Script zhpfix [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified O4 - HKLM\..\Run: [TCrdMain] C:\Program Files (x86)\TOSHIBA\Hotkey\TCrdMain_Win8.exe (.not file.) O4 - HKLM\..\Run: [TosWaitSrv] C:\Program Files (x86)\TOSHIBA\TPHM\TosWaitSrv.exe (.not file.) O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.) O4 - HKLM\..\Wow6432Node\Run: [mcui_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (.not file.) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. [MD5.00000000000000000000000000000000] [APT] [{F85CB7DD-DD77-4880-A963-94CF175A590C}] (...) -- C:\Users\Dom\AppData\Roaming\webssearches\UninstallManager.exe (.not file.) [0] =>Hijacker.WebsSearches [HKCU\Software\AppDataLow\Software\Safer-Surf] =>PUP.Safer-Surf [HKLM\Software\McAfee.com] [HKLM\Software\McAfee] [HKLM\Software\Wow6432Node\McAfee] O43 - CFD: 06/09/2012 - 04:34:58 - [] ----D C:\Program Files (x86)\eBay =>Toolbar.eBay O43 - CFD: 11/11/2013 - 11:51:00 - [] ----D C:\Program Files (x86)\Common Files\mcafee O43 - CFD: 11/11/2013 - 11:51:02 - [] ----D C:\ProgramData\McAfee O43 - CFD: 05/09/2014 - 00:54:43 - [] ----D C:\Users\Dom\AppData\Local\SearchProtect =>PUP.SearchProtect O45 - LFCP:[MD5.32E3E1CF1F6287EBBC3D5D233C26B01A] - 04/09/2014 - 19:13:44 ---A- - C:\Windows\Prefetch\A2SAFER-SURFT18.EXE-BD06A844.pf =>PUP.Safer-Surf O45 - LFCP:[MD5.45D12BAD832C77646B136153403ADA3B] - 05/09/2014 - 00:54:44 ---A- - C:\Windows\Prefetch\SEARCHPROTECT_W_PRECHECKER.EX-3491378B.pf =>PUP.SearchProtect O45 - LFCP:[MD5.3A5B817F7C7EB80F2295C2996642E67D] - 04/09/2014 - 18:52:30 ---A- - C:\Windows\Prefetch\UPMBOT_FR_70.EXE-8F086A24.pf =>PUP.CrossRider O45 - LFCP:[MD5.C0E5CFCCA92B89F3883E2B0A2DBA3C8E] - 05/09/2014 - 00:54:46 ---A- - C:\Windows\Prefetch\WAJAM_VALIDATE.EXE-1FFC1778.pf =>PUP.Wajam O61 - LFC: 04/09/2014 - 01:36:33 ---A- . (...) -- C:\Users\Dom\AppData\Local\Temp\is-PN165.tmp\gentlemjmbot_ifr.exe [2303392] O61 - LFC: 04/09/2014 - 01:36:40 ---A- . (...) -- C:\Users\Dom\AppData\Local\Temp\n6656\2222-8000_Safer-Surf.exe [2977196] =>PUP.Safer-Surf O61 - LFC: 04/09/2014 - 01:36:33 ---A- . (.Microsoft Corporation.) -- C:\Users\Dom\AppData\Local\Temp\is-PN165.tmp\_isetup\_shfoldr.dll [23312] O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- firefox.exe (.not file.) C:\Program Files (x86)\eBay =>Toolbar.eBay^ C:\Users\Dom\AppData\Local\SearchProtect =>PUP.SearchProtect^ [HKCU\Software\AppDataLow\Software\Safer-Surf] =>PUP.Safer-Surf^ Emptytemp Emptyflash Emptyprefetch