Inactive how to remove W32.Slugin.A

[Inactive] how to remove W32.Slugin.A

my pc has updated avg antivirus(free version)
it detects some exe and software setup as infected with W32.Slugin.A
but it cant heal them so it moves them to virus vault or quarantine .

please suggest me a method to remove W32.Slugin.A from my pc .
thanks

 

logs ....

sorry for not posting logs before being new here
here are logs

DDS (Ver_09-12-01.01) - NTFSx86
Run by roc at 3:21:59.29 on Fri 01/15/2010
Internet Explorer: 6.0.2900.2180
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1014.364 [GMT 5.5:30]

AV: AVG Internet Security *On-access scanning enabled* (Outdated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: AVG Firewall *enabled* {8decf618-9569-4340-b34a-d78d28969b66}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\AVG\AVG9\avgtray.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\AVG\AVG9\Identity Protection\agent\bin\avgidsmonitor.exe
C:\Program Files\Camfrog\Camfrog Video Chat\Camfrog Video Chat.exe
svchost.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\AVG\AVG9\avgfws9.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\AVG\AVG9\avgemc.exe
C:\Program Files\AVG\AVG9\avgam.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\roc\Desktop\dds.scr

============== Pseudo HJT Report ===============

uURLSearchHooks: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg9\avgssie.dll
BHO: AVG Security Toolbar BHO: {a3bc75a2-1f87-4686-aa43-5347d756017c} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
TB: AVG Security Toolbar: {ccc7a320-b3ca-4199-b1a6-9f516dd69829} - c:\program files\avg\avg9\toolbar\IEToolbar.dll
mRun: [AVG9_TRAY] c:\progra~1\avg\avg9\avgtray.exe
mRun: [MSConfig] c:\windows\pchealth\helpctr\binaries\MSConfig.exe /auto
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [SoundMan] SOUNDMAN.EXE
mRun: [BigDog305] c:\windows\VM305_STI.EXE VIMICRO USB PC Camera (ZC0305)
uPolicies-system: DisableTaskMgr = 1 (0x1)
uPolicies-system: DisableRegistryTools = 1 (0x1)
mPolicies-system: EnableLUA = 0 (0x0)
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg9\avgpp.dll
Notify: avgrsstarter - avgrsstx.dll
Notify: igfxcui - igfxdev.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\roc\applic~1\mozilla\firefox\profiles\aelu1x3j.default\
FF - component: c:\program files\avg\avg9\firefox\components\avgssff.dll
FF - component: c:\program files\avg\avg9\toolbar\firefox\avg@igeared\components\IGeared_tavgp_xputils2.dll
FF - component: c:\program files\avg\avg9\toolbar\firefox\avg@igeared\components\IGeared_tavgp_xputils3.dll
FF - component: c:\program files\avg\avg9\toolbar\firefox\avg@igeared\components\IGeared_tavgp_xputils35.dll
FF - component: c:\program files\avg\avg9\toolbar\firefox\avg@igeared\components\xpavgtbapi.dll

---- FIREFOX POLICIES ----
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref( "security.ssl3.rsa_seed_sha ", true);

============= SERVICES / DRIVERS ===============

R0 AVGIDSErHrxpx;AVG9IDSErHr;c:\windows\system32\drivers\AVGIDSxx.sys [2010-1-13 25608]
R0 AvgRkx86;avgrkx86.sys;c:\windows\system32\drivers\avgrkx86.sys [2010-1-13 161800]
R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2010-1-13 333192]
R1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86;c:\windows\system32\drivers\avgmfx86.sys [2010-1-13 28424]
R1 AvgTdiX;AVG Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2010-1-13 360584]
R2 avg9emc;AVG E-mail Scanner;c:\program files\avg\avg9\avgemc.exe [2010-1-13 906520]
R2 avg9wd;AVG WatchDog;c:\program files\avg\avg9\avgwdsvc.exe [2010-1-13 285392]
R2 avgfws9;AVG Firewall;c:\program files\avg\avg9\avgfws9.exe [2010-1-13 2304192]
R2 AVGIDSAgent;AVG9IDSAgent;c:\program files\avg\avg9\identity protection\agent\bin\AVGIDSAgent.exe [2010-1-13 5832712]
R3 Avgfwdx;Avgfwdx;c:\windows\system32\drivers\avgfwdx.sys [2010-1-13 30104]
R3 AVGIDSDriverxpx;AVG9IDSDriver;c:\program files\avg\avg9\identity protection\agent\driver\platform_xp\AVGIDSDriver.sys [2010-1-13 122376]
R3 AVGIDSFilterxpx;AVG9IDSFilter;c:\program files\avg\avg9\identity protection\agent\driver\platform_xp\AVGIDSFilter.sys [2010-1-13 30216]
R3 AVGIDSShimxpx;AVG9IDSShim;c:\program files\avg\avg9\identity protection\agent\driver\platform_xp\AVGIDSShim.sys [2010-1-13 25736]
R3 ZSMC0305;VIMICRO USB PC Camera V;c:\windows\system32\drivers\usbVM305.sys [2006-6-18 392316]
S3 asc3360pr;asc3360pr;\??\c:\windows\system32\drivers\eokftn.sys --> c:\windows\system32\drivers\eokftn.sys [?]
S3 Avgfwfd;AVG network filter service;c:\windows\system32\drivers\avgfwdx.sys [2010-1-13 30104]

=============== Created Last 30 ================

2103-01-01 00:09:17 0 d-----w- c:\program files\VideoLAN
2103-01-01 00:05:08 0 d-----w- c:\program files\common files\L&H
2103-01-01 00:04:58 0 d-----w- c:\program files\Microsoft ActiveSync
2103-01-01 00:04:32 0 d--h--w- c:\windows\ShellNew
2010-01-14 20:10:00 0 d-----w- c:\docume~1\roc\applic~1\WebcamMax
2010-01-14 20:10:00 0 d-----w- c:\docume~1\alluse~1.win\applic~1\WebcamMax
2010-01-14 20:05:31 90624 -c--a-w- c:\windows\system32\dllcache\kswdmcap.ax
2010-01-14 20:05:31 90624 ----a-w- c:\windows\system32\kswdmcap.ax
2010-01-14 20:05:31 61952 -c--a-w- c:\windows\system32\dllcache\kstvtune.ax
2010-01-14 20:05:31 61952 ----a-w- c:\windows\system32\kstvtune.ax
2010-01-14 20:05:31 28672 -c--a-w- c:\windows\system32\dllcache\vidcap.ax
2010-01-14 20:05:31 28672 ----a-w- c:\windows\system32\vidcap.ax
2010-01-14 20:05:30 53760 -c--a-w- c:\windows\system32\dllcache\vfwwdm32.dll
2010-01-14 20:05:30 53760 ----a-w- c:\windows\system32\vfwwdm32.dll
2010-01-14 20:05:26 43008 -c--a-w- c:\windows\system32\dllcache\ksxbar.ax
2010-01-14 20:05:26 43008 ----a-w- c:\windows\system32\ksxbar.ax
2010-01-14 19:05:41 0 d-----w- c:\windows\system32\PreInstall
2010-01-14 19:05:40 26488 ----a-w- c:\windows\system32\spupdsvc.exe
2010-01-14 02:00:47 26496 -c--a-w- c:\windows\system32\dllcache\usbstor.sys
2010-01-13 19:56:21 2136064 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe
2010-01-13 19:56:20 2180480 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe
2010-01-13 19:56:19 2057728 -c----w- c:\windows\system32\dllcache\ntkrnlpa.exe
2010-01-13 19:56:19 2015744 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe
2010-01-13 19:05:05 0 d-----w- c:\docume~1\alluse~1.win\applic~1\Symantec
2010-01-13 19:05:05 0 d-----w- c:\docume~1\alluse~1.win\applic~1\Norton
2010-01-13 19:05:02 0 d-----w- c:\docume~1\alluse~1.win\applic~1\NortonInstaller
2010-01-13 18:31:31 0 d-----w- c:\program files\Camfrog
2010-01-13 17:35:21 453632 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2010-01-13 17:17:53 65280 ----a-w- c:\windows\system32\drivers\Rtlnic51.sys
2010-01-13 17:14:45 4096 -c--a-w- c:\windows\system32\dllcache\ksuser.dll
2010-01-13 17:13:44 135168 ----a-r- c:\windows\system32\igfxres.dll
2010-01-13 17:11:59 98304 ----a-r- c:\windows\system32\igfxrkor.lrc
2010-01-13 17:07:21 65536 ------w- c:\windows\system32\auto.exe
2010-01-12 23:36:25 3072 ----a-w- c:\windows\system32\drivers\audstub.sys
2010-01-12 23:35:56 57472 ----a-w- c:\windows\system32\drivers\redbook.sys
2010-01-12 23:35:33 6400 ----a-w- c:\windows\system32\drivers\enum1394.sys
2010-01-12 23:35:27 20992 ----a-w- c:\windows\system32\drivers\RTL8139.sys
2010-01-12 23:35:11 74240 -c--a-w- c:\windows\system32\dllcache\usbui.dll
2010-01-12 23:35:11 74240 ----a-w- c:\windows\system32\usbui.dll
2010-01-12 23:33:27 0 d-----r- c:\documents and settings\all users.windows\Documents
2010-01-12 23:30:04 261 ----a-w- c:\windows\system32\$winnt$.inf
2010-01-12 23:17:54 0 d-----w- C:\$WIN_NT$.~BT
2010-01-12 21:00:08 0 d--h--w- C:\$AVG
2010-01-12 20:59:55 12464 ----a-w- c:\windows\system32\avgrsstx.dll
2010-01-12 20:59:49 333192 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2010-01-12 20:59:45 0 d-----w- c:\windows\system32\drivers\Avg
2010-01-12 20:59:44 0 d-----w- c:\docume~1\alluse~1.win\applic~1\AVG Security Toolbar
2010-01-12 20:59:18 25608 ----a-w- c:\windows\system32\drivers\AVGIDSxx.sys
2010-01-12 20:59:17 161800 ----a-w- c:\windows\system32\drivers\avgrkx86.sys
2010-01-12 20:59:15 360584 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-01-12 20:59:03 50968 ----a-w- c:\windows\system32\avgfwdx.dll
2010-01-12 20:59:03 30104 ----a-w- c:\windows\system32\drivers\avgfwdx.sys
2010-01-12 20:59:03 0 d-----w- c:\program files\AVG
2010-01-12 20:58:59 0 d-----w- c:\docume~1\alluse~1.win\applic~1\avg9
2010-01-12 20:14:20 0 d-----w- c:\docume~1\alluse~1.win\applic~1\SUPERAntiSpyware.com
2010-01-12 20:14:01 0 d-----w- c:\program files\SUPERAntiSpyware
2010-01-12 19:22:53 0 d-----w- c:\docume~1\roc\applic~1\Camfrog
2010-01-12 19:08:08 0 d-----w- c:\program files\Faronics
2010-01-12 18:53:10 8192 ----a-w- c:\windows\REGLOCS.OLD
2010-01-12 18:51:59 21896 -c--a-w- c:\windows\system32\dllcache\tdipx.sys
2010-01-12 18:50:59 57856 -c--a-w- c:\windows\system32\dllcache\esuimgd.dll
2010-01-12 18:49:04 0 d-sh--w- c:\documents and settings\all users.windows\DRM
2010-01-12 18:47:59 16384 -c--a-w- c:\windows\system32\dllcache\isignup.exe
2010-01-10 11:28:37 0 d-----w- c:\program files\NirSoft
2010-01-10 10:22:19 0 d-----w- c:\windows\system32\SoftwareDistribution
2010-01-10 10:15:28 0 d-----w- c:\program files\McAfee.com
2010-01-10 10:15:25 0 d-----w- c:\program files\common files\McAfee
2010-01-10 10:15:22 0 d-----w- c:\program files\McAfee
2010-01-10 10:08:40 0 d-----w- c:\windows\XSxS
2010-01-10 10:08:40 0 d-----w- c:\program files\Xenocode
2010-01-10 01:04:30 0 d-----w- c:\windows\EffectResources
2010-01-10 01:04:29 0 d-----w- c:\windows\CatRoot
2010-01-10 01:04:29 0 d-----w- c:\program files\Vimicro
2010-01-09 00:21:06 472007 ----a-r- C:\txtsetup.sif
2010-01-09 00:21:06 260272 ----a-r- C:\$LDR$
2010-01-09 00:10:02 0 d-----w- c:\windows\system32\appmgmt
2010-01-08 23:14:15 0 d-----w- C:\temp
2010-01-08 22:10:59 0 d-----w- c:\program files\Cat Computer
2010-01-08 02:29:17 0 d-----w- c:\program files\Spybot - Search & Destroy
2010-01-08 02:24:04 0 d-----w- c:\program files\Safer Networking
2010-01-08 02:04:13 0 d-----w- C:\EmergencyUtils
2010-01-08 01:51:16 0 d--h--w- c:\windows\system32\GroupPolicy
2010-01-08 01:42:31 0 d-----w- c:\windows\system32\NtmsData
2010-01-07 08:19:37 102887 ----a-w- C:\ptcsetup.bak
2010-01-07 08:06:59 0 d-sh--w- c:\windows\system32\28463
2010-01-06 08:38:37 0 d-----w- c:\program files\Ansys Inc
2010-01-06 07:54:24 0 d-----w- c:\program files\Yahoo!
2010-01-06 07:35:37 0 d--h--w- c:\windows\$hf_mig$
2010-01-06 02:34:37 0 d-----w- c:\program files\Ask.com
2010-01-04 17:47:22 0 d-----w- c:\windows\system32\LogFiles
2010-01-04 17:11:55 0 d-sh--w- C:\Recycled
2010-01-03 01:04:17 0 d--h--w- c:\program files\WindowsUpdate
2010-01-03 01:03:33 0 d-----w- c:\program files\common files\MSSoap
2010-01-03 01:02:19 0 d-----w- c:\program files\Online Services
2010-01-03 01:02:13 0 d-----w- c:\program files\Messenger
2010-01-03 01:02:10 0 d-----w- c:\program files\MSN Gaming Zone
2010-01-03 01:01:38 0 d-----w- c:\program files\Windows NT
2010-01-03 00:55:06 0 d-----w- c:\program files\common files\ODBC
2010-01-03 00:55:03 0 d-----w- c:\program files\common files\SpeechEngines

==================== Find3M ====================

2010-01-14 18:33:23 19968 ----a-w- c:\windows\ws2help.dll
2010-01-12 19:07:58 110592 ----a-w- c:\windows\Wplugin.dll
2010-01-12 18:47:20 21640 ----a-w- c:\windows\system32\emptyregdb.dat

============= FINISH: 3:22:45.56 ===============




UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-12-01.01)

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 1/13/2010 12:22:16 AM
System Uptime: 1/15/2010 2:56:02 AM (1 hours ago)

Motherboard: First International Computer, Inc. | | PTM945P/G
Processor: Intel(R) Pentium(R) 4 CPU 3.00GHz | LGA 775 | 2999/200mhz
Processor: Intel(R) Pentium(R) 4 CPU 3.00GHz | LGA 775 | 2999/200mhz

==== Disk Partitions =========================

A: is Removable
C: is FIXED (NTFS) - 14 GiB total, 7.248 GiB free.
D: is FIXED (FAT32) - 14 GiB total, 4.292 GiB free.
E: is FIXED (NTFS) - 19 GiB total, 0.239 GiB free.
F: is FIXED (FAT32) - 20 GiB total, 0.281 GiB free.
G: is CDROM ()

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP1: 1/13/2010 12:37:21 AM - System Checkpoint
RP2: 1/13/2010 1:44:00 AM - Installed SUPERAntiSpyware Free Edition
RP3: 1/13/2010 2:28:58 AM - Installed AVG 9.0
RP4: 1/13/2010 2:37:06 AM - Avg8 Update
RP5: 1/13/2010 10:44:25 PM - Installed Realtek AC'97 Audio
RP6: 1/13/2010 10:47:51 PM - Installed REALTEK Gigabit and Fast Ethernet NIC Driver
RP7: 1/14/2010 7:16:13 AM - Avg8 Update
RP8: 1/14/2010 11:40:21 PM - Avg8 Update
RP9: 1/15/2010 6:31:37 AM - Removed SUPERAntiSpyware Free Edition
RP10: 1/15/2010 6:32:13 AM - Removed Ask Toolbar.
RP11: 1/15/2010 12:35:36 AM - Software Distribution Service 3.0
RP12: 1/15/2010 1:35:24 AM - Update to an unsigned driver
RP13: 1/15/2010 1:37:56 AM - Update to an unsigned driver
RP14: 1/15/2010 2:29:16 AM - Software Distribution Service 3.0

==== Installed Programs ======================

Adobe Flash Player 10 Plugin
AVG 9.0
Camfrog Video Chat 5.4
Hotfix for Windows XP (KB952287)
Intel(R) Graphics Media Accelerator Driver
Microsoft Visual C++ 2005 Redistributable
Mozilla Firefox (3.5.7)
Realtek AC'97 Audio
REALTEK Gigabit and Fast Ethernet NIC Driver
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923789)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB943460)
Security Update for Windows XP (KB944338-v2)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958470)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB971032)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB975467)
Update for Windows XP (KB898461)
Update for Windows XP (KB910437)
Update for Windows XP (KB922582)
Update for Windows XP (KB955759)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB973687)
WebFldrs XP
Windows Installer 3.1 (KB893803)
Windows XP Hotfix - KB886185
Yahoo! Messenger

==== Event Viewer Messages From Past Week ========

1/15/2010 6:31:40 AM, error: Service Control Manager [7000] - The SASDIFSV service failed to start due to the following error: Cannot create a file when that file already exists.
1/15/2010 12:05:12 AM, error: Dhcp [1002] - The IP address lease 116.73.58.122 for the Network Card with network address 0040CAA7DC58 has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message).
1/13/2010 2:39:16 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 85 time(s).
1/13/2010 2:39:11 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 84 time(s).
1/13/2010 2:39:01 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 83 time(s).
1/13/2010 2:38:56 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 82 time(s).
1/13/2010 2:38:51 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 81 time(s).
1/13/2010 2:38:46 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 80 time(s).
1/13/2010 2:38:37 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 79 time(s).
1/13/2010 2:38:31 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 78 time(s).
1/13/2010 2:38:26 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 77 time(s).
1/13/2010 2:38:21 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 76 time(s).
1/13/2010 2:38:12 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 75 time(s).
1/13/2010 2:38:07 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 74 time(s).
1/13/2010 2:38:01 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 73 time(s).
1/13/2010 2:37:56 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 72 time(s).
1/13/2010 2:37:47 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 71 time(s).
1/13/2010 2:37:42 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 70 time(s).
1/13/2010 2:37:37 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 69 time(s).
1/13/2010 2:37:32 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 68 time(s).
1/13/2010 2:37:26 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 67 time(s).
1/13/2010 2:37:21 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 66 time(s).
1/13/2010 2:37:16 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 65 time(s).
1/13/2010 2:37:03 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 64 time(s).
1/13/2010 2:36:57 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 63 time(s).
1/13/2010 2:36:52 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 62 time(s).
1/13/2010 2:36:47 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 61 time(s).
1/13/2010 2:36:42 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 60 time(s).
1/13/2010 2:36:32 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 59 time(s).
1/13/2010 2:36:27 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 58 time(s).
1/13/2010 2:36:22 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 57 time(s).
1/13/2010 2:36:17 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 56 time(s).
1/13/2010 2:36:08 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 55 time(s).
1/13/2010 2:36:03 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 54 time(s).
1/13/2010 2:35:57 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 53 time(s).
1/13/2010 2:35:52 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 52 time(s).
1/13/2010 2:35:43 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 51 time(s).
1/13/2010 2:35:38 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 50 time(s).
1/13/2010 2:35:32 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 49 time(s).
1/13/2010 2:35:27 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 48 time(s).
1/13/2010 2:35:18 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 47 time(s).
1/13/2010 2:35:13 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 46 time(s).
1/13/2010 2:35:07 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 45 time(s).
1/13/2010 2:35:02 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 44 time(s).
1/13/2010 2:34:52 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 43 time(s).
1/13/2010 2:34:47 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 42 time(s).
1/13/2010 2:34:42 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 41 time(s).
1/13/2010 2:34:37 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 40 time(s).
1/13/2010 2:34:27 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 39 time(s).
1/13/2010 2:34:22 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 38 time(s).
1/13/2010 2:34:17 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 37 time(s).
1/13/2010 2:34:12 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 36 time(s).
1/13/2010 2:34:02 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 35 time(s).
1/13/2010 2:33:57 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 34 time(s).
1/13/2010 2:33:52 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 33 time(s).
1/13/2010 2:33:47 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 32 time(s).
1/13/2010 2:33:38 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 31 time(s).
1/13/2010 2:33:32 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 30 time(s).
1/13/2010 2:33:27 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 29 time(s).
1/13/2010 2:33:22 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 28 time(s).
1/13/2010 2:33:13 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 27 time(s).
1/13/2010 2:33:08 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 26 time(s).
1/13/2010 2:33:03 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 25 time(s).
1/13/2010 2:32:58 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 24 time(s).
1/13/2010 2:32:48 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 23 time(s).
1/13/2010 2:32:43 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 22 time(s).
1/13/2010 2:32:38 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 21 time(s).
1/13/2010 2:32:33 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 20 time(s).
1/13/2010 2:32:10 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 19 time(s).
1/13/2010 2:32:05 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 18 time(s).
1/13/2010 2:32:00 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 17 time(s).
1/13/2010 2:31:50 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 16 time(s).
1/13/2010 2:31:45 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 15 time(s).
1/13/2010 2:31:40 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 14 time(s).
1/13/2010 2:31:35 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 13 time(s).
1/13/2010 2:31:25 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 12 time(s).
1/13/2010 2:31:20 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 11 time(s).
1/13/2010 2:31:15 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 10 time(s).
1/13/2010 2:31:10 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 9 time(s).
1/13/2010 2:31:01 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 8 time(s).
1/13/2010 2:30:56 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 7 time(s).
1/13/2010 2:30:51 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 6 time(s).
1/13/2010 2:30:45 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 5 time(s).
1/13/2010 2:30:32 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 4 time(s).
1/13/2010 2:30:27 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 3 time(s).
1/13/2010 2:30:22 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 2 time(s).
1/13/2010 2:30:17 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the AVG E-mail Scanner service to connect.
1/13/2010 2:30:17 AM, error: Service Control Manager [7000] - The AVG E-mail Scanner service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
1/13/2010 2:30:02 AM, error: Service Control Manager [7034] - The AVG E-mail Scanner service terminated unexpectedly. It has done this 1 time(s).

==== End Of File ===========================

 

Hi. Download and Run ATF Cleaner
Download ATF (Atribune Temp File) Cleaner© by Atribune to your desktop.

Double-click ATF Cleaner.exe to open it.

Under Main choose:
Windows Temp
Current User Temp
All Users Temp
Cookies
Temporary Internet Files
Prefetch
Java Cache
*The other boxes are optional*
Then click the Empty Selected button.

Firefox:
Click Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click NO at the prompt.

Opera:
Click Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click NO at the prompt.

Click Exit on the Main menu to close the program.

======

Please Run the ESET Online Scanner and post the ScanLog with your post for assistance.

• You will need to use Internet Explorer to complete this scan.
• You will need to temporarily Disable your current Anti-virus program.
• Be sure the option to Remove found threats is Un-checked at this time (we may have it clean what it finds at a later time), and the option to Scan unwanted applications is Checked.
• When you have completed that scan, a scanlog ought to have been created and located at C:\Program Files\EsetOnlineScanner\log.txt. Please post that log for us as directed below.

​

NOTE: If you are unable to complete the ESET scan, please try another from the list below:

• Panda Active Scan ​

• Trend Micro HouseCall ​

• F-Secure Online Virus Scanner ​

======

Please use the Internet Explorer browser (or FireFox with IETab), and do an online scan with [color= "blue"]Kaspersky Online Scanner[/color]

Note: If you have used this particular scanner before, you MAY HAVE TO UNINSTALL the program through Add/Remove Programs before downloading the new ActiveX component

Click Yes, when prompted to install its ActiveX component.
(Note.. for Internet [color= "#3333FF"]Explorer 7[/color] users: If at any time you have trouble with the "Accept" button of the license, click on the "Zoom" tool located at the bottom right of the IE window and set the zoom to 75 %. Once the license has been accepted, reset to 100%.)
The program launches and downloads the latest definition files.

• Once the files are downloaded click on Next
• Click on Scan Settings and configure as follows:
  • Scan using the following Anti-Virus database:
    • [color= "#6666CC"]Extended[/color]
  • Scan Options:
    • [color= "#6666CC"]Scan Archives[/color]
    • [color= "#6666CC"]Scan Mail Bases[/color]
• Click OK and, under select a target to scan, select My Computer

When the scan is done, in the [color= "Navy"]Scan is completed [/color]window, any infection is displayed.
There is no option to clean/disinfect, however, we need to analyze the information on the report.

To obtain the report:
Click on: Save Report As (above - red blinking arrow)
Next, in the [color= "Navy"]Save as [/color]prompt, [color= "navy"]Save in[/color] area, select: Desktop
In the [color= "navy"]File name[/color] area, use KScan, or something similar
In [color= "navy"]Save as type[/color], click the drop arrow and select: Text file [*.txt]
Then, click: Save
Please post the [color= "Navy"]Kaspersky Online Scanner Report [/color]in your reply.

 

ESETSmartInstaller@High as CAB hook log:
OnlineScanner.ocx - registred OK
# version=7
# iexplore.exe=6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
# OnlineScanner.ocx=1.0.0.6211
# api_version=3.0.2
# EOSSerial=09101f4712877141b9d1e18d789b57a7
# end=finished
# remove_checked=false
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2010-01-16 12:02:28
# local_time=2010-01-16 05:32:28 (+0530, India Standard Time)
# country= "United States "
# lang=1033
# osver=5.1.2600 NT Service Pack 2
# compatibility_mode=1279 16777215 0 0 0 0 0 0
# compatibility_mode=5121 16777214 0 32 517620 110748038 0 0
# compatibility_mode=8192 67108863 100 0 2596 2596 0 0
# scanned=406868
# found=18
# cleaned=0
# scan_time=5376
C:\Documents and Settings\roc\My Documents\Downloads\New Folder\rmtanat.exe probably unknown NewHeur_PE virus 00000000000000000000000000000000 I
C:\System Volume Information\_restore{FF3FBE83-AD7D-4E04-9D39-ADBAE3B2E095}\RP1\A0000196.EXE probably a variant of Win32/Agent trojan 00000000000000000000000000000000 I
C:\System Volume Information\_restore{FF3FBE83-AD7D-4E04-9D39-ADBAE3B2E095}\RP2\A0000569.EXE probably a variant of Win32/Agent trojan 00000000000000000000000000000000 I
D:\System Volume Information\_restore{FF3FBE83-AD7D-4E04-9D39-ADBAE3B2E095}\RP16\A0002819.exe Win32/Sality.NAR virus 00000000000000000000000000000000 I
D:\System Volume Information\_restore{FF3FBE83-AD7D-4E04-9D39-ADBAE3B2E095}\RP16\A0005224.exe Win32/Sality.NAR virus 00000000000000000000000000000000 I
D:\System Volume Information\_restore{FF3FBE83-AD7D-4E04-9D39-ADBAE3B2E095}\RP16\A0005225.exe Win32/Sality.NAR virus 00000000000000000000000000000000 I
D:\System Volume Information\_restore{FF3FBE83-AD7D-4E04-9D39-ADBAE3B2E095}\RP16\A0006165.exe Win32/Sality.NAR virus 00000000000000000000000000000000 I
D:\soft\FunBuddyIconsSetup2.0.4.21.exe Win32/Toolbar.AskSBar application 00000000000000000000000000000000 I
D:\soft\setup_cuteconverter.exe probably a variant of Win32/Agent trojan 00000000000000000000000000000000 I
E:\Catia V5-R18\CD-2\INTEL\CXINST.exe Win32/Sality.NAR virus 00000000000000000000000000000000 I
E:\Catia V5-R18\CD1\INTEL\CXINSTSAT.exe Win32/Sality.NAR virus 00000000000000000000000000000000 I
E:\down\dotNetFx35setup[1].exe.old Win32/Sality.NAR virus 00000000000000000000000000000000 I
E:\down\FLVPlayerSetup.exe.old Win32/Sality.NAR virus 00000000000000000000000000000000 I
E:\down\marioinst.exe multiple threats 00000000000000000000000000000000 I
E:\down\internet\camfrog.exe.old Win32/Agent.NAG virus 00000000000000000000000000000000 I
E:\down\mario_brosccc\Super Mario Brothers 2\camfrog.exe.old Win32/Agent.NAG virus 00000000000000000000000000000000 I
E:\down\mario_brosccc\Super Mario Brothers 3\camfrog.exe.old Win32/Agent.NAG virus 00000000000000000000000000000000 I
E:\down\PrizeRebel_Hack_Engine\PrizeRebel Hack Engine\Prizerebel Hack Engine.exe Win32/Sality.NAR virus 00000000000000000000000000000000 I

 

If I were you I would get rid of AskBar from add/remove programs.
Looks like Eset may have picked up mario brothers as a virus. Could be true .

Please do another Eset scan and this time have it fix what was found. If any are legit and you want to keep them, is ok.

Did you manage the Kaspersky scan?

How is the PC?

 

i could not manage to get kaspersky online scan yet

i tried SalityKiller from kaspersky

http://support.kaspersky.com/viruses/solutions?qid=208279889

and it finally got my task manager and registry back enabled .

pc is responding well thanks a milion for the help guys ..

still some exe and software setup are not working

so i will do kaspersky scan and get back

 

No worries. If you still have problems, I will get you to run something else.

 

ty for support bro

i can manage with the rest but i would really like to get rid of Win32/Agent.NAG virus ..

 

The Eset scan picked it up already. Did you run the scan again and remove it?

I need you to do something else as I have missed something in your log.

Please go to Jotti's or to virustotal and have these files scanned. Post the results back here.

C:\Windows\System32\svchost.exe
C:\Windows\System32\userinit.exe
C:\Windows\explorer.exe

 

ok i do so and get back

 

with Jotti's
Filename: svchost.exe
Status:
Scan finished. 0 out of 20 scanners reported malware.

Filename: userinit.exe
Status:
Scan finished. 0 out of 21 scanners reported malware.

Filename: explorer.exe
Status:
Scan finished. 0 out of 20 scanners reported malware.

 

with virustotal

File explorer.exe received on 2010.01.20 08:45:31 (UTC)
Current status: finished
Result: 2/41 (4.88%)
Compact Compact
Print results Print results
Antivirus Version Last Update Result
a-squared 4.5.0.50 2010.01.20 -
AhnLab-V3 5.0.0.2 2010.01.19 -
AntiVir 7.9.1.142 2010.01.19 -
Antiy-AVL 2.0.3.7 2010.01.19 -
Authentium 5.2.0.5 2010.01.20 -
Avast 4.8.1351.0 2010.01.19 -
AVG 9.0.0.730 2010.01.19 -
BitDefender 7.2 2010.01.20 -
CAT-QuickHeal 10.00 2010.01.20 -
ClamAV 0.94.1 2010.01.20 -
Comodo 3644 2010.01.20 -
DrWeb 5.0.1.12222 2010.01.20 -
eSafe 7.0.17.0 2010.01.19 Win32.TrojanHorse
eTrust-Vet 35.2.7247 2010.01.20 -
F-Prot 4.5.1.85 2010.01.19 -
F-Secure 9.0.15370.0 2010.01.20 -
Fortinet 4.0.14.0 2010.01.20 -
GData 19 2010.01.20 -
Ikarus T3.1.1.80.0 2010.01.20 -
Jiangmin 13.0.900 2010.01.20 -
K7AntiVirus 7.10.950 2010.01.18 -
Kaspersky 7.0.0.125 2010.01.20 -
McAfee 5866 2010.01.19 -
McAfee+Artemis 5866 2010.01.19 -
McAfee-GW-Edition 6.8.5 2010.01.20 Heuristic.LooksLike.Win32.Rootkit.K
Microsoft 1.5302 2010.01.20 -
NOD32 4788 2010.01.20 -
Norman 6.04.03 2010.01.19 -
nProtect 2009.1.8.0 2010.01.20 -
Panda 10.0.2.2 2010.01.19 -
PCTools 7.0.3.5 2010.01.19 -
Prevx 3.0 2010.01.20 -
Rising 22.31.02.04 2010.01.20 -
Sophos 4.49.0 2010.01.20 -
Sunbelt 3.2.1858.2 2010.01.20 -
Symantec 20091.2.0.41 2010.01.20 -
TheHacker 6.5.0.7.156 2010.01.20 -
TrendMicro 9.120.0.1004 2010.01.20 -
VBA32 3.12.12.1 2010.01.20 -
ViRobot 2010.1.20.2146 2010.01.20 -
VirusBuster 5.0.21.0 2010.01.19 -
Additional information
File size: 1032192 bytes
MD5 : a0732187050030ae399b241436565e64
SHA1 : 69f33740413da112630be73ebb805a23b69f2f7f
SHA256: cbfbcc43b18deca5619706fc134d25e0dcebcd5257d0a70f5782c42e5c2fcec9
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x1E24E
timedatestamp.....: 0x41107ECE (Wed Aug 4 08:14:38 2004)
machinetype.......: 0x14C (Intel I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x44689 0x44800 6.38 b257b3cd7102cece46cd7366aff0f34b
.data 0x46000 0x1D90 0x1800 1.29 d0b87d8ce5a34731be197efb73b5d7bf
.rsrc 0x48000 0xB2278 0xB2400 6.63 abf6dc1befe1a4a4c7f6ef51d1a6f907
.reloc 0xFB000 0x36DC 0x3800 6.75 ee49ce3a409d6d28c1d63eabd34499b3

( 0 imports )


( 0 exports )
TrID : File type identification
Win32 Executable Generic (42.3%)
Win32 Dynamic Link Library (generic) (37.6%)
Generic Win/DOS Executable (9.9%)
DOS Executable Generic (9.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
ThreatExpert: http://www.threatexpert.com/report.aspx?md5=a0732187050030ae399b241436565e64
ssdeep: 12288:izEut4RuAwGgc7fNuIEGpPoHWr2Rkf8I+skzan1/g/J/v5nn:izEuAwj2fNuIhakf8I+sk81/g/J/Jn
PEiD : -
RDS : NSRL Reference Data Set

( Gateway )

Gateway Operating System Windows XP Pro Edition SP2: explorer.exe
( Microsoft )

MSDN Disc 2428.4: explorer.exeMSDN Disc 2428.5: explorer.exeMSDN Disc 2428.7: explorer.exeMSDN Disc 2428.8: explorer.exeOperating System Reinstallation CD Microsoft Windows XP Professional Service Pack 2: explorer.exeVirtual PC for Mac Windows XP Home Edition: explorer.exeVirtual PC for Mac Windows XP Professional Edition: explorer.exe

 

Ok. A few things I want you to do.

Go to Start | Run and type msconfig and press enter.

When msconfig opens, click the Launch System Restore Button.
On the next page, click the System Restore Settings link on the left.

Check the box labelled 'Turn off System restore'.

Reboot. Go back in and Turn System Restore Back on. A new Restore Point will be created.

Note that all previous restore points will be lost.

====

Download and Run ATF Cleaner
Download ATF (Atribune Temp File) Cleaner© by Atribune to your desktop.

Double-click ATF Cleaner.exe to open it.

Under Main choose:
Windows Temp
Current User Temp
All Users Temp
Cookies
Temporary Internet Files
Prefetch
Java Cache
*The other boxes are optional*
Then click the Empty Selected button.

Firefox:
Click Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click NO at the prompt.

Opera:
Click Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click NO at the prompt.

Click Exit on the Main menu to close the program.

==

Go back and run the Eset online scanner and have it remove everything it finds.

Post the log back here.

==

Please do an online scan with Kaspersky WebScanner

It's best to disable real time protection applications as they sometimes interfere with the scan.

Check this link for any applicable programs you may have (check under How to Temporarily Disable your Anti-virus).

Click on Accept If your pop –up blocker blocks any windows from opening.

Click Run on the window that opens.

Windows Vista users you must open the web browser using the Run as Administrator command - accessible from the right-click menu from the browser shortcut.

• The program will launch and then begin downloading the latest definition files.
• When completed, under Scan on the left side, click on My Computer.
• This will start the scan of your system.
• The scan will take a while so be patient and let it run.
• Once the scan is complete it will display if your system has been infected.
• Click Report on the left side.
• Click the Save Report button, and in the Save dialog box, type a name for the scan report file that you want to create and select its type as Text file. Click OK to save the file.
• Copy and paste that information in your next post.

Please post the Kaspersky results.

 

--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7.0: scan report
Thursday, January 21, 2010
Operating system: Microsoft Windows XP Professional Service Pack 2 (build 2600)
Kaspersky Online Scanner version: 7.0.26.13
Last database update: Thursday, January 21, 2010 14:30:29
Records in database: 3353784
--------------------------------------------------------------------------------

Scan settings:
scan using the following database: extended
Scan archives: yes
Scan e-mail databases: yes

Scan area - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\

Scan statistics:
Objects scanned: 307924
Threats found: 4
Infected objects found: 207
Suspicious objects found: 0
Scan duration: 05:24:27


File name / Threat / Threats count
C:\Documents and Settings\roc\Application Data\Wplugin.dll Infected: Trojan-Dropper.Win32.Agent.yat 1
C:\Documents and Settings\roc\Local Settings\Temp\000A24CD_Rar\DCPlusPlus-0.699.exe Infected: Trojan.Win32.Patched.dj 1
C:\Program Files\Common Files\Microsoft Shared\VBA\VBA6\link.exe Infected: Trojan.Win32.Patched.dj 1
C:\Program Files\InstallShield Installation Information\{8AD824A5-1CCC-4BB7-82C9-E6FB25CC0479}\setup.exe Infected: Trojan.Win32.Patched.dj 1
C:\WINDOWS\Wplugin.dll Infected: Trojan-Dropper.Win32.Agent.yat 1
D:\Program Files\ManyCam 2.4\uninstall.exe Infected: Trojan.Win32.Patched.dj 1
D:\Program Files\ManyCam 2.4\manycam_stat.exe Infected: Trojan.Win32.Patched.dj 1
D:\Program Files\ManyCam 2.4\ManyCam.exe Infected: Trojan.Win32.Patched.dj 1
D:\Program Files\WebcamMax\drvinst.exe Infected: Trojan.Win32.Patched.dj 1
D:\Program Files\WebcamMax\wcminst.exe Infected: Trojan.Win32.Patched.dj 1
D:\Program Files\WebcamMax\wmfdist.exe Infected: Trojan.Win32.Patched.dj 1
D:\Program Files\WebcamMax\uninst.exe Infected: Trojan.Win32.Patched.dj 1
D:\Program Files\Winamp\winamp.exe Infected: Trojan.Win32.Patched.dj 1
D:\Program Files\Winamp\UninstWA.exe Infected: Trojan.Win32.Patched.dj 1
D:\Program Files\Super Screen Recorder\Portable Super Screen Recorder v4.0\Portable Super Screen Recorder v4.0.exe Infected: Trojan.Win32.Patched.dj 1
D:\Program Files\Nokia\Nokia PC Suite 6\ApplicationInstaller.exe Infected: Trojan.Win32.Patched.dj 1
D:\Program Files\Nokia\Nokia PC Suite 6\PCSyncLV.exe Infected: Trojan.Win32.Patched.dj 1
D:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe Infected: Trojan.Win32.Patched.dj 1
D:\Program Files\Nokia\Nokia PC Suite 6\ContentCopier.exe Infected: Trojan.Win32.Patched.dj 1
D:\Program Files\Nokia\Nokia PC Suite 6\ConnectionManager.exe Infected: Trojan.Win32.Patched.dj 1
D:\Program Files\Nokia\Nokia PC Suite 6\ContactsEditor.exe Infected: Trojan.Win32.Patched.dj 1
D:\Program Files\Nokia\Nokia PC Suite 6\GetConnected.exe Infected: Trojan.Win32.Patched.dj 1
D:\Program Files\Nokia\Nokia PC Suite 6\MultimediaPlayer.exe Infected: Trojan.Win32.Patched.dj 1
D:\Program Files\Nokia\Nokia PC Suite 6\OneTouchAccess.exe Infected: Trojan.Win32.Patched.dj 1
D:\Program Files\Nokia\Nokia PC Suite 6\TextMessageEditor.exe Infected: Trojan.Win32.Patched.dj 1
D:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe Infected: Trojan.Win32.Patched.dj 1
D:\Program Files\Nokia\Nokia PC Suite 6\MusicManager.exe Infected: Trojan.Win32.Patched.dj 1
D:\Program Files\Nokia\Nokia PC Suite 6\ImageStore.exe Infected: Trojan.Win32.Patched.dj 1
D:\Program Files\Nokia\Nokia PC Suite 6\inf\DPInst.exe Infected: Trojan.Win32.Patched.dj 1
D:\Program Files\EA SPORTS2000\fifa2000.exe Infected: Trojan.Win32.Patched.dj 1
D:\Program Files\Camfrog\Camfrog Video Chat\Camfrog Video Chat.exe Infected: Trojan.Win32.Patched.dj 1
D:\ptc\configpro_setup.exe Infected: Trojan.Win32.Patched.dj 1
D:\soft\slicer\SETUP.EXE Infected: Trojan.Win32.Patched.dj 1
D:\soft\mvcsetup.exe Infected: Trojan.Win32.Patched.dj 1
D:\catia\CD2\INTEL\StartB.exe Infected: Trojan.Win32.Patched.dj 1
D:\catia\CD2\setup.exe Infected: Trojan.Win32.Patched.dj 1
D:\catia\CD1\INTEL\StartB.exe Infected: Trojan.Win32.Patched.dj 1
D:\catia\CD1\VBA\CC\ccdist.exe Infected: Trojan.Win32.Patched.dj 1
D:\catia\CD1\VBA\msi\instmsi.exe Infected: Trojan.Win32.Patched.dj 1
D:\catia\CD1\VBA\msi\instmsiw.exe Infected: Trojan.Win32.Patched.dj 1
D:\catia\CD1\VBA\pFiles\Common\MSShared\Vba\vba6\link.exe Infected: Trojan.Win32.Patched.dj 1
D:\catia\CD1\VBA\Sp\Dcom\dcom95.exe Infected: Trojan.Win32.Patched.dj 1
D:\catia\CD1\setup.exe Infected: Trojan.Win32.Patched.dj 1
D:\K-Lite Codec Pack\Filters\Haali\gdsmux.exe Infected: Trojan.Win32.Patched.dj 1
D:\K-Lite Codec Pack\Media Player Classic\mplayerc.exe Infected: Trojan.Win32.Patched.dj 1
D:\K-Lite Codec Pack\Tools\gspot\gspot.exe Infected: Trojan.Win32.Patched.dj 1
D:\K-Lite Codec Pack\Tools\graphstudio.exe Infected: Trojan.Win32.Patched.dj 1
D:\K-Lite Codec Pack\Tools\dsconfig.exe Infected: Trojan.Win32.Patched.dj 1
D:\K-Lite Codec Pack\Real\Update_OB\upgrdhlp.exe Infected: Trojan.Win32.Patched.dj 1
E:\Ansys 10\AutoExec.exe Infected: Trojan.Win32.Patched.dj 1
E:\Ansys 10\LicenseSetup\ansyslmd32.exe Infected: Trojan.Win32.Patched.dj 1
E:\Ansys 10\LicenseSetup\lmgrd32.exe Infected: Trojan.Win32.Patched.dj 1
E:\Ansys 10\LicenseSetup\setup.exe Infected: Trojan.Win32.Patched.dj 1
E:\Ansys 10\MAGNiTUDE\ansys.exe Infected: Trojan.Win32.Patched.dj 1
E:\Ansys 10\MPICH\Setup.exe Infected: Trojan.Win32.Patched.dj 1
E:\Ansys 10\MPICH\_ISDel.exe Infected: Trojan.Win32.Patched.dj 1
E:\Ansys 10\setup.exe Infected: Trojan.Win32.Patched.dj 1
E:\Ansys 10\WinHostId.exe Infected: Trojan.Win32.Patched.dj 1
E:\audio Converter\oggcodecs_0.71.0946.exe Infected: Trojan.Win32.Patched.dj 1
E:\Back Up of Desktop\New Folder\ManyCam.exe Infected: Trojan.Win32.Patched.dj 1
E:\Back Up of My Document\Copy of BolSetup.exe Infected: Trojan.Win32.Patched.dj 1
E:\Back Up of My Document\fru-2.0.31524-standard.exe Infected: Trojan.Win32.Patched.dj 1
E:\Back Up of My Document\install_flash_player.exe Infected: Trojan.Win32.Patched.dj 1
E:\Back Up of My Document\Opera_1010_en_Setup.exe Infected: Trojan.Win32.Patched.dj 1
E:\Back Up of My Document\Super Screen Recorder\Portable Super Screen Recorder v4.0\Portable Super Screen Recorder v4.0.exe Infected: Trojan.Win32.Patched.dj 1
E:\Back Up of My Document\winamp556_full_emusic-7plus_en-us.exe Infected: Trojan.Win32.Patched.dj 1
E:\catia r16 setup\CAT2-R16-WIN-1 (G)\lumdevdi.exe Infected: Trojan.Win32.Patched.dj 1
E:\catia r16 setup\CAT2-R16-WIN-1 (G)\setup.exe Infected: Trojan.Win32.Patched.dj 1
E:\catia r16 setup\CAT2-R16-WIN-1 (G)\VBA\CC\ccdist.exe Infected: Trojan.Win32.Patched.dj 1
E:\catia r16 setup\CAT2-R16-WIN-1 (G)\VBA\msi\instmsi.exe Infected: Trojan.Win32.Patched.dj 1
E:\catia r16 setup\CAT2-R16-WIN-1 (G)\VBA\msi\instmsiw.exe Infected: Trojan.Win32.Patched.dj 1
E:\catia r16 setup\CAT2-R16-WIN-1 (G)\VBA\pFiles\Common\MSShared\Vba\vba6\link.exe Infected: Trojan.Win32.Patched.dj 1
E:\catia r16 setup\CAT2-R16-WIN-1 (G)\VBA\Sp\Dcom\dcom95.exe Infected: Trojan.Win32.Patched.dj 1
E:\catia r16 setup\CAT2-R16-WIN-2 (G)\setup.exe Infected: Trojan.Win32.Patched.dj 1
E:\catia r16 setup\CAT2-R16-WIN-2 (G)\VBA\CC\ccdist.exe Infected: Trojan.Win32.Patched.dj 1
E:\catia r16 setup\CAT2-R16-WIN-2 (G)\VBA\msi\instmsi.exe Infected: Trojan.Win32.Patched.dj 1
E:\catia r16 setup\CAT2-R16-WIN-2 (G)\VBA\msi\instmsiw.exe Infected: Trojan.Win32.Patched.dj 1
E:\catia r16 setup\CAT2-R16-WIN-2 (G)\VBA\pFiles\Common\MSShared\Vba\vba6\link.exe Infected: Trojan.Win32.Patched.dj 1
E:\catia r16 setup\CAT2-R16-WIN-2 (G)\VBA\Sp\Dcom\dcom95.exe Infected: Trojan.Win32.Patched.dj 1
E:\Catia V5-R18\CD-2\INTEL\CATCheckVC8Level.exe Infected: Trojan.Win32.Patched.dj 1
E:\Catia V5-R18\CD-2\INTEL\StartB.exe Infected: Trojan.Win32.Patched.dj 1
E:\Catia V5-R18\CD-2\setup.exe Infected: Trojan.Win32.Patched.dj 1
E:\Catia V5-R18\CD1\INTEL\CATCheckVC8Level.exe Infected: Trojan.Win32.Patched.dj 1
E:\Catia V5-R18\CD1\INTEL\StartB.exe Infected: Trojan.Win32.Patched.dj 1
E:\Catia V5-R18\CD1\INTEL\StartSAT.exe Infected: Trojan.Win32.Patched.dj 1
E:\Catia V5-R18\CD1\INTEL\StartSATB.exe Infected: Trojan.Win32.Patched.dj 1
E:\Catia V5-R18\CD1\setup.exe Infected: Trojan.Win32.Patched.dj 1
E:\Catia V5-R18\CD1\VBA\CC\ccdist.exe Infected: Trojan.Win32.Patched.dj 1
E:\Catia V5-R18\CD1\VBA\msi\instmsi.exe Infected: Trojan.Win32.Patched.dj 1
E:\Catia V5-R18\CD1\VBA\msi\instmsiw.exe Infected: Trojan.Win32.Patched.dj 1
E:\Catia V5-R18\CD1\VBA\pFiles\Common\MSShared\Vba\vba6\link.exe Infected: Trojan.Win32.Patched.dj 1
E:\Catia V5-R18\CD1\VBA\Sp\Dcom\dcom95.exe Infected: Trojan.Win32.Patched.dj 1
E:\Catia V5-R18\PAtch\WindowsXP-KB926255-x86-ENU.exe Infected: Trojan.Win32.Patched.dj 1
E:\crack\ansys.exe Infected: Trojan.Win32.Patched.dj 1
E:\crack\lmutil.exe Infected: Trojan.Win32.Patched.dj 1
E:\desktop\vbrun60sp5.exe Infected: Trojan.Win32.Patched.dj 1
E:\desktop\vbsetup.exe Infected: Trojan.Win32.Patched.dj 1
E:\down\DeepFreezeSTDEvaluation.exe Infected: Trojan.Win32.Patched.dj 1
E:\down\dotNetFx35setup[1].exe.old Infected: Trojan.Win32.Patched.dj 1
E:\down\Effects-Package-for-WebcamMax-4-Setup-20070801.exe Infected: Trojan.Win32.Patched.dj 1
E:\down\Firefox Setup 3.5.7.exe.old Infected: Trojan-Downloader.Win32.Banload.apad 1
E:\down\flashplayer.exe Infected: Trojan.Win32.Patched.dj 1
E:\down\FLVPlayerSetup.exe.old Infected: Trojan.Win32.Patched.dj 1
E:\down\FoxitReader30_enu_Setup.exe Infected: Trojan.Win32.Patched.dj 1
E:\down\internet\DCPlusPlus-0.699.exe Infected: Trojan.Win32.Patched.dj 1
E:\down\ManyCam.exe Infected: Trojan.Win32.Patched.dj 1
E:\down\OmertaScript.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.616 1
E:\down\OmertaScript.zip Infected: not-a-virus:Client-IRC.Win32.mIRC.616 1
E:\down\utorrent.exe Infected: Trojan.Win32.Patched.dj 1
E:\New Folder\Photo Shop 5.5\DirectX\dxsetup.exe Infected: Trojan.Win32.Patched.dj 1
E:\New Folder\Qick Heal\QH_Total_Security_9.0.exe Infected: Trojan.Win32.Patched.dj 1
F:\04 23 2006 (G)\Sti305.exe Infected: Trojan.Win32.Patched.dj 1
F:\04 23 2006 (G)\VM305Cap.exe Infected: Trojan.Win32.Patched.dj 1
F:\04 23 2006 (G)\setup\setup.exe Infected: Trojan.Win32.Patched.dj 1
F:\04 23 2006 (G)\amcap.exe Infected: Trojan.Win32.Patched.dj 1
F:\04 23 2006 (G)\VM305_STI.exe Infected: Trojan.Win32.Patched.dj 1
F:\ProE 4.0\ENGINEER (G)\setup.exe Infected: Trojan.Win32.Patched.dj 1
F:\ProE 4.0\ENGINEER (G)\dsrc\i486_nt\gunzip.exe Infected: Trojan.Win32.Patched.dj 1
F:\ProE 4.0\ENGINEER (G)\dsrc\i486_nt\obj\ptcsetup.exe Infected: Trojan.Win32.Patched.dj 1
F:\ProE 4.0\ENGINEER (G)\uninstall\i486_nt\obj\pscn.exe Infected: Trojan.Win32.Patched.dj 1
F:\ProE 4.0\ENGINEER (G)\uninstall\i486_nt\obj\psuninst.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\mechWildfire 2.0\i486_nt\ug\ug2mnf.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\mechWildfire 2.0\i486_nt\ptc\guideui.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\mechWildfire 2.0\i486_nt\ptc\ptcxfce.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\mechWildfire 2.0\i486_nt\jpeg\bin\cjpeg.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\mechWildfire 2.0\i486_nt\gs\bin\gswin32.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\mechWildfire 2.0\i486_nt\bin\convert.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\mechWildfire 2.0\i486_nt\bin\du.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\mechWildfire 2.0\i486_nt\bin\econvert.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\mechWildfire 2.0\i486_nt\bin\mdb2mnf.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\mechWildfire 2.0\i486_nt\bin\mech.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\mechWildfire 2.0\i486_nt\bin\mesetusr.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\mechWildfire 2.0\i486_nt\bin\mnf2mdb.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\mechWildfire 2.0\i486_nt\bin\mnf_tran.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\mechWildfire 2.0\i486_nt\bin\msengine.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\mechWildfire 2.0\i486_nt\bin\nmsd.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\mechWildfire 2.0\i486_nt\bin\nmsq.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\mechWildfire 2.0\i486_nt\bin\pro_comm_msg.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\mechWildfire 2.0\i486_nt\bin\wintail.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\mechWildfire 2.0\i486_nt\bin\showlic.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\mechWildfire 2.0\i486_nt\bin\rundpi.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\mechWildfire 2.0\i486_nt\bin\fdiff.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\mechWildfire 2.0\i486_nt\bin\measdiff.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\mechWildfire 2.0\i486_nt\bin\resdiff.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\mechWildfire 2.0\i486_nt\obj\plpf_status.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\mechWildfire 2.0\i486_nt\obj\lmutil.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\mechWildfire 2.0\i486_nt\obj\cpu_id.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\mechWildfire 2.0\dsrc\i486_nt\gunzip.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\mechWildfire 2.0\dsrc\i486_nt\obj\ptcsetup.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\mechWildfire 2.0\protable\i486_nt\obj\protab.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\mechWildfire 2.0\bin\i486_nt_ptc_setvars.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\proeWildfire 2.0\i486_nt\obj\animation.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\proeWildfire 2.0\i486_nt\obj\pmechanism.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\proeWildfire 2.0\i486_nt\obj\pro_from_feas.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\proeWildfire 2.0\i486_nt\obj\pro_sthenoconv.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\proeWildfire 2.0\i486_nt\obj\imagecfg.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\proeWildfire 2.0\i486_nt\obj\xtop.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\proeWildfire 2.0\i486_nt\obj\pvx_install.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\proeWildfire 2.0\i486_nt\obj\protk_unlock.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\proeWildfire 2.0\i486_nt\obj\pro_batch_t.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\proeWildfire 2.0\i486_nt\obj\pro_mcs_comp.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\proeWildfire 2.0\bin\proe.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\proeWildfire 2.0\dsrc\i486_nt\obj\ptcsetup.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\proeWildfire 2.0\uninstall\i486_nt\obj\pscn.exe Infected: Trojan.Win32.Patched.dj 1
F:\Program Files\proeWildfire 2.0\uninstall\i486_nt\obj\psuninst.exe Infected: Trojan.Win32.Patched.dj 1
F:\New Folder\vlc-0.8.6i-win32.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\MediaBrowser.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Setup.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Bin\acadFeui\Setup.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Bin\acadFeui\msi\WindowsInstaller-KB893803-v2-x86.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Bin\acadFeui\Program Files\Common Files\Autodesk Shared\AcHelp.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Bin\acadFeui\Program Files\Common Files\Autodesk Shared\mtstack16.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Bin\acadFeui\Program Files\Common Files\Autodesk Shared\WSCommCntr1.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Bin\acadFeui\Program Files\Common Files\Autodesk Shared\Service\AdskNetSrv.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Bin\acadFeui\Program Files\Common Files\Microsoft Shared\Office10\MSOICONS.EXE Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Bin\acadFeui\Program Files\Common Files\Microsoft Shared\VBA\VBA6\link.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Bin\acadFeui\Program Files\Root\AcSignApply.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Bin\acadFeui\Program Files\Root\AdRefMan.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Bin\acadFeui\Program Files\Root\AdSubAware.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Bin\acadFeui\Program Files\Root\senddmp.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Bin\acadFeui\Program Files\Root\sfxfe32.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Bin\acadFeui\Program Files\Root\slidelib.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Bin\acadFeui\Program Files\Root\Locked\acad.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Bin\acadFeui\support\AdNIW\Setup.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Bin\acadFeui\support\CADManager\Setup.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Bin\acadFeui\support\CADManager\Program Files\Autodesk\CAD Manager Tools\AdPM.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Bin\acadFeui\support\CADManager\Program Files\Autodesk\CAD Manager Tools\CMControl.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Bin\acadFeui\support\CADManagerControl\CMControl.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Bin\acadFeui\support\dotnetfx\dotnetfx.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Bin\acadFeui\support\nlm\Setup.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Bin\acadFeui\support\nlm\Program Files\Autodesk Network License Manager\adskflex.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Bin\acadFeui\support\nlm\Program Files\Autodesk Network License Manager\lmgrd.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Bin\acadFeui\support\nlm\Program Files\Autodesk Network License Manager\lmtools.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Bin\acadFeui\support\nlm\Program Files\Autodesk Network License Manager\lmutil.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Bin\acadFeui\support\nlm\SAMreport-Lite\j2re-1_4_2_04-windows-i586-p.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Bin\acadFeui\support\nlm\SAMreport-Lite\SAMreport.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Bin\acadFeui\support\NSA\Setup.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\Bin\acadFeui\Windows\System32\AcSignOpt.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\MediaBrowser\demo32.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\MediaBrowser\RFTMP.exe Infected: Trojan.Win32.Patched.dj 1
F:\AUTOCAD2007_23_0 (H)\MediaBrowser\WriteRunonceKey.exe Infected: Trojan.Win32.Patched.dj 1
F:\vinit\FRZ-CD.EXE Infected: Trojan.Win32.Patched.dj 1
F:\vinit\camfrog.exe Infected: Trojan.Win32.Patched.dj 1
F:\qhntevl010409.exe Infected: Trojan.Win32.Patched.dj 1
F:\down load manager\idman512_inter-net-download-manager-v5.12.8.exe Infected: Trojan.Win32.Patched.dj 1
F:\pinku\install_flash_player.exe Infected: Trojan.Win32.Patched.dj 1
F:\install_virtualdj_trial_v6.0.1.exe Infected: Trojan.Win32.Patched.dj 1

Selected area has been scanned.

 

Seeing how Kaspersky does not have any removal options, can you please go here and use the F-Secure scanner.
It should be able to pick up those infected files and clean them up.
Please post the log when complete.

Have you tried updating AVG and scanning, or downloading another AV (temporarily) to scan your pc?

 

ok i wil use F-Secure scanner.

i tried avg it can not cure the files on which virus is infected it just puts them in virus vault ..

according to you which other av i should try ??

also would it help if i reinstall xp and may be format c drive
if so what procedure should i follow 2 do it ...

but before formatting we should make sure that setup files on which virus is infected would work after format or else
i will have a empty c drive and infected setup files on other drive ..

thanks for Ur help bro appreciated

 

this is the one that bothering me
Common Detection Aliases
Company Name Detection Name
McAfee Detection W32/Wplugin
Kaspersky Trojan-Dropper.Win32.Agent.yat
microsoft virus:win32/slugin.a
norman sandbox: w32/agent.iyjk.dropper
Sophos W32/Slugin-A
Symantec W32.Slugin.A!inf
Trend Micro PE_WPLUG.A

 

If it were my computer with that much activity on it, I would be doing a fresh install, to be honest.
Because you have so many legitimate applications infected, the reformat might be the way to go.
Maybe try F-Secure scanner first to see if those files can be disinfected though.

To reformat, have bios make the CD drive first boot and pop the CD in. Follow the prompts on which drive to install to, format the drive first, then away you go.

Make sure you have all your motherboard drivers first and that you have backed up any data you need.