start
Task: {256C13B1-B45F-4207-8556-E5C34329CF46} - \EPUpdater No Task File
Task: {480770AE-1069-4726-8485-F8DA51055BDE} - \SoftwareUpdateTaskMachineUA No Task File
Task: {81D2F0CE-337F-4756-B2F6-7784BC2626DA} - \DealPly No Task File
Task: {8365E926-D0BE-4DF7-B283-7BAA023EB0A0} - \DSite No Task File
Task: {90ED796D-7E37-4EB9-9359-96DAAECFE425} - \SoftwareUpdateTaskMachineCore No Task File
Task: {9998895A-C108-46D2-9DB5-CA0CC2BEA4E7} - \BrowserProtect No Task File
Task: {9A01B7F7-724F-4A52-A993-C567CCAEC3BE} - System32\Tasks\Lyrics-Fan Update => C:\Program Files (x86)\Lyrics_Fan\lrcsfans.exe
Task: {9F5C7121-B583-424D-B11E-FBFF75296C06} - System32\Tasks\Torntv 2-updater => C:\Program Files (x86)\Torntv 2\Torntv 2-updater.exe [2013-08-19] (installdaddy)
Task: {A93DD2F0-0E19-4A67-9BCC-D950D6DF9834} - \DealPlyUpdate No Task File
Task: {D5C7C483-1C23-4EE0-BFA5-582C42D25167} - System32\Tasks\Torntv 2-codedownloader => C:\Program Files (x86)\Torntv 2\Torntv 2-codedownloader.exe
Task: {D6F094B5-A14B-40FF-929D-116939B051F1} - System32\Tasks\Torntv 2-enabler => C:\Program Files (x86)\Torntv 2\Torntv 2-enabler.exe [2013-08-19] (installdaddy)
Task: C:\Windows\Tasks\Lyrics-Fan Update.job => C:\Program Files (x86)\Lyrics_Fan\lrcsfans.exe
Task: C:\Windows\Tasks\Torntv 2-codedownloader.job => C:\Program Files (x86)\Torntv 2\Torntv 2-codedownloader.exe
Task: C:\Windows\Tasks\Torntv 2-enabler.job => C:\Program Files (x86)\Torntv 2\Torntv 2-enabler.exe
Task: C:\Windows\Tasks\Torntv 2-updater.job => C:\Program Files (x86)\Torntv 2\Torntv 2-updater.exe
HKCU\...\Run: [Wahoo] - C:\Users\PICHON\AppData\Local\WahOO\Wahoo.exe --autoLaunch [x]
HKCU\...\Run: [SearchProtection] - "C:\Users\PICHON\AppData\Roaming\Search Protection\SearchProtection.EXE" /autostart [x]
AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [162336 2009-07-22] ()
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [ ] ()
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=&utm_content=hp&from=cor&uid=WDCXWD10EADS-00M2B0_WD-WCAV5622979729797&ts=1377715727
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=&utm_content=hp&from=cor&uid=WDCXWD10EADS-00M2B0_WD-WCAV5622979729797&ts=1377715727
URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://search.conduit.com/Results.aspx?ctid=CT3310431&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SP4821CA65-A6FE-4021-A2C7-07558E5D1882&q={SearchTerms}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Toolbar: HKCU - No Name - {05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E} - No File
FF SearchPlugin: C:\Users\PICHON\AppData\Roaming\Mozilla\Firefox\Profiles\k4pkb2e9.default\searchplugins\conduit-search.xml
FF Extension: jid1-Wgaz2ADuBQ52sQ - C:\Users\PICHON\AppData\Roaming\Mozilla\Firefox\Profiles\k4pkb2e9.default\Extensions\jid1-Wgaz2ADuBQ52sQ@jetpack.xpi
FF HKCU\...\Firefox\Extensions: [{89bb4e20-1249-42f9-9f65-3812eacb59e7}] C:\Program Files (x86)\Lyrics_Fan\130.xpi
CHR RestoreOnStartup: "hxxp://www.google.com/", "hxxp://search.conduit.com/?ctid=CT2851639&SearchSource=48", "hxxp://search.iminent.com/?appId=0CBE8323-92D5-46D4-8002-90463785C37A", "hxxp://www.delta-search.com/?affID=119292&babsrc=HP_ss&mntrId=24b069ec00000000000010bf487dc6f7", "hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=FR&userid=8f513a61-e164-42b4-921b-296a357aff1d&searchtype=hp&installDate=04/04/2013", "hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=&utm_content=hp&from=cor&uid=WDCXWD10EADS-00M2B0_WD-WCAV5622979729797&ts=1377715727", "hxxp://www.google.com"
CHR HKLM-x32\...\Chrome\Extension: [okkbcpjgdooahcefofhjdpacngfecaaa] - C:\Program Files (x86)\Lyrics_Fan\130.crx
S2 Software_update; C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe [119408 2013-07-08] (The Software Group)
S3 Software_update_m; C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe [119408 2013-07-08] (The Software Group)
2013-08-28 20:31 - 2013-09-07 10:33 - 00000384 _____ C:\Windows\Tasks\Lyrics-Fan Update.job
2013-08-28 20:31 - 2013-08-28 20:31 - 00003034 _____ C:\Windows\System32\Tasks\Lyrics-Fan Update
2013-08-19 23:43 - 2013-09-07 11:43 - 00001178 _____ C:\Windows\Tasks\Torntv 2-updater.job
2013-08-19 23:43 - 2013-08-19 23:43 - 00004208 _____ C:\Windows\System32\Tasks\Torntv 2-updater
2013-08-19 23:42 - 2013-09-07 11:42 - 00001172 _____ C:\Windows\Tasks\Torntv 2-codedownloader.job
2013-08-19 23:42 - 2013-09-07 11:42 - 00001082 _____ C:\Windows\Tasks\Torntv 2-enabler.job
2013-08-19 23:42 - 2013-08-28 12:39 - 00000000 ____D C:\Program Files (x86)\Torntv 2
2013-08-19 23:42 - 2013-08-19 23:43 - 00004112 _____ C:\Windows\System32\Tasks\Torntv 2-enabler
2013-08-19 23:42 - 2013-08-19 23:42 - 00004202 _____ C:\Windows\System32\Tasks\Torntv 2-codedownloader
C:\Program Files (x86)\Lyrics_Fan
C:\Program Files (x86)\Torntv 2
C:\Program Files (x86)\Software\Update
cmd: for /d %f in (C:\Users\PICHON\AppData\Local\{*}) do rd /s /q "%f"
end