Taskbar Freezes on Startup

[ChocolateBabe]

I am running Windows XP Professional.

When I start up my computer, the taskbar at the bottom of the screen freezes. This means that I can't access the quick launch, start menu or anything that has been minimized. If I wait about 15-20 minutes, eventually the taskbar will unfreeze and all my regular programs that are scheduled to open on startup (such as windows live messenger) will open. Then the computer is fine to use until you have to start it up again.

I have been putting up with this problem for a few weeks now. I am getting very annoyed and can't seem to find a solution on Google. I thought that the problem might be due to a virus. I have been running Avast Antivirus since I first got the computer, and it hasn't alerted me about anything suspicious since the problem has arisen. I also installed Malwarebytes, just to be sure, but it didn't find anything.

I ran the System Configuration Utility and disabled all startup software but the problem persisted when I restarted my computer. After it loaded up, I went back into the System Config Utility and found that there were 4 programs that were enabled again. They were:

- my antivirus user interface (avastUI.exe)
- something in the C:\Windows folder (asuzoxujesazu.dll)
- something in the C:\Windows folder (zreshead.dll)
- ctfmon.exe

I can post a HiJackThis log if the problem is difficult to source.

Note: I would prefer not to have to reinstall Windows.

Any help would be greatly appreciated Thank you!

[SuperDave]

Hello  and welcome to Computer Hope Forum. My name is Dave. I will be helping you out with your particular problem on your computer. I am working under the guidance of one of the specialist of this forum so it may take a bit longer to process your logs.

1. I will be working on your Malware issues. This may or may not solve other issues you have with your machine.
2. The fixes are specific to your problem and should only be used for this issue on this machine.
3. If you don't know or understand something, please don't hesitate to ask.
4. Please DO NOT run any other tools or scans while I am helping you.
5. It is important that you reply to this thread. Do not start a new topic.
6. Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
7. Absence of symptoms does not mean that everything is clear.

SUPERAntiSpyware

If you already have SUPERAntiSpyware be sure to check for updates before scanning!

Download SuperAntispyware Free Edition (SAS)
* Double-click the icon on your desktop to run the installer.
* When asked to Update the program definitions, click Yes
* If you encounter any problems while downloading the updates, manually download and unzip them from here
* Next click the Preferences button.

•Under Start-Up Options uncheck Start SUPERAntiSpyware when Windows starts
* Click the Scanning Control tab.
* Under Scanner Options make sure only the following are checked:

•Close browsers before scanning
•Scan for tracking cookies
•Terminate memory threats before quarantining
•Please leave the others unchecked

•Click the Close button to leave the control center screen.

* On the main screen click Scan your computer
* On the left check the box for the drive you are scanning.
* On the right choose Perform Complete Scan
* Click Next to start the scan. Please be patient while it scans your computer.
* After the scan is complete a summary box will appear. Click OK
* Make sure everything in the white box has a check next to it, then click Next
* It will quarantine what it found and if it asks if you want to reboot, click Yes

•To retrieve the removal information please do the following:
•After reboot, double-click the SUPERAntiSpyware icon on your desktop.
•Click Preferences. Click the Statistics/Logs tab.

•Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.

•It will open in your default text editor (preferably Notepad).
•Save the notepad file to your desktop by clicking (in notepad) File > Save As...

* Save the log somewhere you can easily find it. (normally the desktop)
* Click close and close again to exit the program.
*Copy and Paste the log in your post.

===========================

Download ComboFix by sUBs from one of the below links. 

Important! You MUST save ComboFix to your desktop

link # 1
Link # 2

Temporarily disable your Anti-virus and any Antispyware real time protection before performing a scan. Click this link to see a list of security programs that should be disabled and how to disable them.

Double click on ComboFix.exe & follow the prompts.

Vista users Right-Click on ComboFix.exe and select Run as administrator (you will receive a UAC prompt, please allow it)

Do not mouse-click ComboFix's window while it is running. That may cause it to stall.

When the scan completes it will open a text window.
 
Post the contents of that log in your next reply.

Remember to re-enable your Anti-virus and Antispyware protection when ComboFix is complete.

[kristain]

Deleted.

[Allan]

Ignore the post from Kristain and just follow SuperDave's instructions and advice.

[ChocolateBabe]

This is the log file for ComboFix. I need to wait a while to do the SuperantiSpyware Scan because my computer isn't fully loaded yet.


ComboFix 10-06-17.03 - Bek Roxx 06/19/2010  10:33:03.1.2 - x86
Microsoft Windows XP Professional  5.1.2600.3.1252.61.1033.18.1023.574 [GMT 10:00]
Running from: c:\documents and settings\Bek Roxx\Desktop\ComboFix.exe
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.

(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Bek Roxx\Local Settings\Application Data\{4506B1C9-55F5-48B6-99F8-14B2D9AB5437}
c:\documents and settings\Bek Roxx\Local Settings\Application Data\{4506B1C9-55F5-48B6-99F8-14B2D9AB5437}\chrome.manifest
c:\documents and settings\Bek Roxx\Local Settings\Application Data\{4506B1C9-55F5-48B6-99F8-14B2D9AB5437}\chrome\content\_cfg.js
c:\documents and settings\Bek Roxx\Local Settings\Application Data\{4506B1C9-55F5-48B6-99F8-14B2D9AB5437}\chrome\content\overlay.xul
c:\documents and settings\Bek Roxx\Local Settings\Application Data\{4506B1C9-55F5-48B6-99F8-14B2D9AB5437}\install.rdf
c:\program files\DaemonTools_WhenUSave_Installer
c:\windows\asuzoxujesazu.dll
c:\windows\system32\win.com

.
(((((((((((((((((((((((((   Files Created from 2010-05-19 to 2010-06-19  )))))))))))))))))))))))))))))))
.

2010-06-16 07:31 . 2008-04-13 18:42   181248   ----a-w-   C:\asuzoxujesazu.dll
2010-06-14 08:46 . 2010-06-14 08:46   --------   d-----w-   c:\documents and settings\All Users\Application Data\NVIDIA Corporation
2010-06-14 08:46 . 2010-06-14 08:47   --------   d-----w-   c:\program files\NVIDIA Corporation
2010-06-14 08:43 . 2010-04-03 22:55   61440   ----a-w-   c:\windows\system32\OpenCL.dll
2010-06-14 08:43 . 2010-04-03 22:55   11647592   ----a-w-   c:\windows\system32\nvcompiler.dll
2010-06-14 01:08 . 2010-06-14 01:08   63488   ----a-w-   c:\documents and settings\Bek Roxx\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll
2010-06-14 01:08 . 2010-06-14 01:08   52224   ----a-w-   c:\documents and settings\Bek Roxx\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
2010-06-14 01:08 . 2010-06-14 01:08   117760   ----a-w-   c:\documents and settings\Bek Roxx\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
2010-06-14 01:07 . 2010-06-14 01:07   --------   d-----w-   c:\documents and settings\Bek Roxx\Application Data\SUPERAntiSpyware.com
2010-06-14 01:07 . 2010-06-14 01:07   --------   d-----w-   c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
2010-06-14 01:06 . 2010-06-14 01:06   --------   d-----w-   c:\program files\SUPERAntiSpyware
2010-06-07 09:27 . 2010-06-07 09:27   74712   ----a-w-   c:\documents and settings\Bek 2\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-06-06 21:59 . 2010-05-06 20:33   19024   ----a-w-   c:\windows\system32\drivers\aswFsBlk.sys
2010-06-06 20:57 . 2010-06-06 20:57   --------   d-----w-   c:\documents and settings\Bek Roxx\Application Data\InstallShield
2010-06-05 06:06 . 2010-06-05 06:06   --------   d-----w-   C:\PFiles
2010-06-05 00:30 . 2004-08-18 08:34   442368   ----a-r-   c:\windows\system32\vp6vfw.dll
2010-06-04 09:08 . 2010-06-04 09:08   --------   d-----w-   c:\documents and settings\Bek Roxx\Local Settings\Application Data\LogiShrd
2010-06-04 09:07 . 2010-06-04 09:07   --------   d-----w-   c:\documents and settings\Bek Roxx\Application Data\Leadertech
2010-06-04 09:05 . 2010-06-04 09:05   --------   d-----w-   c:\program files\Common Files\LogiShrd
2010-06-04 09:05 . 2010-06-04 09:13   --------   d-----w-   c:\documents and settings\All Users\Application Data\LogiShrd
2010-06-04 07:40 . 2008-04-13 14:15   60032   -c--a-w-   c:\windows\system32\dllcache\usbaudio.sys
2010-06-04 07:40 . 2008-04-13 14:15   60032   ----a-w-   c:\windows\system32\drivers\USBAUDIO.sys
2010-06-04 07:40 . 2008-04-13 14:15   32128   -c--a-w-   c:\windows\system32\dllcache\usbccgp.sys
2010-06-04 07:40 . 2008-04-13 14:15   32128   ----a-w-   c:\windows\system32\drivers\usbccgp.sys
2010-06-03 10:31 . 2010-06-07 07:22   --------   d-----w-   c:\documents and settings\Bek Roxx\Local Settings\Application Data\Adobe
2010-06-03 08:26 . 2010-06-13 08:06   --------   d-----w-   c:\program files\DAEMON Tools
2010-06-03 08:20 . 2010-06-03 08:45   691696   ----a-w-   c:\windows\system32\drivers\sptd.sys
2010-06-03 07:44 . 2010-06-04 07:00   496   ----a-w-   c:\windows\eReg.dat
2010-06-03 07:44 . 1999-04-02 06:37   33792   ----a-r-   c:\windows\NPSExec.exe
2010-06-03 07:44 . 2010-06-03 07:44   --------   d-----w-   c:\program files\Electronic Arts
2010-06-03 07:38 . 2010-06-03 07:38   --------   d-----w-   c:\documents and settings\Bek Roxx\WINDOWS

.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-06-19 00:23 . 2010-05-17 09:52   --------   d-----w-   c:\documents and settings\All Users\Application Data\avg9
2010-06-18 23:47 . 2010-05-19 06:40   120   ----a-w-   c:\windows\Jwozinuresiqaquz.dat
2010-06-18 23:47 . 2010-05-19 06:40   0   ----a-w-   c:\windows\Ufakodulipor.bin
2010-06-18 11:38 . 2010-03-18 07:49   --------   d-----w-   c:\documents and settings\Bek Roxx\Application Data\vlc
2010-06-15 11:32 . 2010-05-03 07:32   --------   d-----w-   c:\program files\Windows Live Safety Center
2010-06-15 06:38 . 2010-04-27 08:44   --------   d---a-w-   c:\documents and settings\All Users\Application Data\TEMP
2010-06-08 06:51 . 2010-04-06 05:44   42   ----a-w-   c:\documents and settings\Bek Roxx\jagex_runescape_preferences.dat
2010-06-08 06:51 . 2010-04-06 05:46   41   ----a-w-   c:\documents and settings\Bek Roxx\jagex__preferences3.dat
2010-06-08 06:51 . 2010-04-06 05:46   87   ----a-w-   c:\documents and settings\Bek Roxx\jagex_runescape_preferences2.dat
2010-06-06 20:57 . 2010-04-15 21:24   --------   d-----w-   c:\program files\Common Files\DVDVideoSoft
2010-06-04 09:07 . 2010-03-15 03:06   --------   d-----w-   c:\program files\Logitech
2010-06-04 07:42 . 2010-03-16 08:34   --------   d-----w-   c:\program files\Paint.NET
2010-06-03 06:52 . 2010-05-17 09:55   242896   ----a-w-   c:\windows\system32\drivers\avgtdix.sys
2010-06-03 06:52 . 2010-05-17 09:54   29584   ----a-w-   c:\windows\system32\drivers\avgmfx86.sys
2010-05-20 06:35 . 2010-04-09 05:03   --------   d-----w-   c:\program files\Common Files\Adobe
2010-05-17 09:55 . 2010-05-17 09:55   12464   ----a-w-   c:\windows\system32\avgrsstx.dll
2010-05-17 09:54 . 2010-05-17 09:54   216200   ----a-w-   c:\windows\system32\drivers\avgldx86.sys
2010-05-17 09:52 . 2010-05-17 09:52   --------   d-----w-   c:\program files\AVG
2010-05-16 09:11 . 2010-05-16 09:11   388096   ----a-r-   c:\documents and settings\Bek Roxx\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2010-05-16 09:11 . 2010-05-16 09:11   --------   d-----w-   c:\program files\Trend Micro
2010-05-16 07:53 . 2010-05-16 07:53   --------   d-----w-   c:\documents and settings\Bek Roxx\Application Data\Malwarebytes
2010-05-16 07:53 . 2010-05-16 07:53   --------   d-----w-   c:\program files\Malwarebytes' Anti-Malware
2010-05-16 07:53 . 2010-05-16 07:53   --------   d-----w-   c:\documents and settings\All Users\Application Data\Malwarebytes
2010-05-16 06:50 . 2010-05-03 07:34   --------   d-----w-   c:\documents and settings\Bek Roxx\Application Data\PC Suite
2010-05-16 06:34 . 2010-05-16 06:34   20   ----a-w-   c:\documents and settings\Bek Roxx\Application Data\qvjsge.dat
2010-05-14 23:33 . 2010-03-22 07:35   --------   d-----w-   c:\program files\iPod Explorer
2010-05-14 23:33 . 2010-05-14 22:48   --------   d-----w-   c:\program files\Common Files\ArmDic
2010-05-14 23:33 . 2010-05-14 22:48   --------   d-----w-   c:\program files\GIF to AVI SWF Converter
2010-05-14 08:03 . 2010-04-13 21:07   --------   d-----w-   c:\documents and settings\Bek Roxx\Application Data\dvdcss
2010-05-10 07:15 . 2010-05-10 07:15   --------   d-----w-   c:\program files\YouTube Downloader
2010-05-09 08:46 . 2010-05-09 08:46   --------   d-----w-   c:\documents and settings\All Users\Application Data\Screaming Bee
2010-05-09 08:46 . 2010-05-09 08:39   --------   d-----w-   c:\program files\Screaming Bee
2010-05-09 08:43 . 2010-05-09 08:43   --------   d-----w-   c:\documents and settings\Bek Roxx\Application Data\Screaming Bee
2010-05-09 08:32 . 2010-05-09 08:32   --------   d-----w-   c:\program files\delaydots
2010-05-07 23:36 . 2010-04-27 08:43   --------   d-----w-   c:\program files\Alice Greenfingers 2
2010-05-06 20:59 . 2010-03-15 02:50   38848   ----a-w-   c:\windows\system32\avastSS.scr
2010-05-06 20:59 . 2010-03-15 02:50   165032   ----a-w-   c:\windows\system32\aswBoot.exe
2010-05-06 20:39 . 2010-03-15 02:50   46672   ----a-w-   c:\windows\system32\drivers\aswTdi.sys
2010-05-06 20:39 . 2010-03-15 02:50   164048   ----a-w-   c:\windows\system32\drivers\aswSP.sys
2010-05-06 20:34 . 2010-03-15 02:50   23376   ----a-w-   c:\windows\system32\drivers\aswRdr.sys
2010-05-06 20:33 . 2010-03-15 02:50   100432   ----a-w-   c:\windows\system32\drivers\aswmon2.sys
2010-05-06 20:33 . 2010-03-15 02:50   94800   ----a-w-   c:\windows\system32\drivers\aswmon.sys
2010-05-06 20:33 . 2010-03-15 02:50   28880   ----a-w-   c:\windows\system32\drivers\aavmker4.sys
2010-05-06 10:41 . 2010-05-06 10:41   --------   d-----w-   c:\documents and settings\LocalService\Application Data\CyberLink
2010-05-06 10:30 . 2010-05-06 10:30   --------   d-----w-   c:\documents and settings\All Users\Application Data\agi
2010-05-04 09:58 . 2010-03-18 06:20   74712   ----a-w-   c:\documents and settings\Bek Roxx\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-05-04 09:58 . 2010-05-04 09:58   --------   d-----w-   c:\documents and settings\All Users\Application Data\CyberLink
2010-05-04 09:58 . 2010-05-04 09:58   --------   d-----w-   c:\documents and settings\Bek Roxx\Application Data\CyberLink
2010-05-04 09:57 . 2010-03-15 02:36   --------   d--h--w-   c:\program files\InstallShield Installation Information
2010-05-04 09:56 . 2010-05-04 09:50   --------   d-----w-   c:\program files\CyberLink
2010-05-04 09:55 . 2010-05-04 09:55   --------   d-----w-   c:\program files\SmartSound Software
2010-05-04 09:55 . 2010-05-04 09:55   --------   d-----w-   c:\documents and settings\All Users\Application Data\SmartSound Software Inc
2010-05-04 09:54 . 2010-03-15 02:36   --------   d-----w-   c:\program files\Common Files\InstallShield
2010-05-03 08:02 . 2010-05-03 08:02   0   ---ha-w-   c:\windows\system32\drivers\Msft_User_PCCSWpdDriver_01_07_00.Wdf
2010-05-03 08:02 . 2010-05-03 08:02   0   ---ha-w-   c:\windows\system32\drivers\MsftWdf_user_01_07_00.Wdf
2010-05-03 08:01 . 2010-05-03 07:34   --------   d-----w-   c:\documents and settings\All Users\Application Data\PC Suite
2010-05-03 07:35 . 2010-05-03 07:34   --------   d-----w-   c:\documents and settings\Bek Roxx\Application Data\Nokia
2010-05-03 07:32 . 2010-05-03 07:31   --------   d-----w-   c:\program files\DIFX
2010-05-03 07:31 . 2010-05-03 07:31   --------   d-----w-   c:\program files\Common Files\PCSuite
2010-05-03 07:31 . 2010-05-03 07:31   --------   d-----w-   c:\program files\Common Files\Nokia
2010-05-03 07:31 . 2010-05-03 07:31   --------   d-----w-   c:\program files\Nokia
2010-05-03 07:31 . 2010-05-03 07:31   --------   d-----w-   c:\program files\PC Connectivity Solution
2010-05-03 07:30 . 2010-05-03 07:30   95232   ----a-w-   c:\documents and settings\All Users\Application Data\Installations\{19DC9559-9C20-4A46-A67D-7ECBA52A2788}\Installer\CommonCustomActions\pcswpcsi.exe
2010-05-03 07:30 . 2010-05-03 07:30   61440   ----a-w-   c:\documents and settings\All Users\Application Data\Installations\{19DC9559-9C20-4A46-A67D-7ECBA52A2788}\Installer\CommonCustomActions\UninstPCSFEMsi.exe
2010-05-03 07:30 . 2010-05-03 07:30   10240   ----a-w-   c:\documents and settings\All Users\Application Data\Installations\{19DC9559-9C20-4A46-A67D-7ECBA52A2788}\Installer\CommonCustomActions\UninstPCS.exe
2010-05-03 07:30 . 2010-05-03 07:30   8192   ----a-w-   c:\documents and settings\All Users\Application Data\Installations\{19DC9559-9C20-4A46-A67D-7ECBA52A2788}\Installer\CommonCustomActions\UninstCCD.exe
2010-05-03 07:30 . 2010-05-03 07:30   --------   d-----w-   c:\documents and settings\All Users\Application Data\Installations
2010-05-03 07:27 . 2010-05-03 07:30   34399664   ----a-w-   c:\documents and settings\All Users\Application Data\Installations\{19DC9559-9C20-4A46-A67D-7ECBA52A2788}\Nokia_PC_Suite_eng_web.exe
2010-05-02 07:31 . 2010-03-18 07:20   --------   d-----w-   c:\documents and settings\Bek Roxx\Application Data\Apple Computer
2010-05-02 07:31 . 2010-03-18 07:12   --------   d-----w-   c:\documents and settings\All Users\Application Data\Apple
2010-04-29 05:39 . 2010-05-16 07:53   38224   ----a-w-   c:\windows\system32\drivers\mbamswissarmy.sys
2010-04-29 05:39 . 2010-05-16 07:53   20952   ----a-w-   c:\windows\system32\drivers\mbam.sys
2010-04-25 06:53 . 2010-04-25 06:53   323624   ----a-w-   c:\windows\system32\wiaaut.dll
2010-04-25 01:59 . 2010-04-25 01:59   --------   d-----w-   c:\program files\Virtual Villagers 4 - The Tree of Life
2010-04-23 22:44 . 2010-04-23 22:44   --------   d-----w-   c:\documents and settings\Bek Roxx\Application Data\uTorrent
2010-04-22 07:12 . 2010-04-22 07:12   --------   d-----w-   c:\documents and settings\Bek Roxx\Application Data\MPEG Streamclip
2010-04-04 06:01 . 2010-04-04 06:01   503808   ----a-w-   c:\documents and settings\Bek Roxx\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-2518df24-n\msvcp71.dll
2010-04-04 06:01 . 2010-04-04 06:01   499712   ----a-w-   c:\documents and settings\Bek Roxx\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-2518df24-n\jmc.dll
2010-04-04 06:01 . 2010-04-04 06:01   348160   ----a-w-   c:\documents and settings\Bek Roxx\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-2518df24-n\msvcr71.dll
2010-04-04 06:01 . 2010-04-04 06:01   61440   ----a-w-   c:\documents and settings\Bek Roxx\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-6b4a9b1d-n\decora-sse.dll
2010-04-04 06:01 . 2010-04-04 06:01   12800   ----a-w-   c:\documents and settings\Bek Roxx\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-6b4a9b1d-n\decora-d3d.dll
2010-04-04 06:01 . 2010-04-04 06:01   411368   ----a-w-   c:\windows\system32\deploytk.dll
2010-04-03 22:55 . 2010-03-15 02:44   600680   ----a-w-   c:\windows\system32\nvudisp.exe
2010-04-03 22:55 . 2009-04-30 11:02   6432128   ----a-w-   c:\windows\system32\nv4_disp.dll
2010-04-03 22:55 . 2009-04-30 11:02   4075520   ----a-w-   c:\windows\system32\nvcuda.dll
2010-04-03 22:55 . 2009-04-30 11:02   2646632   ----a-w-   c:\windows\system32\nvcuvenc.dll
2010-04-03 22:55 . 2009-04-30 11:02   227944   ----a-w-   c:\windows\system32\nvcodins.dll
2010-04-03 22:55 . 2009-04-30 11:02   227944   ----a-w-   c:\windows\system32\nvcod.dll
2010-04-03 22:55 . 2009-04-30 11:02   2183470   ----a-w-   c:\windows\system32\nvdata.bin
2010-04-03 22:55 . 2009-04-30 11:02   2030184   ----a-w-   c:\windows\system32\nvcuvid.dll
2010-04-03 22:55 . 2009-04-30 11:02   14757888   ----a-w-   c:\windows\system32\nvoglnt.dll
2010-04-03 22:55 . 2009-04-30 11:02   1097728   ----a-w-   c:\windows\system32\nvapi.dll
2010-04-03 22:55 . 2009-04-30 11:02   10232128   ----a-w-   c:\windows\system32\drivers\nv4_mini.sys
2010-04-03 09:23 . 2010-04-03 09:23   278120   ----a-w-   c:\windows\system32\nvmccs.dll
2010-04-03 09:23 . 2010-04-03 09:23   154216   ----a-w-   c:\windows\system32\nvsvc32.exe
2010-04-03 09:23 . 2010-04-03 09:23   145000   ----a-w-   c:\windows\system32\nvcolor.exe
2010-04-03 09:23 . 2010-04-03 09:23   13670504   ----a-w-   c:\windows\system32\nvcpl.dll
2010-04-03 09:22 . 2010-04-03 09:22   81920   ----a-w-   c:\windows\system32\nvwddi.dll
2010-04-02 06:54 . 2010-03-15 02:36   600680   ----a-w-   c:\windows\system32\NVUNINST.EXE
2010-03-24 18:17 . 2010-03-24 08:04   952768   ----a-w-   c:\documents and settings\All Users\Application Data\Adobe\Reader\9.3\ARM\10603\AdobeARM.exe
.

(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2010-06-07 2403568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-05-06 2815192]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-04-03 13670504]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 22:21   548352   ----a-w-   c:\program files\SUPERAntiSpyware\SASWINLO.DLL

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk
backup=c:\windows\pss\Adobe Gamma Loader.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Bek Roxx^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk]
path=c:\documents and settings\Bek Roxx\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk
backup=c:\windows\pss\OneNote 2007 Screen Clipper and Launcher.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-03-24 18:17   952768   ----a-w-   c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2009-12-21 15:57   35760   ----a-w-   c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG9_TRAY]
2010-06-03 06:52   2065248   ----a-w-   c:\progra~1\AVG\AVG9\avgtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BluetoothAuthenticationAgent]
2008-04-13 18:42   110592   ------w-   c:\windows\system32\bthprops.cpl

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
2008-04-13 18:42   15360   ----a-w-   c:\windows\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
2006-11-12 10:48   157592   ----a-w-   c:\program files\DAEMON Tools\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2010-03-18 06:58   135664   ----atw-   c:\documents and settings\Bek Roxx\Local Settings\Application Data\Google\Update\GoogleUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2006-10-26 13:47   31016   ----a-w-   c:\program files\Microsoft Office\Office12\GrooveMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2010-01-22 08:16   141608   ----a-w-   c:\program files\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Utility]
2004-03-03 09:50   19968   ------w-   c:\windows\LOGI_MWX.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Vid]
2009-07-16 05:35   5458704   ----a-w-   c:\program files\Logitech\Logitech Vid\Vid.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechQuickCamRibbon]
2009-10-14 03:36   2793304   ----a-w-   c:\program files\Logitech\Logitech WebCam Software\LWS.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-13 18:42   1695232   ------w-   c:\program files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
2009-07-26 05:44   3883856   ----a-w-   c:\program files\Windows Live\Messenger\msnmsgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
2009-11-11 00:57   1451520   ----a-w-   c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2009-11-10 12:08   417792   ----a-w-   c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
2009-12-25 07:50   18789408   ----a-w-   c:\windows\RTHDCPL.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2010-02-18 01:43   248040   ----a-w-   c:\program files\Common Files\Java\Java Update\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
2006-11-03 08:20   866584   ----a-w-   c:\program files\Windows Defender\MSASCui.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ywumafarip]
2008-04-13 18:42   54784   ----a-w-   c:\windows\zreshead.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\zBrowser Launcher]
2004-03-17 22:33   892928   ----a-w-   c:\program files\Logitech\iTouch\iTouch.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\BitLord\\BitLord.exe"=
"c:\\Program Files\\StarCraft II Beta\\StarCraft II.exe"=
"c:\\Program Files\\StarCraft II Beta\\Versions\\Base13891\\SC2.exe"=
"c:\\Documents and Settings\\Bek Roxx\\Desktop\\Games\\Warcraft III\\Warcraft III.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgnsx.exe"=
"c:\\Program Files\\Logitech\\Logitech Vid\\Vid.exe"=

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [3/15/2010 12:50 PM 164048]
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [5/17/2010 7:54 PM 216200]
R1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [5/17/2010 7:55 PM 242896]
R1 CbFs;CbFs;c:\windows\system32\drivers\cbfs.sys [3/22/2010 5:36 PM 140200]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [2/18/2010 4:25 AM 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [5/11/2010 4:41 AM 67656]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [6/7/2010 7:59 AM 19024]
R2 avg9wd;AVG Free WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [5/17/2010 7:53 PM 308064]
R3 SCREAMINGBDRIVER;Screaming Bee Audio;c:\windows\system32\drivers\ScreamingBAudio.sys [12/1/2009 3:49 PM 34384]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [6/3/2010 6:20 PM 691696]
S2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [11/3/2006 6:19 PM 13592]
.
Contents of the 'Scheduled Tasks' folder

2010-06-14 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 01:34]

2010-05-22 c:\windows\Tasks\Driver Robot.job
- c:\program files\Driver Robot\1.2.0.5\DriverRobot.exe [2010-03-15 03:10]

2010-06-18 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2052111302-436374069-725345543-1004Core.job
- c:\documents and settings\Bek Roxx\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-03-18 06:58]

2010-06-19 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2052111302-436374069-725345543-1004UA.job
- c:\documents and settings\Bek Roxx\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-03-18 06:58]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com.au/
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
DPF: CabBuilder - hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
DPF: {0067DBFC-A752-458C-AE6E-B9C7E63D4824} - hxxp://www.logitech.com/devicedetector/plugins/LogitechDeviceDetection32.cab
.
- - - - ORPHANS REMOVED - - - -

WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
HKLM-Run-Gravanuzehobiqob - c:\windows\asuzoxujesazu.dll
HKLM-Run-nwiz - nwiz.exe
HKLM-Run-NvMediaCenter - c:\windows\system32\NvMcTray.dll
MSConfigStartUp-NvMediaCenter - c:\windows\System32\NvMcTray.dll
MSConfigStartUp-nwiz - nwiz.exe
AddRemove-NVIDIA Display Control Panel - c:\program files\NVIDIA Corporation\Uninstall\nvuninst.exe



**************************************************************************
scanning hidden processes ... 

scanning hidden autostart entries ...

scanning hidden files ... 

scan completed successfully
hidden files:

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\WPAEvents]
@Denied: (Full) (LocalSystem)
"OOBETimer"=hex:ff,d5,71,d6,8b,6a,8d,6f,d5,33,93,fd
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(804)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
Completion time: 2010-06-19  10:36:46
ComboFix-quarantined-files.txt  2010-06-19 00:36

Pre-Run: 43,641,454,592 bytes free
Post-Run: 43,613,118,464 bytes free

WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn

- - End Of File - - A66BBF5E0D8B34F81F2FFBDA506D2E7C

[SuperDave]

You are running two Anti-Virus programs on your computer; avast! Antivirus and AVG Anti-Virus Free. One of them will have to be disabled. You should not run two AV's on your computer. It causes lots of problems.

Please go to Jotti's malware scan
(If more than one file needs scanned they must be done separately and links posted for each one)

* Copy the file path in the below Code box:

Code: [Select]

c:\windows\Jwozinuresiqaquz.dat
c:\windows\Ufakodulipor.bin
* At the upload site, click once inside the window next to Browse.
* Press Ctrl+V on the keyboard (both at the same time) to paste the file path into the window.
* Next click Submit file
* Your file will possibly be entered into a queue which normally takes less than a minute to clear.
* This will perform a scan across multiple different virus scanning engines.
* Important: Wait for all of the scanning engines to complete.
* Once the scan is finished, Copy and then Paste the link in the address bar into your next reply.

==========================

Download Disable/Remove Windows Messenger to the desktop to remove Windows Messenger.

Do not confuse Windows Messenger with MSN Messenger because they are not the same. Windows Messenger is a frequent cause of popups.

Unzip the file on the desktop. Open the MessengerDisable.exe and choose the bottom box - Uninstall Windows Messenger and click Apply.

Exit out of MessengerDisable then delete the two files that were put on the desktop.

==========================

P2P - I see you have P2P software installed on your machine. (BitLord) We are not here to pass judgment on file-sharing as a concept. However, we will warn you that engaging in this activity and having this kind of software installed on your machine will always make you more susceptible to re-infections. It is certainly contributing to your current situation.

Please note: Even if you are using a "safe" P2P program, it is only the program that is safe. You will be sharing files from uncertified sources, and these are often infected. The bad guys use P2P filesharing as a major conduit to spread their wares.

I would strongly recommend that you uninstall them, however that choice is up to you. If you choose to remove these programs, you can do so via Control Panel >> Add or Remove Programs.

[ChocolateBabe]

I followed your link to Jotti's malware scan.

Jwozinuresiqaquz.dat produced this page:
http://virusscan.jotti.org/en/scanresult/2a45ab379236f39836759b9
951146bd1594512df/ade4d136247a0468f5c8b64c4063c3ee0beafa43

Ufakodulipor.bin didn't scan because the scanner said it was 0 bytes.

Also, I have the results of the SuperAntiSpyware scan:

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 06/19/2010 at 11:26 AM

Application Version : 4.39.1002

Core Rules Database Version : 5063
Trace Rules Database Version: 2875

Scan type       : Complete Scan
Total Scan Time : 00:40:06

Memory items scanned      : 484
Memory threats detected   : 0
Registry items scanned    : 7249
Registry threats detected : 0
File items scanned        : 20216
File threats detected     : 41

Adware.Tracking Cookie
   C:\Documents and Settings\Bek Roxx\Cookies\bek roxx@atdmt[2].txt
   C:\Documents and Settings\Bek Roxx\Cookies\bek [email protected][2].txt
   C:\Documents and Settings\Bek Roxx\Cookies\bek roxx@serving-sys[1].txt
   C:\Documents and Settings\Bek Roxx\Cookies\bek roxx@cgi-bin[2].txt
   C:\Documents and Settings\Bek Roxx\Cookies\bek [email protected][1].txt
   .server.cpmstar.com [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   .server.cpmstar.com [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   www8.addfreestats.com [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   .doubleclick.net [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   .imrworldwide.com [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   .imrworldwide.com [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   .msnportal.112.2o7.net [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   .atdmt.com [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   .atdmt.com [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   .fastclick.net [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   ad.yieldmanager.com [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   .interclick.com [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   .interclick.com [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   .fastclick.net [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   .fastclick.net [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   ad.yieldmanager.com [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   .interclick.com [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   .collective-media.net [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   .collective-media.net [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   .tribalfusion.com [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   media.sensis.com.au [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   media.sensis.com.au [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   .sensismediasmart.com.au [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   media.sensis.com.au [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   .apmebf.com [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   .bs.serving-sys.com [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   .serving-sys.com [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   .serving-sys.com [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   .serving-sys.com [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   .serving-sys.com [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   .serving-sys.com [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   .serving-sys.com [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   .serving-sys.com [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   .mediaplex.com [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]
   .mediaplex.com [ C:\Documents and Settings\Bek Roxx\Local Settings\Application Data\Google\Chrome\User Data\Default\Cookies ]

Trojan.Agent/Gen-Nullo[Short]
   C:\SYSTEM VOLUME INFORMATION\_RESTORE{AAF1F5B0-3D1A-4944-9F90-5F78CC1DE507}\RP88\A0144856.EXE

Nothing has seemed to improve the situation so far, so i'm starting to think the problem might not be malware. But what else could it be? Anyway, thank you for your help so far.

[SuperDave]

Download Security Check by screen317 from one of the following links and save it to your desktop.

Link 1
Link 2

* Unzip SecurityCheck.zip and a folder named Security Check should appear.
* Open the Security Check folder and double-click Security Check.bat
* Follow the on-screen instructions inside of the black box.
* A Notepad document should open automatically called checkup.txt
* Post the contents of that document in your next reply.

Note: If a security program requests permission from dig.exe to access the Internet, allow it to do so.

==============================

I'd like us to scan your machine with ESET OnlineScan

•Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan
•Click the button.
•For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)

• Click on to download the ESET Smart Installer. Save it to your desktop.
  
• Double click on the icon on your desktop.
  

•Check
•Click the button.
•Accept any security warnings from your browser.
•Check
•Push the Start button.
•ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
•When the scan completes, push
•Push , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
•Push the button.
•Push
A log file will be saved here: C:\Program Files\ESET\ESET Online Scanner\log.txt

[kristain]

Edited