bubbada

now can i install the jre update and adobe flash player and reader?

otherwise pc is now faster than it was before.

so far nothing else major has been happening on my pc except one semi anoying thing has happened zonealarm has been doing the "Protection Is Up, UI is Initializing" and staying like that nearly everytime i turn on the pc. i found by loging off and in again fixes it though for the session. on other notes: one of my favorite shopping visit sites are infected with something i guess thats what google says ------like this-------------- Diagnostic page for www.buyincoins.com What is the current listing status for www.buyincoins.com? Site is listed as suspicious - visiting this website may harm your computer. What happened when Google visited this site? Of the 68 pages that we tested on the site over the past 90 days, 3 page(s) resulted in malicious software being downloaded and installed without user consent. The last time that Google visited this site was on 2011-01-04, and the last time that suspicious content was found on this site was on 2011-01-04. Malicious software includes 4 scripting exploit(s), 4 trojan(s). Successful infection resulted in an average of 1 new process(es) on the target machine. Malicious software is hosted on 1 domain(s), including alsonatural.cz.cc/. This site was hosted on 2 network(s) including AS4213 (VPLSNET), AS35908 (VPLSNET). Has this site acted as an intermediary resulting in further distribution of malware? Over the past 90 days, www.buyincoins.com did not appear to function as an intermediary for the infection of any sites. Has this site hosted malware? No, this site has not hosted malicious software over the past 90 days. How did this happen? In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message. --------------------------- today avira picked up a HTML/Infected.WebPage.Gen2 [virus] at http://comparemacbook.com/ while i visted the website, avira deleted from firefox cache on entry ------------------------------------------

safemode log made and posted ComboFix.txt

still restarting i took note "almost done this window will close in a short while please wait a few seconds for the log to show up" lasted 1 minute 14 seconds then computer restarted.

ok done. 01052011_222959.log

C:\Documents and Settings\All Users\Application Data\{0B40BB49-02BD-4E99-BBF0-439142F7D731} instance.dat 1 KB DAT File 12/13/2010 6:49 PM mia.lib 566 KB LIB File 12/11/2010 8:32 PM Zemana_AntiLogger_Setup.dat 1 KB DAT File 12/13/2010 6:49 PM Zemana_AntiLogger_Setup.exe 2,628 KB Application 12/11/2010 8:32 PM Zemana_AntiLogger_Setup.lan 1 KB LAN File 12/13/2010 6:49 PM Zemana_AntiLogger_Setup.msi 361 KB Windows Installer P... 12/11/2010 8:32 PM Zemana_AntiLogger_Setup.par 4 KB PAR File 12/13/2010 6:49 PM Zemana_AntiLogger_Setup.res 6,486 KB RES File 12/11/2010 8:32 PM C:\Documents and Settings\Bubba Damage\Local Settings\Application Data\_\ GPI_2.0.exe_Url_gvehkeo5wppyqjjni1pxwimatji0hcqi\1.0.0.0\user.config GPI_2.0.exe_Url_x0kf4cuyqcygvfuolditiw5qadkdqt4b\1.0.0.0\user.config

whoops i thought i attached it here it is OTL.Txt

got rid of what was left over from avgs uninstall and OTL made only 1 log this time

here they are attached OTL.Txt Extras.Txt

um still cant send a log because when combo-fix gets to the log part the pc restarts. you said whats that mean uninstalling the recovery console or meaning when pc starts dont select any menu option? (with recovery console installed) anyhow i made a list of processes and services still running when about to use combo-fix attached waiting to see what to do now list_of_processes_and_service.txt

after the "windows file protection" window closes.

from my win xp pro sp2 disc got I386\SFC.EX_ and extracted it to c: i ran c:\sfc /scannow from cmd prompt got a window - Windows File Protection please wait while windows verifies that all protected windows files are intact and in their original version. the bar completes and nothing happens after that.

thing is tryed with uninstalling recovery console didnt make any differance so i used msconfig and used the diagnostic startup option combo-fix worked after that wierd how this prog works i moved ms.dll from the system32 folder into another folder called ms.dll combofix picked it up and then quarantined it but before it didnt when it was in system32 folder. and now combo-fix says that i have a infection in my regedit.exe so i deleted it and replaced it with the original file from the windows xp pro 2 disc still comes up as infected (i dunno) heres my most recent combo-fix log attached. ComboFix.txt

cant send a combo fix log because when it got to that it was saying log is getting created the window will close in a short while and the pc restarted then gave the error windows recovered from a serious error (looked up its a stop Bluescreen caused by device or driver) anyway i checked the winlogon.exe and explorer.exe again with eset looks clear there, but still trying to figure out what about ms.dll still Win32/Bamital.DV trojan whats its purpose? and can i get a replacement for it (clean file)