02-20 20:25 - 04615856 _____ (Enigma Software Group USA, LLC.) C:\Users\sandra123\Downloads\SpyHunter-Installer.exe
C:\Program Files\Windows 8 - 8.1 KMS Activator Ultimate 2014 v1.5.1
C:\Program Files\SUPERAntiSpyware
C:\Windows\system32\MRT
C:\Users\sandra123\AppData\Local\Temp
Task: {49598F83-B7CC-46EE-AC5A-F8A3DE4A93D7} - System32\Tasks\googleupdatetaskmachineua => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-08] (Google Inc.)
Task: {6E3259ED-2FF0-440C-AE2C-1C569025C142} - System32\Tasks\googleupdatetaskmachinecore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-08] (Google Inc.)
Task: {6E497CDA-EC10-4910-BD6E-C777866B92B3} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {94CA72AF-2908-44E9-94F0-9A5D28EF121E} - System32\Tasks\Microsoft\Windows\Setup\EOSNotify => C:\Windows\system32\EOSNotify.exe [2016-06-25] (Microsoft Corporation)
Task: {9A9B17DF-019E-456A-84FB-CDE223E0B834} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-09-22] (Adobe Systems Incorporated)
Task: {B7417245-362F-457F-B8C7-CFD59449A97C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated)
Task: {DBB78481-F438-4F2D-B671-960ECD61F7BD} - System32\Tasks\{A197349C-5621-4226-9241-BB23616C7666} => Chrome.exe hxxp://ui.skype.com/ui/0/7.8.0.102/en/abandoninstall?source=lightinstaller&page=tsMain
C:\Windows\Tasks\Adobe Flash Player Updater.job
ShortcutWithArgument: C:\Users\sandra123\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 1"
C:\Windows\system32\Drivers\etc\hosts
hosts:
C:\users\sandra123\appdata\roaming\bittorrent
C:\Program Files\360
C:\Windows\system32\drivers\qutmipc.sys
S1 qutmipc; C:\Windows\system32\drivers\qutmipc.sys [64872 2016-06-03] (360.cn)
RemoveProxy:
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state On
CMD: ipconfig /flushdns
reboot:
End

*****************

Restore point was successfully created.
Processes closed successfully.
"C:\Program Files\NetRatingsNetSight" => not found.
C:\Program Files\GfK Internet-Monitor => moved successfully
C:\Program Files\SUPERAntiSpyware => moved successfully
HKU\S-1-5-21-109433473-37108459-277044693-1001\Software\Microsoft\Windows\CurrentVersion\Run\\SUPERAntiSpyware => value removed successfully.
HKU\S-1-5-21-109433473-37108459-277044693-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Wipe Maintance => value removed successfully.
HKU\S-1-5-21-109433473-37108459-277044693-1001\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_72A44A76D81B451D279602D74567B17A => value removed successfully.
C:\Users\sandra123\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Wipe Tray Agent.lnk => moved successfully
C:\Program Files\Wipe\Wipe.exe => moved successfully
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\\DhcpNameServer => value removed successfully.
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{1E332B64-6BBF-45F0-AB2D-C43CD7E93446}\\DhcpNameServer => value removed successfully.
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => key removed successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKU\S-1-5-21-109433473-37108459-277044693-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{59E9C8B1-74FD-4CB6-A815-9E96102F97BD} => key removed successfully.
HKCR\CLSID\{59E9C8B1-74FD-4CB6-A815-9E96102F97BD} => key not found.
HKU\S-1-5-21-109433473-37108459-277044693-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully.
HKU\S-1-5-21-109433473-37108459-277044693-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{59E9C8B1-74FD-4CB6-A815-9E96102F97BD} => key removed successfully.
HKCR\CLSID\{59E9C8B1-74FD-4CB6-A815-9E96102F97BD} => key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA} => key removed successfully.
HKCR\CLSID\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA} => key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4BEEA052-726D-4A6E-B65D-A6BD07C263F3} => key removed successfully.
HKCR\CLSID\{4BEEA052-726D-4A6E-B65D-A6BD07C263F3} => key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} => key removed successfully.
HKCR\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} => key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} => key removed successfully.
HKCR\CLSID\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} => key not found.
HKCR\PROTOCOLS\Handler\osf => key not found.
HKCR\CLSID\{D924BDC6-C83A-4BD5-90D0-095128A113D1} => key not found.
HKCR\PROTOCOLS\Handler\skypec2c => key not found.
HKCR\CLSID\{91774881-D725-4E58-B298-07617B9B86A8} => key not found.
C:\Program Files\GfK Internet-Monitor\FirefoxAddon.xpi => not found.
HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3 => key removed successfully.
C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll => moved successfully
HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9 => key removed successfully.
"C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll" => not found.
C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Default\Extensions\bghnjgpffphlfnbdgcpgbnbkibekpcak => moved successfully
C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjicifbhnpakmaekfnphojjehhnifkmc => moved successfully
C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo => moved successfully
C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf => moved successfully
C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Default\Extensions\elfdpdgmnodokhbiabbcjabmhpdajcog => moved successfully
C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Default\Extensions\ggfendnnkdmkiegggcbdpcmpfiincaap => moved successfully
C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dlcgkekjiopopabcifhebmphmfmdbjod => moved successfully
C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\efaidnbmnnnibpcajpcglclefindmkaj => moved successfully
C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\enadeelnincmhhilgbiphjbjnnagnhmh => moved successfully
C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ggfendnnkdmkiegggcbdpcmpfiincaap => moved successfully
C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\goeepbfnllchoihkoiecpkkekbpfiboc => moved successfully
C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\jccfgghhbihbhomnlnadpjhkhmmboanj => moved successfully
C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\kodigjkcpaoeodlnmcnekemakpnmegnk => moved successfully
C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lfbgimoladefibpklnfmkpknadbklade => moved successfully
C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pnengefjfhgcceajaepbjhanoojifmog => moved successfully
HKLM\SOFTWARE\Google\Chrome\Extensions\efaidnbmnnnibpcajpcglclefindmkaj => key removed successfully.
!SASCORE => Service stopped successfully.
HKLM\System\CurrentControlSet\Services\!SASCORE => key removed successfully.
!SASCORE => service removed successfully.
HKLM\System\CurrentControlSet\Services\GfK-Reporting-Service => key removed successfully.
GfK-Reporting-Service => service removed successfully.
HKLM\System\CurrentControlSet\Services\GfK-Update-Service => key removed successfully.
GfK-Update-Service => service removed successfully.
SASDIFSV => Service stopped successfully.
HKLM\System\CurrentControlSet\Services\SASDIFSV => key removed successfully.
SASDIFSV => service removed successfully.
SASKUTIL => Service stopped successfully.
HKLM\System\CurrentControlSet\Services\SASKUTIL => key removed successfully.
SASKUTIL => service removed successfully.
C:\Users\sandra123\Downloads\SpyHunter-Installer.exe => moved successfully
C:\Program Files\Windows 8 - 8.1 KMS Activator Ultimate 2014 v1.5.1 => moved successfully
"C:\Program Files\SUPERAntiSpyware" => not found.
C:\Windows\system32\MRT => moved successfully

"C:\Users\sandra123\AppData\Local\Temp" folder move:

Could not move "C:\Users\sandra123\AppData\Local\Temp" => Scheduled to move on reboot.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{49598F83-B7CC-46EE-AC5A-F8A3DE4A93D7} => key removed successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{49598F83-B7CC-46EE-AC5A-F8A3DE4A93D7} => key removed successfully.
C:\Windows\System32\Tasks\googleupdatetaskmachineua => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\googleupdatetaskmachineua => key removed successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{6E3259ED-2FF0-440C-AE2C-1C569025C142} => key removed successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6E3259ED-2FF0-440C-AE2C-1C569025C142} => key removed successfully.
C:\Windows\System32\Tasks\googleupdatetaskmachinecore => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\googleupdatetaskmachinecore => key removed successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6E497CDA-EC10-4910-BD6E-C777866B92B3} => key removed successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6E497CDA-EC10-4910-BD6E-C777866B92B3} => key removed successfully.
C:\Windows\System32\Tasks\Apple\AppleSoftwareUpdate => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Apple\AppleSoftwareUpdate => key removed successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{94CA72AF-2908-44E9-94F0-9A5D28EF121E} => key removed successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{94CA72AF-2908-44E9-94F0-9A5D28EF121E} => key removed successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Setup\EOSNotify => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\EOSNotify => key removed successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9A9B17DF-019E-456A-84FB-CDE223E0B834} => key removed successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9A9B17DF-019E-456A-84FB-CDE223E0B834} => key removed successfully.
C:\Windows\System32\Tasks\Adobe Flash Player Updater => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Flash Player Updater => key removed successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{B7417245-362F-457F-B8C7-CFD59449A97C} => key removed successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B7417245-362F-457F-B8C7-CFD59449A97C} => key removed successfully.
C:\Windows\System32\Tasks\Adobe Acrobat Update Task => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Acrobat Update Task => key removed successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DBB78481-F438-4F2D-B671-960ECD61F7BD} => key removed successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DBB78481-F438-4F2D-B671-960ECD61F7BD} => key removed successfully.
C:\Windows\System32\Tasks\{A197349C-5621-4226-9241-BB23616C7666} => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{A197349C-5621-4226-9241-BB23616C7666} => key removed successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job => moved successfully
C:\Users\sandra123\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk => Shortcut argument removed successfully..
C:\Windows\system32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
"C:\users\sandra123\appdata\roaming\bittorrent" => not found.
C:\Program Files\360 => moved successfully
C:\Windows\system32\drivers\qutmipc.sys => moved successfully
HKLM\System\CurrentControlSet\Services\qutmipc => key removed successfully.
qutmipc => service removed successfully.

========= RemoveProxy: =========

HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully.
HKU\S-1-5-21-109433473-37108459-277044693-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully.
HKU\S-1-5-21-109433473-37108459-277044693-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully.

========= End of RemoveProxy: =========

========= netsh advfirewall reset =========

Ok.

========= End of CMD: =========

========= netsh advfirewall set allprofiles state On =========

Ok.

========= End of CMD: =========

========= ipconfig /flushdns =========

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= End of CMD: =========

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStoree, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 22139447 B
Java, Flash, Steam htmlcache => 291 B
Windows/system/drivers => 7845824 B
Edge => 0 B
Chrome => 809534044 B
Firefox => 19513065 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 56039583 B
Public => 0 B
systemprofile => 514296 B
LocalService => 10492864 B
NetworkService => 0 B
sandra123 => 383866824 B

RecycleBin => 87624154 B
EmptyTemp: => 1.3 GB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 22-02-2017 18:34:19)

"C:\Users\sandra123\AppData\Local\Temp" => Could not move

==== End of Fixlog 18:34:22 ====

Malnutrition · Feb 22, 2017

Ok, now how is your machine? What issues remain?

Isorene · Feb 22, 2017

Well, to know for sure I would have to wait and see, because the Broadcaster Channel pop-up appeared randomly on a daily basis. At the moment it looks good and it is loading faster, that's for sure! Thank you very much, in special for your patience, and I guess if anything goes wrong again, we'll talk again,

Malnutrition · Feb 22, 2017

Alright, I will mark this one as solved but leave it open for a couple of days just come back and let us know.

Glad to have helped!! Please tell a friend ...... or two about us.

Optimize your internet connection.

Click here for instructions.

suggest the following in place of adblock.
Alternate DNS Server. Ad Blocking DNS.
Ublock Origin.
Anti Ad Block Killer.

Also, keep your browsing private with these tools:

Self Destructing Cookies.
Self Destructing Cookies Chrome.

Some items to keep you safe on the internet.

VooDoo Shield. control of what is running on your machine
Qualys BrowserCheck To update plugins.
Web Of Trust To Avoid Shady Websites.
Unchecky To Avoid Bundled Software.
Privazer To Clean up your mahcine.

Now Lets Clean up the tools we used and remove old restore points.

Download DelFix by "Xplode" to your Desktop.
Right Click the tool and Run as Admin ( Xp Users Double Click)
Put a check mark next the items below:

Remove disinfection tools
Create registry backup
Purge System Restore

Now click on "Run" button.
allow the program to complete its work.
all the tools we used will be removed.
Tool will create and open a log report (DelFix.txt)
Note: The report can be located at the following location C:\DelFix.txt

Isorene · Feb 22, 2017

Done! Thanks again, and let's hope you don't see me here again!

Isorene · Feb 24, 2017

Hi, well the laptop has been better, but just now I was online and suddenly, my page closed and I got the pop-up.

Malnutrition · Feb 24, 2017

Clean up temp files and reduce startup load with CCleaner.

Note: This tool will clean your browsing history as well.

Download CCleaner from here.
After install Click Options.
Go to monitoring.
Uncheck All Monitoring items.
Go to advanced -- Click close program after cleaning.
Go to settings -- click run ccleaner when the computer starts.
Now that you have ccleaner installed and set-up:
Open the program.
Go to Tools
Go to Startup
Now double click each item. To Disable.
Leave only your antivirus enabled.
Then disable All items in your scheduled task as well.
Unless they are related to windows defender.Or your antivirus.
Reboot the machine.

Rogue Killer Scan.

Download RogueKiller -- (Portable) -- from one of the following links and save it to your Desktop:

Link 1
Link 2

Close all other the running programs
Disable ALL Antivirus -- Antimalware -- Applications.
Right Click Rogue Killer and Run as Administrator.
Click the Start Scan button.
Allow the scan to run -- it can take ten minutes or more.
Once the scan is complete check All items for removal.
After All items are checked then press Remove Selected.
Wait until the Status box shows Deleting Finished.
Click on open report -- then open txt
Copy the content of the report and paste it here in your next reply.

JRT Scan.

Please download Junkware Removal Tool and save it on your desktop.

Shut down your anti-virus, anti-spyware, and firewall software now to avoid potential conflicts.
Run the tool by double-clicking it. If you are using Windows Vista or Windows 7, right-click it and select Run as administrator.
The tool will open and start scanning your system.
Please be patient as this can take a while to complete depending on your system's specifications.
On completion, a log is saved to your desktop and will automatically open.
Please post the JRT log.

Adware Cleaner Scan.

Please download AdwCleaner by Xplode onto your desktop.

Close all open programs and internet browsers.
Double click on adwcleaner.exe to run the tool.
Click on Scan button.
When the scan has finished click on Clean button.
Your computer will be rebooted automatically. A text file will open after the restart.
Please post the contents of that logfile with your next reply.
You can find the logfile at C:\AdwCleaner[S1].txt as well.

Isorene · Feb 24, 2017

RogueKiller V12.9.8.0 [Feb 21 2017] (Free) by Adlice Software

Click to expand...

mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Website : http://www.adlice.com/download/roguekiller/
Blog : http://www.adlice.com

Operating System : Windows 8 (6.2.9200) 32 bits version
Started in : Normal mode
User : sandra123 [Administrator]
Started from : C:\Program Files\RogueKiller\RogueKiller.exe
Mode : Delete -- Date : 02/24/2017 13:08:33 (Duration : 00:35:37)

¤¤¤ Processes : 0 ¤¤¤

¤¤¤ Registry : 2 ¤¤¤
[PUP.Gen0] HKEY_CLASSES_ROOT\CLSID\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A} -> Deleted
[PUP.Gen0] HKEY_CLASSES_ROOT\CLSID\{B9D64D3B-BE75-4FA2-B94A-C4AE772A0146} -> Deleted

¤¤¤ Tasks : 0 ¤¤¤

¤¤¤ Files : 0 ¤¤¤

¤¤¤ WMI : 0 ¤¤¤

¤¤¤ Hosts File : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Loaded) ¤¤¤

¤¤¤ Web browsers : 1 ¤¤¤
[PUM.HomePage][Chrome:Config] Profile 1 [SecurePrefs] : session.startup_urls [http://www.google.com/||https://log...&.done=https://mg.mail.yahoo.com/neo/relogin?] -> Deleted

¤¤¤ MBR Check : ¤¤¤
+++++ PhysicalDrive0: ST320LT020-9YG142 +++++
--- User ---
[MBR] 1628ce3f012a7dd033869088c109c970
[BSP] 7615f531c91b1e9ebe7e6e1125bb960d : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [XXXXXX] DELL-UTIL (0xde) [VISIBLE] Offset (sectors): 63 | Size: 39 MB
1 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 81920 | Size: 12442 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 25563136 | Size: 292762 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
User = LL2 ... OK

+++++ PhysicalDrive1: Generic- Multi-Card USB Device +++++
Error reading User MBR! ([15] The device is not ready. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] The request is not supported. )

Isorene · Feb 24, 2017

Junkware Removal Tool (JRT) by Malwarebytes

Click to expand...

Version: 8.1.0 (12.05.2016)
Operating System: Windows 8 Pro x86
Ran by sandra123 (Administrator) on 24/02/2017 at 14:09:17.96
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

File System: 10

Successfully deleted: C:\ProgramData\1468602465.bdinstall.bin (File)
Successfully deleted: C:\Users\sandra123\AppData\Roaming\imvuclient (Folder)
Successfully deleted: C:\Users\sandra123\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0X6XTS58 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\sandra123\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3FMB80Q6 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\sandra123\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JMA8YCZ0 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\sandra123\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QFVC18EV (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0X6XTS58 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3FMB80Q6 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JMA8YCZ0 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QFVC18EV (Temporary Internet Files Folder)

Deleted the following from C:\Users\sandra123\AppData\Roaming\Mozilla\Firefox\Profiles\4p6mfa8j.default\prefs.js
user_pref(browser.urlbar.suggest.searches, true);

Registry: 1

Successfully deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_72A44A76D81B451D279602D74567B17A (Registry Value)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 24/02/2017 at 14:11:54.55
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Isorene · Feb 24, 2017

# AdwCleaner v6.043 - Logfile created 24/02/2017 at 14:22:30

Click to expand...

# Updated on 27/01/2017 by Malwarebytes
# Database : 2017-02-23.4 [Server]
# Operating System : Windows 8 Pro (X86)
# Username : sandra123 - SANDRA
# Running from : C:\Users\sandra123\Desktop\adwcleaner_6.043.exe
# Mode: Clean
# Support : https://www.malwarebytes.com/support

***** [ Services ] *****

***** [ Folders ] *****

***** [ Files ] *****

[-] File deleted: C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxps_ciuvo.com_0.localstorage
[-] File deleted: C:\Users\sandra123\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\hxxps_ciuvo.com_0.localstorage-journal

***** [ DLL ] *****

***** [ WMI ] *****

***** [ Shortcuts ] *****

***** [ Scheduled Tasks ] *****

***** [ Registry ] *****

[-] Key deleted: HKLM\SOFTWARE\Classes\OCComSDK.ComSDK
[-] Key deleted: HKLM\SOFTWARE\Classes\OCComSDK.ComSDK.1

***** [ Web browsers ] *****

*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [1138 Bytes] - [24/02/2017 14:22:30]
C:\AdwCleaner\AdwCleaner[S0].txt - [1445 Bytes] - [24/02/2017 14:17:58]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [1284 Bytes] ##########

Malnutrition · Feb 24, 2017

Download ResetBrowser To your desktop.
Now close all open browsers.
Right click and run as administrator.
Click on Reset Chrome. -- Allow completion.

Come back in a couple of days and let me know if the issue persist.

Isorene · Feb 25, 2017

I did the last thing, but now I don't have chrome and when I try to download it, it shows an error. I could use firefox or other but, why do I get the error? (if you can help!)

Malnutrition · Feb 25, 2017

Reboot and run the Browser reset tool again, select reset Chrome once more.

If that fails then run the Chrome Clean up tool.

Then use one of the following to grab Chrome.

Patch My PC
NNite.

Isorene · Feb 25, 2017

This is what I got after running reset Chrome again; I will do the rest now.

Malnutrition · Feb 25, 2017

Alright let me know.

Isorene · Feb 25, 2017

Malnutrition · Feb 25, 2017

Use the everything search engine.
Type Chrome into the search window.
Click edit select all then hold shift and press delete, on your keyboard.
Then grab chrome from one of the links provided.

Isorene · Feb 25, 2017

After I used Patchmypc, now evrything looks fine, for the time being!

Isorene · Feb 26, 2017

Do I have to delete all the programs used in the cleaning? Should I keep some?

Malnutrition

Malnurished Mod

Isorene

Malnutrition

Malnurished Mod

Isorene

Malnutrition

Malnurished Mod

Isorene

Isorene

Malnutrition

Malnurished Mod

Isorene

Isorene

Isorene

Malnutrition

Malnurished Mod

Isorene

Malnutrition

Malnurished Mod

Isorene

Attachments

Malnutrition

Malnurished Mod

Isorene

Malnutrition

Malnurished Mod

Isorene

Isorene

Search

Search

Solved Broadcaster Channel pop-ups