DAVE:TUVARO does not show up on the "Programs and Features" page of the "control panel". Nor can I find it in C:\Program Files or C;\Program Files (x86). I ran Malware bytes and JRT and ADWARE again as you suggested. To no avail, DTSUVARO is stil there and comes up as the home page for internet Explorer and Firefox. It sometimes also inhibits opening up 2nd or 3rd web sites. I am starting to run "Eset Online" now.
Here are the logs for ADWARE, JRT, and Mawarebytes;
# AdwCleaner v3.018 - Report created 11/02/2014 at 17:40:56
# Updated 28/01/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Jim - JIM-PC
# Running from : C:\Users\Jim\Desktop\adwcleaner.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
File Deleted : C:\Users\Jim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{7F4EFF06-7032-458E-AE16-1C1D8255C28A}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{7F4EFF06-7032-458E-AE16-1C1D8255C28A}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.16428
-\\ Mozilla Firefox v26.0 (en-US)
[ File : C:\Users\Jim\AppData\Roaming\Mozilla\Firefox\Profiles\guybbe4r.default\prefs.js ]
-\\ Google Chrome v32.0.1700.107
[ File : C:\Users\Jim\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Deleted : homepage
Deleted : search_url
Deleted : keyword
Deleted : urls_to_restore_on_startup
*************************
AdwCleaner[R0].txt - [7307 octets] - [08/02/2014 13:10:56]
AdwCleaner[R1].txt - [1939 octets] - [11/02/2014 15:20:39]
AdwCleaner[S0].txt - [7093 octets] - [08/02/2014 13:11:40]
AdwCleaner[S1].txt - [1607 octets] - [11/02/2014 17:40:56]
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1667 octets] ##########
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.1 (02.04.2014:1)
OS: Windows 7 Home Premium x64
Ran by Jim on Tue 02/11/2014 at 17:50:39.88
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
~~~ Files
~~~ Folders
~~~ FireFox
Emptied folder: C:\Users\Jim\AppData\Roaming\mozilla\firefox\profiles\guybbe4r.default\minidumps [2 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Tue 02/11/2014 at 17:57:13.14
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Malwarebytes Anti-Malware (PRO) 1.75.0.1300
www.malwarebytes.orgDatabase version: v2014.02.11.07
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Jim :: JIM-PC [administrator]
Protection: Disabled
2/11/2014 7:25:15 PM
mbam-log-2014-02-11 (19-25-15).txt
Scan type: Full scan (C:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 635916
Time elapsed: 1 hour(s), 57 minute(s), 16 second(s)
Memory Processes Detected: 1
C:\Program Files (x86)\lookinglink\updatelookinglink.exe (PUP.Optional.Lookinglink.A) -> 6692 -> Delete on reboot.
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 17
HKLM\SYSTEM\CurrentControlSet\Services\Update lookinglink (PUP.Optional.Lookinglink.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{84dfb3ca-9212-4fba-bf3a-a66c4a02a48f} (PUP.Optional.Lookinglink.A) -> Quarantined and deleted successfully.
HKCR\TypeLib\{17513f18-4eb9-49b5-881c-465a2688c87f} (PUP.Optional.Lookinglink.A) -> Quarantined and deleted successfully.
HKCR\Interface\{EB317E41-9AA7-487A-8060-B81657E8D68A} (PUP.Optional.Lookinglink.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{84DFB3CA-9212-4FBA-BF3A-A66C4A02A48F} (PUP.Optional.Lookinglink.A) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{84DFB3CA-9212-4FBA-BF3A-A66C4A02A48F} (PUP.Optional.Lookinglink.A) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{84DFB3CA-9212-4FBA-BF3A-A66C4A02A48F} (PUP.Optional.Lookinglink.A) -> Quarantined and deleted successfully.
HKCR\CLSID\{91FBEA5C-E3C7-42EA-8C2B-B168189AB5BE} (PUP.Optional.SocialPrivacy) -> Quarantined and deleted successfully.
HKCR\TypeLib\{DCB1CD02-42FC-4447-B833-6405CE328D62} (PUP.Optional.SocialPrivacy) -> Quarantined and deleted successfully.
HKCR\Interface\{96B7C08E-01F0-491A-8509-9741CF47039F} (PUP.Optional.SocialPrivacy) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{91FBEA5C-E3C7-42EA-8C2B-B168189AB5BE} (PUP.Optional.SocialPrivacy) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{91FBEA5C-E3C7-42EA-8C2B-B168189AB5BE} (PUP.Optional.SocialPrivacy) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{91FBEA5C-E3C7-42EA-8C2B-B168189AB5BE} (PUP.Optional.SocialPrivacy) -> Quarantined and deleted successfully.
HKCR\Typelib\{DCABB943-792E-44C4-9029-ECBEE6265AF9} (PUP.Optional.OutBrowse) -> Quarantined and deleted successfully.
HKCR\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534} (PUP.Optional.OutBrowse) -> Quarantined and deleted successfully.
HKCU\Software\lookinglink (PUP.Optional.Lookinglink.A) -> Quarantined and deleted successfully.
HKLM\Software\lookinglink (PUP.Optional.Lookinglink.A) -> Quarantined and deleted successfully.
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 2
C:\Program Files (x86)\lookinglink (PUP.Optional.Lookinglink.A) -> Delete on reboot.
C:\Program Files (x86)\lookinglink\bin (PUP.Optional.Lookinglink.A) -> Quarantined and deleted successfully.
Files Detected: 33
C:\Program Files (x86)\lookinglink\updatelookinglink.exe (PUP.Optional.Lookinglink.A) -> Delete on reboot.
C:\Program Files (x86)\lookinglink\lookinglinkBHO.dll (PUP.Optional.Lookinglink.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\iWebar\iWebar-bg.exe (PUP.Optional.iWebar.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\iWebar\iWebar-bho64.dll (PUP.Optional.iWebar.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\iWebar\iWebar-buttonutil.exe (PUP.Optional.iWebar.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\iWebar\iWebar-buttonutil64.exe (PUP.Optional.iWebar.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\iWebar\iWebar-chromeinstaller.exe (PUP.Optional.iWebar.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\iWebar\iWebar-codedownloader.exe (PUP.Optional.iWebar.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\iWebar\iWebar-enabler.exe (PUP.Optional.iWebar.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\iWebar\iWebar-firefoxinstaller.exe (PUP.Optional.iWebar.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\iWebar\iWebar-updater.exe (PUP.Optional.iWebar.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\iWebar\utils.exe (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Jim\AppData\Local\Installer\Install_8381\shopperpro.exe (PUP.Optional.ShopperPro.A) -> Quarantined and deleted successfully.
C:\Users\Jim\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J1FZVYHF\SPSetup[1].exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\Jim\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J1FZVYHF\spstub[1].exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\Jim\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie2.1.37.zip (PUP.Optional.NextLive.A) -> Quarantined and deleted successfully.
C:\Users\Jim\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\nengine.dll (PUP.Optional.NextLive.A) -> Quarantined and deleted successfully.
C:\Users\Jim\AppData\Local\Temp\nsj8F67.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\Jim\AppData\Local\Temp\nsjDBE4.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\Jim\AppData\Local\Temp\nso95EE.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\Jim\AppData\Local\Temp\nstDF2F.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\Jim\AppData\Local\Temp\nsy92D1.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\Jim\AppData\Local\Temp\nsyE25B.exe (PUP.Optional.SearchProtect.A) -> Quarantined and deleted successfully.
C:\Users\Jim\AppData\Local\Temp\dlmD58.tmp\copy1-searchprotect1204.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\Jim\AppData\Local\Temp\dlmD58.tmp\searchprotect1204.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\Jim\AppData\Local\Temp\nsd3258\SpSetup.exe (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\Jim\Downloads\GoogleEarthSetup.exe (PUP.Optional.AirInstaller) -> Quarantined and deleted successfully.
C:\Users\Jim\Downloads\Setup.exe (PUP.Optional.AirInstaller) -> Quarantined and deleted successfully.
C:\Windows.old\Windows\System32\ljkb\lmrn.dll (PUP.Optional.Sweetpacks) -> Quarantined and deleted successfully.
C:\Program Files (x86)\lookinglink\lookinglink.ico (PUP.Optional.Lookinglink.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\lookinglink\0 (PUP.Optional.Lookinglink.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\lookinglink\lookinglinkUninstall.exe (PUP.Optional.Lookinglink.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\lookinglink\updatelookinglink.InstallState (PUP.Optional.Lookinglink.A) -> Quarantined and deleted successfully.
(end)
Will attach Eset when done... Thank you JIM