• Delete the TFC icon on your Desktop

• Double click the OTL icon on your Desktop
  
• Press the 'Cleanup' button

• Delete the SecurityCheck icon on your Desktop

• We recommend that you keep MalwareBytes (MBAM) and run it every week. There is no charge to keep the program however the real time protection will stop after the trial period. Be sure to update the definitions before each use. If you decide not to keep MBAM, use Add/Remove Programs to uninstall it.

• If we asked you to run Sophos AntiRootkit program, uninstall it thru Add/Remove Programs.

• If we asked you to install any other programs that are not removed by the OTL cleanup procedure, we will provide separate removal instructions.

 
All processes killed
========== OTL ==========
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Search Bar| /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{C04B7D22 -5AEC-4561-8F49-27F6269208F6}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C04B7D22-5AEC-4561-8F49-27F6269208 F6}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser  Helper Objects\{62960D20-6D0D-1AB4-4BF1-95B0B5B8783A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{62960D20-6D0D-1AB4-4BF1-95B0B5B878 3A}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{5BED3930- 2E9E-76D8-BACC-80DF2188D455} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5BED3930-2E9E-76D8-BACC-80DF2188D4 55}\ deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\ {5BED3930-2E9E-76D8-BACC-80DF2188D455} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5BED3930-2E9E-76D8-BACC-80DF2188D4 55}\ not found.
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
========== FILES ==========
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: kim
->Temp folder emptied: 6827635 bytes
->Temporary Internet Files folder emptied: 13028382 bytes
->Java cache emptied: 12049796 bytes
->Google Chrome cache emptied: 6260932 bytes
->Flash cache emptied: 107215 bytes
 
User: Public
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 12288 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 851640 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Inte rnet Files folder emptied: 36045734 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 72.00 mb
 
 
[EMPTYFLASH]
 
User: All Users
 
User: Default
->Flash cache emptied: 0 bytes
 
User: Default User
->Flash cache emptied: 0 bytes
 
User: kim
->Flash cache emptied: 0 bytes
 
User: Public
 
Total Flash Files Cleaned = 0.00 mb
 
 
OTL by OldTimer - Version 3.2.53.1 log created on 07152012_085544
 
Files\Folders moved on Reboot...
File move failed. C:\Users\kim\AppData\Local\Temp\FXSAPIDebugLogFile.txt scheduled to be m oved on reboot.
C:\Users\kim\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\SN9D XSV9\ads[4].htm moved successfully.
C:\Users\kim\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\SN9D XSV9\ddc[1].htm moved successfully.
C:\Users\kim\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\J3B0 8Q6I\ads[2].htm moved successfully.
C:\Users\kim\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\J3B0 8Q6I\ads[3].htm moved successfully.
C:\Users\kim\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\MSIMGSIZ.DAT mov ed successfully.
File move failed. C:\Users\kim\AppData\Local\Microsoft\Windows\Temporary Internet Files\Lo w\SuggestedSites.dat scheduled to be moved on reboot.
 
PendingFileRenameOperations files...
[2012/07/14 16:07:01 | 000,000,000 | ---- | M] () C:\Users\kim\AppData\Local\Temp\FXSAPIDe bugLogFile.txt : Unable to obtain MD5
File C:\Users\kim\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 \SN9DXSV9\ads[4].htm not found!
File C:\Users\kim\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 \SN9DXSV9\ddc[1].htm not found!
File C:\Users\kim\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 \J3B08Q6I\ads[2].htm not found!
File C:\Users\kim\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 \J3B08Q6I\ads[3].htm not found!
File C:\Users\kim\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\MSIMGSIZ.DA T not found!
[2012/07/12 20:28:49 | 005,242,991 | ---- | M] () C:\Users\kim\AppData\Local\Microsoft\Win dows\Temporary Internet Files\Low\SuggestedSites.dat : Unable to obtain MD5
 
Registry entries deleted on Reboot...

[*]Under the Custom Scans/Fixes box at the bottom, copy and paste the contents of the following box:



:OTL
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = »toolbar.inbox.com/ search/dispatcher.aspx?tp=aus&qkw=%s&tbid=%tb_id&%language
IE - HKCU\..\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6}: "URL" = »toolbar.i nbox.com/search/dispatcher.aspx?tp=bs&qkw={searchTerms}&tbid=80110&lng=en
O2 - BHO: (TTB000000 Class) - {62960D20-6D0D-1AB4-4BF1-95B0B5B8783A} - C:\Users\kim\AppDat a\Local\Temp\low\COUPON~1.DLL File not found
O3 - HKLM\..\Toolbar: (CouponBar) - {5BED3930-2E9E-76D8-BACC-80DF2188D455} - C:\Users\kim\ AppData\Local\Temp\low\CouponsBar.dll File not found
O3 - HKCU\..\Toolbar\WebBrowser: (CouponBar) - {5BED3930-2E9E-76D8-BACC-80DF2188D455} - C: \Users\kim\AppData\Local\Temp\low\CouponsBar.dll File not found

:Services

:Reg

:Files

:Commands
[purity]
[emptytemp]
[EMPTYFLASH]
[Reboot]



[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Once you see a message box "Fix complete! Click OK to open the fix log."
[*]Click the OK button
[*]The log will open in Notepad (your default text editor).
{*]Save the log. Post a copy of that log in your next reply.

First:
Please use Add/Remove Programs to uninstall the programs listed below. All have adware and privacy issues.

"Coupon Printer for Windows5.0.0.0" = Coupon Printer for Windows
"SelectRebatesUninstall" = ShopAtHome SelectRebates
"TTB000001.TTB000001Toolbar" = CouponBar

 
ophos Anti-Rootkit Version 1.5.4  (c) 2009 Sophos Plc
Started logging on 7/13/2012 at 18:55:01 PM
User "kim" on computer "KIM-PC"
Windows version 6.1 SP 1.0 Service Pack 1 build 7601 SM=0x300 PT=0x1 WOW64
Info:	Starting registry scan.
Info:	Starting disk scan of C: (NTFS).
Hidden:	file C:\ProgramData\Norton\00000082\00000121\000005d6\cltLMS1.dat
Hidden:	file C:\ProgramData\Norton\00000082\00000121\000005d6\cltLMS2.dat
Hidden:	file C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.1.0.29\De finitions\VirusDefs\20120711.018\VersionInfo.dat
Hidden:	file C:\Windows\SysWOW64\en-US\osk.exe.mui
Hidden:	file C:\Windows\System32\nshipsec.dll
Info:	Starting disk scan of D: (NTFS).
Hidden:	file D:\hp\Apps\APP04585\src\ISSetup.dll
Hidden:	file D:\hp\Apps\APP04585\src\Power2Go.Gadget\images\audio\audio0001.png
Stopped logging on 7/14/2012 at 10:45:28 AM