Run a dll as an App error

OK that Log is OK. Good job!

Have been busy.

Have friends and relatives over for Dinner.

Will be back later this evening to post cleanup steps for those old Virus scanners etc!

After cleaning with all the other tools and removing several issues an Avast Scan may be successful now if not we need to reinstall Avast!

For now I think all you need to scan is the OS drive c:

Mike

ok that's nice, enjoy your dinner, i reinstalled avast anyways cause i was removing all the tools i didn't need. so far i had to reboot cause it found a virus in the memory so it's doing that now.

I did not mean to confuse you- perhaps Mike was going to do this later on. We do things differently.

In order to remove Norton completely, you should use the Norton Removal Tool:
http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2005033108162039

About the Trusted Zone: Here is the description of this zone from Microsoft:

It would help you to read about the different zones for security settings:
http://support.microsoft.com/kb/174360

The main thing to know is that any sites in the Trusted Zone are not subject to most of the security settings in your browser. No site actually needs to be put in the Trusted Zone, although you may get emails saying something like 'please put us in the Trusted Zone to be sure your get the newsletter' (or whatever). It's because these senders know the security is low and it's easier to get junk through to your system.

Music Match is a digital music player, at one time, incorporating the MMJukebox. There is no reason to allow any music match files on your system with less security. I have nothing in the Trusted Zone.

To change: For your safety.
Control Panel> Internet Options> Security tab> Trusted Zone> Sites> highlight and remove MusicMatch> Apply> OK.

Mike, please take a look at the # of bytes on the last Combofix log. He is adding bytes.

D/L RegSeeker http://www.hoverdesk.net/freeware.htm

See this Link Q5 remove Norton, use in addition to above! [http://www.techspot.com/vb/post742832-6.html

Once the Q5 operation is finished run RegSeeker click Find in Registry and find and delete
1st norton
2nd symantec
3rd symevent

Then click Clean the Registry check all boxes and delete all found!

Last do a Windows disk search for
1st norton*.*
2nd syman*.*
3rd symeven*.*
Delete all found.

This is enough for one post so when finished....

Get back and we will do the others.

Mike

ok i finally got the scan completed, it had to run at boot up, and it found a ton of trojans, some of them dealing wit the rundll32.exe but i don't have a log file of them. so what so i need t do next? and i'll take mmjukebox off of the trusted sites now

Just to confirm run quickscans with MBAM and SAS!
Then HJT

Post all logs!

To remove AVG download and run the below:

AVG remover and run: http://www.grisoft.cz/filedir/util/avg_arm_sup_____.dir/avgremover.exe

Download extract and run Kleaner http://support.kaspersky.com/downloads/products2009/avg8.zip

Then do a Windows disk search for
1st avg7*.*
2nd avg8*.*
3rd grisoft*.*
Delete all found.

run RegSeeker click Find in Registry and find and delete
1st avg7
2nd avg8
3rd grisoft

Then click Clean the Registry check all boxes and delete all found!

Mike

Mike, why do you want him to download yet another Registry Cleaner? I am at a loss as to why you have users download and run so many extra programs. Eventually, the system can become overloaded. I accept the fact the we do things differently, but this is something I've asked you about since you first began posting here.

I am so sorry you are at a loss!

But yes he could and should uninstall these 3rd rate programs.

None had the "Find in registry" function that RegSeeker had that we needed! And RegSeeker is one of the best!

Mike

I'm glad you are in agreement. Perhaps you should tell the user to uninstall the 3 Registry programs before adding another. It doesn't matter whether they are good or bad, they are on the hard drive and loading on startup, meaning the RAM is being used.

I second this recommendation of Bobbye... Only one, and probably not any of those listed.
We often find that a "slow" computer is junked up with too much of those sorts of downloads, while doing nothing useful.

ok so i tried to uninstall sunbelt counterspy, registry easy, regcure and registry defense, but i seem to still have files all over the place for them and counterspy is still starting up and running. what should i do? i tried using registry seeker to remover sunbelt but it kind yells at me in like german or somethin. lol

You will need to stop the programs from starting up in order to uninstall them:

Start> Run> type in msconfig s> Selective Start-up> Startup tab> uncheck the processes for these programs> Apply> OK.

Reboot> NOTE: you will get a nag message that you can ignore and lose after checking 'don't show this message again'. Stay in Selective Startup.comes up after checking 'don't show this message again'.

Now do the uninstall in the Control Panel> Add/Remove Programs.

If you still get errors when uninstalling, boot into Safe Mode, then follow the directions.

You mean RegSeeker worked for AVG but not for these?

After properly uninstalling use RegSeeker to search for
RegCure
Registry Easy
Registry Defense

Then use windows search for
RegCure*.*

Registr*.* (But on this one only choose and delete the ones that are clearly Registry Easy or Registry defense, not everthing ).

Mike

well.... something went horribly wrong along the way and now i can't start up my computer. ii tried to reinstall the missing file, but idk much about commad prompt. the missing or corrupt file was at WINDOWS\SYSTEM32\config\WINDOWS i believe. but like i said, i let my friend borrow my CD like an ***** and i can't start my computer or reinstall the OS w/o the product key. idk to do, i downloaded WinXP on my gf computer and burned a copy of the disc, but... i need help again

Again did all the steps in post #26 succeed?

Did the problem begin when you started with ReCure and the other reg cleaners etc?

But your Registry is now trashed!

As the computer boots hit F8 to get the "Windows Advanced Boot menu" (location of Safe Mode entry) from here choose , "Last known good configuration"! Knock on wood cross fingers!

Mike

failure, that didn't work i had already tried that and reinstall the OS requires the product key, which i don't have. so does anyone have any idean how to reinstall the files w/o formatting or reinstalling the entire OS?

sorry i forgot to answer your question, yeah i did all the steps in #26, got rid off all the avg and grisoft, but somhow an important registry key. btw i'm on my ps3 an di have a flash drive if any of that can help me

You NEED the product key, and you NEED an install disk unless you have advanced tech skills... which you obviously do not have since you are asking the questions you asked.

Maybe mflynn will come back and rescue you. There is a good chance your system will crash with all the programs that were added.

Sorry late getting back, had to work out of the office today!

OK you have an XP cd so you have all you need to fix this. But you have some work to do!

Go here: http://ubcd4win.com/

Down load and build this CD!

Download and use: http://www.imgburn.com/index.php?act=download

To burn the ISO to a bootable cd.

But from CD (this cd does not boot from HD but from the actual CD and a RAM drive).

Once booted click Start-Registry-Restore registry. Choose date before this happend!

I will be here to help but it may be mid afternoon before i return. Just go slowly and reed the instructions and it is not as hard as it may look!

Mike