Need further assitance

You need to attach the logs from running:
MBAM\
SAS
ComboFix

Unless they didn't run.

Please also download MBRCheck to your desktop

• Double click MBRCheck.exe to run (vista and Win 7 right click and select Run as Administrator)
• It will show a Black screen with some information that will contain either the below line if no problem is found:
  
  • Done! Press ENTER to exit...
  
  
• Or you will see more information like below if a problem is found:
  
  • Found non-standard or infected MBR.
  • Enter 'Y' and hit ENTER for more options, or 'N' to exit:
  
  
• Either way, just choose to exit the program at this point since we want to see only the scan results to begin with.
• MBRCheck will create a log named similar to MBRCheck_07.16.10_00.32.33.txt which is random based on date and time.
• Attach this log to your next message.

 

None of those are the logs from:
'MalwareBytes Antimalware
SuperAntispyware
ComboFix

 

While you are collecting those logs, you need to also tell me what issues you are having. You did have a TDSSKiller infection, which is clean now. However, you need to clean out these folders:
C:\Users\QA LAB\AppData\Local\Temp\
C:\Windows\Temp\

Also, what are all these from Jan. 7th 2011:

Code:

C:\Windows\"
1spabn~1      Jan  7 2011          46  "1sPAbNqdcn"
2pyy7vra      Jan  7 2011          29  "2PYy7vRa"
3hn71f~1      Jan  7 2011          44  "3hN71FA5gS"
3osuwk~1      Jan  7 2011          40  "3oSUWkf37"
3sdxexu       Jan  7 2011          39  "3SdxeXU"
3vnie7v       Jan  7 2011          38  "3vNIe7v"
4fednpir      Jan  7 2011          45  "4feDnPiR"
5gkbcx        Jan  7 2011          28  "5GkbCx"
5nd7qivh      Jan  7 2011          26  "5nd7qivh"
6wu8q3~1      Jan  7 2011          43  "6wU8Q3h881"
86nkq         Jan  7 2011          44  "86nKQ"
a4x1431t      Jan  7 2011          27  "a4X1431t"
aodnts~1      Jan  7 2011          40  "AoDntSgSFm
bcR3UYwwa"
bgwmsn5c      Jan  7 2011          44  "bgWmsn5c"
bmijg8~1      Jan  7 2011          28  "bmIjG8pvSx
CQ3GiA"
dowrom~1      Jan  7 2011          38  "dowRomb4AI"
dvdsvb~1      Jan  7 2011          34  "dvdsVbHqs"
dyfyj         Jan  7 2011          39  "DYFyJ"
ejv5lpgq      Jan  7 2011          44  "EJV5lPgQ"
eoih3f~1      Jan  7 2011          44  "EOIH3fPpIG
f7HHhd"
fa4k1tg       Jan  7 2011          31  "fa4k1tg"
fakr5y        Jan  7 2011          28  "fAKR5Y"
g6lfhlk3      Jan  7 2011          27  "G6lfHlK3"
giwc5n~1      Jan  7 2011          45  "GiwC5nO45L"
gvbebqa       Jan  7 2011          36  "gvBEBqA"
hjbvn         Jan  7 2011          45  "HJBVn"
hx5fojx       Jan  7 2011          36  "Hx5Fojx"
ib1rq2fn      Jan  7 2011          42  "ib1RQ2Fn
IEbbQdfd"
iuvncb~1      Jan  7 2011          44  "IuVncbWqcI"
ivwal         Jan  7 2011          45  "IVWaL"
ixlaauwn      Jan  7 2011          41  "ixlAaUwn"
jgmcn4~1      Jan  7 2011          42  "JgMcN4Gaa6"
ljb7xq~1      Jan  7 2011          43  "LjB7XQ3w4"
lrfnm8ks      Jan  7 2011          47  "lRFnM8kS"
mitidw~1      Jan  7 2011          35  "MItiDWsvC6"
mjoad         Jan  7 2011          25  "mjOad
mtqGUUmb5"
nci1sj        Jan  7 2011          26  "nCi1SJ"
nh8bq         Jan  7 2011          30  "nh8Bq"
niasdalj      Jan  7 2011          24  "niasdaLJ"
nnosag        Jan  7 2011          30  "NNOSAg"
npn2o         Jan  7 2011          30  "NPn2O
nWfau"
otlux6t       Jan  7 2011          28  "oTlUx6T"
oxoevuf       Jan  7 2011          35  "OxoEVUF"
oyawid        Jan  7 2011          26  "OYawID"
p2bq37f       Jan  7 2011          49  "p2bQ37F
r3OAWionr2"
rgcwlg~1      Jan  7 2011          42  "rgcwlG38y"
rhk5dv        Jan  7 2011          29  "RHK5dv"
rxiihy~1      Jan  7 2011          27  "RXiIhYTWG"
scfo5u45      Jan  7 2011          33  "ScFO5U45"
se3gok~1      Jan  7 2011          41  "sE3GoKXjC
Sp1hfjd"
t7pklw~1      Jan  7 2011          31  "t7PkLw46M"
ts61qo~1      Jan  7 2011          25  "tS61qOyEgk"
u2oox         Jan  7 2011          38  "u2Oox"
ud2jw         Jan  7 2011          30  "ud2jW"
uffruvti      Jan  7 2011          48  "UffRUVTi"
uscvi5        Jan  7 2011          42  "uscvI5"
v7meqyri      Jan  7 2011          35  "V7mEQYri"
vcxdu         Jan  7 2011          27  "VcxDu"
veuaya        Jan  7 2011          43  "VeUAyA"
vigovc        Jan  7 2011          47  "vIGOvC"
w6mxetx       Jan  7 2011          43  "w6MXETx
WMsiQbId"
wnytbom       Jan  7 2011          33  "wnYTBOm"
wp6hs         Jan  7 2011          32  "Wp6hs"
xlo7djr       Jan  7 2011          38  "XlO7djR"
xtumof~1      Jan  7 2011          26  "xtUMOFntIw"
ymoajoi       Jan  7 2011          42  "YMoaJoi"
yrivjn~1      Jan  7 2011          30  "YRivJNoM2

If you don't know, delete them all.

 

You need to also tell me what malware issues you are having.

 

Combo found and fixed one of your issues, and your MBRCheck log indicates a clean MBR.

Please put ComboFix directly on your desktop, not where you have it now:
Running from: c:\users\QA LAB\Downloads\Virus removal tools\ComboFix.exe

You also should not have Utorrent running at start up, it opens your whole system up to intrusions!!

* Make sure that combofix.exe that you downloaded while doing the READ & RUN ME is on your Desktop but Do not run it!
If it is not on your Desktop, the below will not work.
* Also make sure you have shut down all protection software (antivirus, antispyware...etc) or they may get in the way of allowing ComboFix to run properly.
* If ComboFix tells you it needs to update to a new version, make sure you allow it to update.
* Open Notepad and copy/paste the text in the below code box into it (make sure you scroll all the way down in the code box to get all lines selected ):

Code:

KILLALL::

File::
c:\users\QA LAB\AppData\Local\Cmozipataxu.bin

Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=-

[-HKEY_LOCAL_MACHINE\system\ControlSet008\Services\srv15D8]

* Save the above as CFscript.txt and make sure you save it to the same location (should be on your Desktop) as ComboFix.exe
* At this point, you MUST EXIT ALL BROWSERS NOW before continuing!
* You should have both the ComboFix.exe and CFScript.txt icons on your Desktop.
If it asks you to overide the previous file with the same name, click YES.
* Now use your mouse to drag CFscript.txt on top of ComboFix.exe
http://img.photobucket.com/albums/v666/sUBs/CFScriptB-4.gif
* Follow the prompts.
* When it finishes, a log will be produced named c:\combofix.txt
* I will ask for this log below

Note:

Do not mouseclick combofix's window while it is running. That may cause it to stall.

Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator).

Then attach the below logs:

* C:\ComboFix.txt
* C:\MGlogs.zip

Make sure you tell me how things are working now!

 

You didn't attach the logs.

You may need to uninstall Windows Defender and then reinstall it.

 

I am not seeing any malware remaining on your system, however use windows explorer to find and check on what this is:
C:\ProgramData\08522eu86lgu7185m07xi5

If you don't know, delete it.

I also would advise you to uninstall this:
CleanMyPC Software

If you need or want a registry cleaner, you should use CCLeaner.

If you are not having any other malware problems, it is time to do our final steps:

1. We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no real time protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.We recommend them for doing backup scans when you suspect a malware infection.
2. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
   
   • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
   • "%userprofile%\Desktop\combofix" /uninstall
     
     • Notes: The space between the combofix" and the /uninstall, it must be there.
     • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.
     
     
   
   
3. Go back to step 6 of the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.
4. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
5. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
6. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
7. Go to add/remove programs and uninstall HijackThis.
8. Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
9. If you are running Win 7, Vista, Windows XP or Windows ME, do the below:
   
   • Refer to the cleaning procedures pointed to by step 7 of the READ ME
     for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.
   • Then reboot and Enable System Restore to create a new clean Restore Point.
   
   
10. After doing the above, you should work thru the below link:
    
    • How to Protect yourself from malware!

Malware removal from a National Chain = $149
Malware removal from MajorGeeks = $0

Help Support MajorGeeks
Buy Discounted Software @ Majorgeeks Store. Giveaways Too!

Majorgeeks Geek Wear. Hats, T-Shirts, Hoodies

MajorGeeks on FaceBook

 

Majorgeeks Geek Wear. Hats, T-Shirts, Hoodies