Results from 8 Steps - Help please

[bamfordjf]

Antivirus software found nothing.
Superantispyware found nothing.

Here are the logs:

View attachment mbam-log-2009-04-07 (01-44-11).txt

View attachment hijackthis.log

 

[MMDominator88]

is your computer still acting up? as in...does it still behave adversely after performing all of our 8 step program?

 

[Bobbye]

The System Restore points have malware, so do NOT use the System Restore feature. When the ysstem is clean, we will have you set a new, clean restore point and remove the old ones.

Step 3 on the Virus and Malware Removal says to temporarily disable RealTime Programs but you didn't:

C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray

SPY SWEEPER

* Open Spy Sweeper and click on Options > Program Options and uncheck "load at windows startup".
* On the left click "shields" and then uncheck everything there.
* Uncheck "home page shield".
* Uncheck "automatically restore default without notification".
* Exit the program.
* (When we are done, you can re-enable it using the same steps but this time reverse them.)

On the BSOD thread, when your attention was brought to the P2P program Bittorrent, you said:

I already deleted it, after reading more of the forums.

However it is still on the system and is loading on boot:

Remove bad HijackThis entries
• Run HijackThis
• Click on the System Scan Only button
• Put a check beside all of the items listed below (if present):

C:\Program Files\DNA\btdna.exe>> btdna.exe is the BitTorrent peer-to-peer content distribution network
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"

(Please see this section in Step 3: Uninstall File Sharing/P2P Programs

The following need to be taken off of Global Startup:
Check to HijackThis to remove:

O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Updates from HP.lnk = C:\Program Files\Updates from HP\9972322\Program\Updates from HP.exe

Not only do they need to come off Global Startup, none of the need to be on the Startup menu as none need to start on boot and run in the ebackground

Have HijackThis remove the following:

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present

• Close all open windows and browsers/email, etc...
• Click on the "Fix Checked" button
• When completed, Boot into Safe Mode:

Start> Run> msconfig> enter> Selective Startup> Startup tab> UNCHECK each of the following:

All BitTorrent related entries
reader_sl.exe and any other Adobe Reader entries
HP Digital Imaging Monitor> hpqtra08.exe
Updates from HP
Apply> OK

Control Panel> Add/Remove programs> UNINSTALL all Bit Torrent entries

Reboot into Normal Mode> NOTE: you will get a nag message that you can ignore and close after checking 'don't show this message again.' Stay in Selective Startup.

Rescan wit HijackThis and attach new log.

I am also with the member who asked what problems you are still having.