glustin10

Great thanks so much for the help MrC

It all seems to be working now, only one last question, i have a RK Quarantine folder in my desktop. Can that be deleted?

No, the error message is gone.

Ok, here is the log from OTL: All processes killed ========== OTL ========== C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\{B82BE595-687A-4cd0-A24E-50C38F27DA81}.lnk moved successfully. Registry value HKEY_USERS\S-1-5-21-1950910400-1506295391-1780677180-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}\ not found. C:\Users\Ramiro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk moved successfully. Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Google Sidewiki...\ deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: Agus ->Temp folder emptied: 98033 bytes ->Temporary Internet Files folder emptied: 49925 bytes ->Java cache emptied: 8194588 bytes ->FireFox cache emptied: 139185162 bytes ->Flash cache emptied: 1861 bytes User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes ->Flash cache emptied: 56475 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Invitado ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes ->FireFox cache emptied: 395510017 bytes ->Flash cache emptied: 1772 bytes User: Public ->Temp folder emptied: 0 bytes User: Ramiro ->Temp folder emptied: 880576 bytes ->Temporary Internet Files folder emptied: 2438369 bytes ->Java cache emptied: 163523 bytes ->FireFox cache emptied: 963068221 bytes ->Flash cache emptied: 126029 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 757760 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 18655 bytes RecycleBin emptied: 2841169512 bytes Total Files Cleaned = 4.150,00 mb OTL by OldTimer - Version 3.2.32.0 log created on 02182012_125951 Files\Folders moved on Reboot... File move failed. C:\Windows\temp\CLDigitalHome\CLMS_AGENT_LOG1.txt scheduled to be moved on reboot. Registry entries deleted on Reboot...

Tdsskiller did not find any threats, I attach the report with the OTL logs. tdsskiller report.txt Extras.Txt OTL.Txt

Apparently all is good, MBAM did not find problems, but when i start up i get an error that says Error loading C:\Users\Public\{B82BE595-687A-4cd0-A24E-50C38F27DA81}.dll The specified module cannot be found. Firewall was restored, but the folders where the p2p programs are installed are still there, would they be safe to delete now? Sorry if the MBAM log is in spanish, if you need it in english i can reinstall in english and post it back. Thanks for all the help so far. mbam-log-2012-02-16 (19-54-20).txt

Heres the ComboFix log. log.txt

Thanks for the reply, here is the RogueKiller report. RKreport1.txt

Hello, my firewall has been disabled and I cannot activate it again, I get an error code 0x80070003 when I try to restore it. This I am pretty sure has been caused by a bundle of 3 p2p sharing programs that got installed somehow and cannot be removed. They do not appear in the programs list to uninstall, and if the folders where they are get deleted, they just reinstall themselves after a while. In addition to the firewall being disabled, MBAM fails to update. The dds logs are attached. Attach.txt DDS.txt