Inactive Serious problem with my Windows

[Inactive] Serious problem with my Windows

Hy everyone.
I am seeking help for my netbook. I am running windows7 starter and my netbook was running fine until last sunday. I found out that my system was infected by a trojan. It went by my anti-virus somehow.(kaspersky). I lost my admin rights on my own computer, it disabled the system restore, it does not allow me to run the backup i made a few weeks ago and what surprises me the moast is thet whenever I try to install any kind of anti-virus or malware removal it corrups it and I can not start a scan.
I tried the following: AVG, AdAware, Adware-pro, Malwarebites, Spybot, Kaspersky, Avast, Mcafee and many others.
I would like to solve this problem somehow without haveing to reinstall my win.

Again: I tried to restore my system, back-up, I uninstalled everything I got on sunday and after a week of research I turn to anyone here who can help me fix this.

I am in desperate need of a reply.

Thank you.

Tibi

 

Download MBAM on a flash drive and rename it. Then try to run it. Have you tried Safe Mode?

 

I have tried Safe mode aswell. I contacted a few friends who suggested the same thing but thx for trying.

 

DDS.txt

DDS (Ver_10-10-10.03) - NTFSx86
Run by tibi at 20:05:33.02 on Mon 10/18/2010
Internet Explorer: 8.0.7600.16385

============== Running Processes ===============


============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.com/ig?brand=TSNB&bmod=TSNB
uDefault_Page_URL = hxxp://www.google.com/ig?brand=TSNB&bmod=TSNB
mDefault_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=TSNB&bmod=TSNB
mStart Page = hxxp://www.google.com/ig/redirectdomain?brand=TSNB&bmod=TSNB
BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} - No File
TB: {32099AAC-C132-4136-9E9A-4E364A424E17} - No File
uRun: [Messenger (Yahoo!)] "c:\progra~1\yahoo!\messenger\YahooMessenger.exe" -quiet
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\DTLite.exe" -autorun
uRun: [Lvmdiejlrxc] c:\users\tibi\appdata\local\temp\spoolsv.exe
uRun: [Lvmdiejlotc] c:\users\tibi\appdata\local\temp\hexdump.exe
uRun: [Lvmdiejlqs] c:\users\tibi\appdata\local\temp\win32 .exe
uRun: [Lvmdiejloc] c:\users\tibi\appdata\local\temp\avp.exe
uRun: [LvmdiejlqW] c:\users\tibi\appdata\local\temp\drweb.exe
uRun: [LvmdiejloK] "c:\users\tibi\appdata\local\temp\avp" .exe
uRun: [LvmdiejlogK] "c:\users\tibi\appdata\local\temp\avp" .exe
uRun: [Lvmdiejlog0] "c:\users\tibi\appdata\local\temp\avp" .exe
uRun: [Lvmdiejlogj] "c:\users\tibi\appdata\local\temp\avp" .exe
uRun: [Lvmdiejloggj] "c:\users\tibi\appdata\local\temp\avp" .exe
uRun: [Lvmdiejlne] c:\users\tibi\appdata\local\temp\lsass.exe
uRun: [Lvmdiejlo+] c:\users\tibi\appdata\local\temp\avp32.exe
uRun: [LvmdiejlsPc] c:\users\tibi\appdata\local\temp\nvsvc32.exe
uRun: [Lvmdiejlpsc] c:\users\tibi\appdata\local\temp\taskmgr.exe
uRun: [Lvmdiejlrx0] "c:\users\tibi\appdata\local\temp\spoolsv" .exe
uRun: [Lvmdiejlogggc] "c:\users\tibi\appdata\local\temp\avp" .exe
uRun: [Lvmdiejlos] c:\users\tibi\appdata\local\temp\avp32 .exe
uRun: [LvmdiejlpsK] "c:\users\tibi\appdata\local\temp\taskmgr" .exe
uRun: [Lvmdiejlrxj] "c:\users\tibi\appdata\local\temp\spoolsv" .exe
uRun: [Lvmdiejlqpj] c:\users\tibi\appdata\local\temp\win16 .exe
uRun: [Lvmdiejlopc] c:\users\tibi\appdata\local\temp\avp32 .exe
uRun: [Lvmdiejlps0] "c:\users\tibi\appdata\local\temp\taskmgr" .exe
uRun: [Lvmdiejlrxgc] "c:\users\tibi\appdata\local\temp\spoolsv" .exe
uRun: [Lvmdiejlpsj] "c:\users\tibi\appdata\local\temp\taskmgr" .exe
uRun: [LvmdiejlrxgK] "c:\users\tibi\appdata\local\temp\spoolsv" .exe
uRun: [Lvmdiejlrxg0] "c:\users\tibi\appdata\local\temp\spoolsv" .exe
uRun: [Lvmdiejlpsgc] "c:\users\tibi\appdata\local\temp\taskmgr" .exe
uRun: [LvmdiejlpsgK] "c:\users\tibi\appdata\local\temp\taskmgr" .exe
uRun: [Lvmdiejlpsgggj] "c:\users\tibi\appdata\local\temp\taskmgr" .exe
uRun: [Lvmdiejlpsggggc] "c:\users\tibi\appdata\local\temp\taskmgr" .exe
uRun: [LvmdiejlqpgggggK] c:\users\tibi\appdata\local\temp\win32 .exe
uRun: [LvmdiejlpsggggK] "c:\users\tibi\appdata\local\temp\taskmgr" .exe
uRun: [Lvmdiejlk+] c:\users\tibi\appdata\local\temp\gdi32.exe
uRun: [Lvmdiejl+0zbi\AppData\Local\Temp\1756273744.exe] c:\users\tibi\appdata\local\temp\1756273744.exe
uRun: [Lvmdiejlq+] c:\users\tibi\appdata\local\temp\win16.exe
uRun: [Lvmdiejlqvc] c:\users\tibi\appdata\local\temp\wininst.exe
uRun: [Lvmdiejlqf] c:\users\tibi\appdata\local\temp\user.exe
uRun: [LvmdiejlsPK] "c:\users\tibi\appdata\local\temp\nvsvc32" .exe
uRun: [LvmdiejlsP0] "c:\users\tibi\appdata\local\temp\nvsvc32" .exe
uRun: [Lvmdiejlq0c] "c:\users\tibi\appdata\local\temp\user" .exe
uRun: [Lvmdiejlq0K] "c:\users\tibi\appdata\local\temp\user" .exe
uRun: [Lvmdiejlq00] "c:\users\tibi\appdata\local\temp\user" .exe
uRun: [LvmdiejlsPgc] "c:\users\tibi\appdata\local\temp\nvsvc32" .exe
uRun: [Lvmdiejlq0gc] "c:\users\tibi\appdata\local\temp\user" .exe
uRun: [Lvmdiejlrf] c:\users\tibi\appdata\local\temp\smss.exe
uRun: [Lvmdiejlkpc] "c:\users\tibi\appdata\local\temp\gdi32" .exe
uRun: [Lvmdiejlqpc] c:\users\tibi\appdata\local\temp\win16 .exe
uRun: [Lvmdiejlm0] c:\users\tibi\appdata\local\temp\mdm .exe
uRun: [Lvmdiejl81ybi\AppData\Local\Temp\1035683652.exe] c:\users\tibi\appdata\local\temp\1035683652.exe
uRun: [Lvmdiejlqc] c:\users\tibi\appdata\local\temp\win.exe
uRun: [Lvmdiejlora] c:\users\tibi\appdata\local\temp\iexplarer.exe
uRun: [Lvmdiejlppf] c:\users\tibi\appdata\local\temp\services.exe
uRun: [Lvmdiejlna] c:\users\tibi\appdata\local\temp\login.exe
uRun: [Lvmdiejlupc] c:\users\tibi\appdata\local\temp\sysedit.exe
mRun: [<NO NAME>]
mRun: [IgfxTray] "c:\windows\system32\igfxtray.exe "
mRun: [HotKeysCmds] "c:\windows\system32\hkcmd.exe "
mRun: [Persistence] "c:\windows\system32\igfxpers.exe "
mRun: [RtHDVCpl] "c:\program files\realtek\audio\hda\RtHDVCpl.exe" -s
mRun: [SVPWUTIL] "c:\program files\toshiba\utilities\SVPWUTIL.exe" SVPwUTIL
mRun: [ThpSrv] "c:\windows\system32\thpsrv" /logon
mRun: [UqmPth] c:\windows\temp\svchost.exe
mRun: [SSDMonitor] "c:\program files\common files\pc tools\smonitor\SSDMonitor.exe "
dRun: [uPc+st0NZaJsiv] rundll32.exe c:\windows\system32\h2ofr.dll, SystemServer
dRun: [UqmPmuc] c:\windows\temp\uz5ttlsf.exe
dRun: [Ggaxejucowoz] rundll32.exe "c:\windows\system32\config\systemprofile\appdata\local\sLetsonp.dll ",Startup
dRun: [UqmPeP] c:\windows\temp\avp32.exe
dRun: [UqmPqe] c:\windows\temp\login.exe
dRun: [UqmPwg] c:\windows\temp\spoolsv.exe
dRun: [UqmPsb] c:\windows\temp\drweb.exe
dRun: [UqmPusc] c:\windows\temp\winlogon.exe
dRun: [UqmPtg] c:\windows\temp\wininst.exe
dRun: [UqmPZP] c:\windows\temp\gdi32.exe
dRun: [UqmPtpf] c:\windows\temp\iexplarer.exe
dRun: [uPc+st0NeYJsiv] rundll32.exe c:\windows\system32\k9zdm.dll, SystemServer
dRun: [UqmPqO] c:\windows\temp\gmkiy2b.exe
dRun: [uPc+st0NpeaGuo] rundll32.exe c:\windows\system32\qpgj5oj.dll, SystemServer
dRun: [UqmPSR] c:\windows\temp\m42u0py.exe
dRun: [UqmPth] c:\windows\temp\svchost.exe
dRun: [UqmP0Z] c:\windows\temp\system.exe
dRun: [UqmPsd] c:\windows\temp\taskmgr.exe
dRun: [UqmPd] c:\windows\temp\avp.exe
dRun: [UqmPxc] c:\windows\temp\smss.exe
dRun: [UqmPvc] c:\windows\temp\user.exe
dRun: [UqmPwe] c:\windows\temp\setup.exe
dRun: [uPc+st0NccJsiv] rundll32.exe c:\windows\system32\pp6gx.dll, SystemServer
dRun: [uPc+st0NoraCxl] rundll32.exe c:\windows\system32\hwhvhghj.dll, SystemServer
dRun: [UqmPMfc] c:\windows\temp\bf54oms0.exe
dRun: [hixvivsy] c:\windows\temp\kfttbiiol\gqbykkwagnz.exe
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
dPolicies-explorer: NoFolderOptions = 1 (0x1)
dPolicies-system: DisableRegistryTools = 1 (0x1)
IE: E&xport to Microsoft Excel - c:\progra~1\mif5ba~1\office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\mif5ba~1\office12\ONBttnIE.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\mif5ba~1\office12\REFIEBAR.DLL
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: igfxcui - igfxdev.dll

================= FIREFOX ===================

FF - ProfilePath - c:\users\tibi\appdata\roaming\mozilla\firefox\profiles\tfsajapv.default\
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - component: c:\users\tibi\appdata\roaming\mozilla\firefox\profiles\tfsajapv.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\FFExternalAlert.dll
FF - component: c:\users\tibi\appdata\roaming\mozilla\firefox\profiles\tfsajapv.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\RadioWMPCore.dll
FF - plugin: c:\program files\google\update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
FF - HiddenExtension: XULRunner: {3E5B944F-1E87-4D04-9A58-A9747629B1A8} - c:\windows\system32\config\systemprofile\appdata\local\{3e5b944f-1e87-4d04-9a58-a9747629b1a8}\

---- FIREFOX POLICIES ----
FF - user.js: network.cookie.cookieBehavior - 0
FF - user.js: privacy.clearOnShutdown.cookies - false
FF - user.js: security.warn_viewing_mixed - false
FF - user.js: security.warn_viewing_mixed.show_once - false
FF - user.js: security.warn_submit_insecure - false
FF - user.js: security.warn_submit_insecure.show_once - false
c:\program files\mozilla firefox\greprefs\all.js - pref( "network.IDN.whitelist.xn--mgbaam7a8h ", true);
c:\program files\mozilla firefox\greprefs\all.js - pref( "network.IDN.whitelist.xn--mgberp4a5d4ar ", true);

============= SERVICES / DRIVERS ===============


=============== Created Last 30 ================

2010-10-18 05:37:19 -------- dc----w- c:\progra~2\{ECC164E0-3133-4C70-A831-F08DB2940F70}
2010-10-18 02:56:10 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-10-18 02:43:02 -------- d-----w- c:\users\tibi\appdata\roaming\ParetoLogic
2010-10-18 01:42:54 -------- d-----w- c:\progra~2\Simply Super Software
2010-10-17 19:10:13 -------- d-----w- c:\program files\VAG-COM
2010-10-17 19:09:43 -------- d-----w- C:\VWTOOL
2010-10-17 19:09:38 7008 ----a-w- c:\windows\system\SETUPKIT.DLL
2010-10-17 19:09:38 398416 ----a-w- c:\windows\system\VBRUN300.DLL
2010-10-17 19:09:38 38912 ----a-w- c:\windows\system\DDEML.DLL
2010-10-17 19:09:38 29574 ----a-w- c:\windows\SETUP1.EXE
2010-10-17 19:08:52 19056 ------w- c:\temp\Setup.exe
2010-10-17 19:08:52 -------- d-----w- C:\TEMP
2010-10-17 00:36:01 -------- d-----w- c:\users\tibi\appdata\roaming\AVG10
2010-10-16 09:45:50 -------- d--h--w- c:\progra~2\Common Files
2010-10-16 09:44:15 -------- d-----w- c:\progra~2\AVG10
2010-10-16 09:43:50 -------- d-----w- c:\program files\AVG
2010-10-15 05:23:56 -------- d-----w- c:\program files\common files\iS3
2010-10-15 05:23:50 -------- d-----w- c:\progra~2\STOPzilla!
2010-10-15 05:06:45 -------- d-----w- C:\Kaspersky Lab
2010-10-14 21:00:37 0 ----a-w- c:\progra~2\MWeHbp0l.exe
2010-10-14 17:00:55 -------- d-----w- c:\program files\Emsisoft Anti-Malware
2010-10-14 16:56:04 -------- d-----w- C:\scc_41
2010-10-14 05:13:41 201 ----a-w- c:\users\tibi\appdata\roaming\jsfhjjsd.bat
2010-10-14 05:08:56 -------- d-----w- c:\progra~2\MFAData
2010-10-14 04:49:43 0 ----a-w- c:\users\tibi\appdata\local\Upefag.bin
2010-10-14 04:33:42 45072 ----a-w- c:\windows\system32\drivers\ssfmonm.sys
2010-10-14 04:33:42 24496 ----a-w- c:\windows\system32\drivers\sshrmd.sys
2010-10-14 04:33:42 182056 ----a-w- c:\windows\system32\drivers\ssidrv.sys
2010-10-14 04:31:33 -------- d-----w- c:\program files\Webroot
2010-10-14 04:31:29 -------- dc-h--w- c:\progra~2\{CB7DC039-811E-4CD1-81CD-8AD0EF4B8CBA}
2010-10-14 04:30:41 -------- d-----w- c:\progra~2\Webroot
2010-10-14 04:30:38 -------- d-----w- c:\users\tibi\appdata\local\PackageAware
2010-10-13 18:12:23 -------- d-----w- c:\users\tibi\appdata\local\{6F71EECC-614C-4A7A-8527-1CABB0956AB1}
2010-10-13 16:22:21 -------- dc----w- c:\users\tibi\appdata\local\MigWiz
2010-10-12 23:24:29 -------- d-----w- c:\program files\Kaspersky Lab
2010-10-12 03:00:41 60000 ----a-w- c:\windows\winamp.exe
2010-10-12 03:00:41 60000 ----a-w- c:\windows\nvsvc32.exe
2010-10-12 02:59:39 -------- d-----w- c:\users\tibi\appdata\local\WinZip
2010-10-12 02:45:11 -------- d-----w- c:\users\tibi\appdata\roaming\Registry Mechanic
2010-10-12 02:21:20 37336 ----a-w- c:\windows\system32\CleanMFT32.exe
2010-10-12 02:21:20 212992 ----a-w- c:\windows\system32\UniBoxVB12.ocx
2010-10-12 02:21:20 1101824 ----a-w- c:\windows\system32\UniBox210.ocx
2010-10-12 02:21:19 880640 ----a-w- c:\windows\system32\UniBox10.ocx
2010-10-12 02:21:19 658432 ----a-w- c:\windows\system32\MSCOMCT2.OCX
2010-10-12 02:21:19 506368 ----a-w- c:\windows\system32\msxml.dll
2010-10-12 02:21:10 -------- d-----w- c:\program files\common files\PC Tools
2010-10-12 02:12:57 -------- d-----w- C:\New folder
2010-10-11 02:38:24 -------- d-----w- c:\users\tibi\appdata\local\Sunbelt Software
2010-10-11 01:40:37 -------- d-----w- c:\users\tibi\appdata\roaming\AVP 2009
2010-10-10 14:19:59 -------- d-----w- c:\progra~2\Update
2010-10-10 02:18:38 -------- d-----w- C:\Ross-Tech
2010-10-09 06:22:31 6084944 ----a-w- c:\progra~2\microsoft\windows defender\definition updates\{12ae7a78-e06c-4f15-b0d6-e1df1dd8a3ef}\mpengine.dll
2010-10-07 00:46:50 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-10-07 00:46:13 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-10-07 00:45:34 -------- d-----w- c:\users\tibi\appdata\roaming\DAEMON Tools Lite
2010-10-07 00:45:30 -------- d-----w- c:\progra~2\DAEMON Tools Lite
2010-10-07 00:35:48 -------- d-----w- c:\progra~2\Rosetta Stone
2010-10-07 00:34:59 -------- d-----w- c:\progra~2\RosettaStoneLtdBackup
2010-10-07 00:31:06 -------- d-----w- c:\program files\common files\Macrovision Shared
2010-10-07 00:30:32 -------- d-----w- c:\program files\Rosetta Stone
2010-10-07 00:25:18 -------- d-----w- c:\program files\dotnetfx
2010-10-07 00:25:14 18944 ----a-r- c:\users\tibi\appdata\roaming\microsoft\installer\{8f018a9e-56de-4a79-a5ef-25f413f1d538}\IconBB6A16301.exe

==================== Find3M ====================

2010-07-29 06:30:49 197632 ----a-w- c:\windows\system32\ir32_32.dll
2010-07-29 06:30:34 82944 ----a-w- c:\windows\system32\iccvid.dll

============= FINISH: 20:09:23.58 ===============

 

attach.txt

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_10-10-10.03)


==== Disk Partitions =========================


==== Disabled Device Manager Items =============

==== System Restore Points ===================

No restore point in system.

==== Installed Programs ======================

µTorrent
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 9.2
Atheros Driver Installation Program
Bejeweled 2 Deluxe
Blackhawk Striker 2
Compatibility Pack for the 2007 Office system
Faerie Solitaire
FATE Undiscovered Realms
Google Update Helper
Hotfix for Office (KB975927)
Intel(R) Graphics Media Accelerator Driver
Intel® Matrix Storage Manager
Java(TM) 6 Update 14
Junk Mail filter update
Microsoft .NET Framework 4 Client Profile
Microsoft Application Error Reporting
Microsoft Choice Guard
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office Excel MUI (English) 2007
Microsoft Office Home and Student 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Suite Activation Assistant
Microsoft Office Word MUI (English) 2007
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Works
Mozilla Firefox (3.6.10)
MSVCRT
Mystery P.I. - The Vegas Heist
Polar Bowler
Quickbooks Financial Center
Realtek Ethernet Controller Driver For Windows Vista and Later
Realtek High Definition Audio Driver
Realtek USB 2.0 Card Reader
Registry Mechanic 10.0
Rosetta Stone Version 3
Skype Launcher
Skype Toolbars
Skypeâ„¢ 4.2
Synaptics Pointing Device Driver
Toshiba Application and Driver Installer
TOSHIBA Assist
TOSHIBA ConfigFree
TOSHIBA eco Utility
TOSHIBA Flash Cards Support Utility
TOSHIBA HDD Protection
TOSHIBA HDD/SSD Alert
TOSHIBA Media Controller
Toshiba Online Backup
TOSHIBA PC Health Monitor
TOSHIBA Quality Application
TOSHIBA Recovery Media Creator
TOSHIBA ReelTime
TOSHIBA Supervisor Password
TOSHIBA USB Sleep and Charge Utility
TOSHIBA Value Added Package
TOSHIBA Web Camera Application
ToshibaRegistration
Update for Microsoft Office Word 2007 (KB974631)
Utility Common Driver
VCDS-Lite 1.0
VCDS Release 10.6.1
Virtual Families
Virtual Villagers - The Secret City
Visual C++ 2008 x86 Runtime - (v9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01
VLC media player 1.0.1
Webroot Software
WildTangent Games
WildTangent ORB Game Console
Winamp
Windows Driver Package - Ross-Tech USB Driver Package (06/16/2010 2.06.02)
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live ID Sign-in Assistant
Windows Live Mail
Windows Live Messenger
Windows Live Movie Maker
Windows Live Photo Gallery
Windows Live Sync
Windows Live Upload Tool
Windows Live Writer
WinZip 14.5
Yahoo! Messenger
Yahoo! Software Update

==== End Of File ===========================

 

Dear broni

Thanx for the fast analisys of my post. The problem is that because I dont have an admin right on my os I can not install any kind of av. The only thing I could install was a program called "emsisoft" that made my pc usable again. It cleand my os so I can use my laptop. But still dont have admin rights and i can not install AV. I even tried to download an av on a flash drive using a diffrent computer and rename the exe.
still no success.

Thanx

Tibi

 

Broni

It happened indeed because of the infection. The virus I have came whileI had kaspersky installed. I lost protection than admin rights than restore point and now even the sys restore is "turned off by the admin ".
I have to find a way of killing the virus and take back my admin rights.

 

avira anti virus

Downloaded and tryed to run and it says the following: "C\program files\avira\antivirdesktop\avscanexe cannot be found or has been modified or destriyed "

 

rkill.exe

This log file is located at C:\rkill.log.
Please post this only if requested to by the person helping you.
Otherwise you can close this log when you wish.
Ran as tibi on 10/18/2010 at 22:34:33.


Services Stopped:


Processes terminated by Rkill or while it was running:


\\.\globalroot\Device\svchost.exe\svchost.exe
C:\windows\system32\DllHost.exe
C:\windows\system32\DllHost.exe
C:\Users\tibi\Downloads\rkill.exe


Rkill completed on 10/18/2010 at 22:34:53.
----------------------------------------------------------------------
exehelperlog

exeHelper by Raktor
Build 20100414
Run at 22:28:41 on 10/18/10
Now searching...
exeHelper by Raktor
Build 20100414
Run at 22:29:37 on 10/18/10
Now searching...
Checking for numerical processes...
Checking for sysguard processes...
Checking for bad processes...
Checking for bad files...
Checking for bad registry entries...
Resetting filetype association for .exe
Resetting filetype association for .com
Resetting userinit and shell values...
Resetting policies...
--Finished--

 

combofix started, restarted win, tried to make restore point but access was denied and tried to scan sys but same...acces was denied

 

It says the same thing in safe mode. Acces is denied.

 

I have a netbook so i dont have a cd drive)