Problems with adds after Antivirus 2010 infection

ComboFix doesn't "install". You should just download it to your desktop and double click it.

Let's do this:

Please use add/remove programs to uninstall:
J2SE Runtime Environment 5.0

Please disable all anti-virus and anti-spyware programs while we do the following (re-enable when you are finished):

Now let's see if we can use ComboFix to remove a bunch of malware files.

* Make sure that combofix.exe that you downloaded while doing the READ & RUN ME is on your Desktop but Do not run it!
If it is not on your Desktop, the below will not work.
* Also make sure you have shut down all protection software (antivirus, antispyware...etc) or they may get in the way of allowing ComboFix to run properly.
* If ComboFix tells you it needs to update to a new version, make sure you allow it to update.
* Open Notepad and copy/paste the text in the below code box into it (make sure you scroll all the way down in the code box to get all lines selected ):

Code:

KILLALL::

File::
C:\Documents and Settings\Lena\Local Settings\Application Data\rifW
C:\Documents and Settings\Lena\Local Settings\Application Data\{C59ED5E9-7001-46A6-84EC-D619DAEAEE6B}
C:\WINDOWS\Ehubuqotolixa.bin
C:\WINDOWS\Kvufiyi.dat
C:\WINDOWS\Temp\is7E.tmp
C:\WINDOWS\Temp\is82.tmp
C:\WINDOWS\Temp\IswTmp
C:\Documents and Settings\Lena\Local Settings\Temp\-DIrgAzqRQkAmid
C:\Documents and Settings\Lena\Local Settings\Temp\6I6RGSSnr9JrKDn
C:\Documents and Settings\Lena\Local Settings\Temp\AskInstallChecker.exe
C:\Documents and Settings\Lena\Local Settings\Temp\F2u__WhLKvMXmF
C:\Documents and Settings\Lena\Local Settings\Temp\FJjp3n0P.exe.part
C:\Documents and Settings\Lena\Local Settings\Temp\ilSK8CFe.exe.part
C:\Documents and Settings\Lena\Local Settings\Temp\IswTmp
C:\Documents and Settings\Lena\Local Settings\Temp\isw_acc_80100000
C:\Documents and Settings\Lena\Local Settings\Temp\nskE5.tmp
C:\Documents and Settings\Lena\Local Settings\Temp\svc0a.tmp
C:\Documents and Settings\Lena\Local Settings\Temp\uIMHBHxv.exe.part
C:\Documents and Settings\Lena\Local Settings\Temp\~nsu.tmp

Folder::
C:\Documents and Settings\Lena\Local Settings\Temp\IswTmp
C:\Documents and Settings\Lena\Local Settings\Temp\isw_acc_80100000
C:\Documents and Settings\Lena\Local Settings\Temp\F2u__WhLKvMXmF
C:\Documents and Settings\Lena\Local Settings\Temp\-DIrgAzqRQkAmid
C:\Documents and Settings\Lena\Local Settings\Temp\6I6RGSSnr9JrKDn

* Save the above as CFscript.txt and make sure you save it to the same location (should be on your Desktop) as ComboFix.exe
* At this point, you MUST EXIT ALL BROWSERS NOW before continuing!
* You should have both the ComboFix.exe and CFScript.txt icons on your Desktop.
If it asks you to overide the prvevious file with the same name, click YES.
* Now use your mouse to drag CFscript.txt on top of ComboFix.exe
http://img.photobucket.com/albums/v666/sUBs/CFScriptB-4.gif
* Follow the prompts.
* When it finishes, a log will be produced named c:\combofix.txt
* I will ask for this log below

Note:

Do not mouseclick combofix's window while it is running. That may cause it to stall.

Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator).

Then attach the below logs:

* C:\ComboFix.txt
* C:\MGlogs.zip

Make sure you tell me how things are working now!

 

If you are stuck in a loop, then you can try this:

How to recover from a corrupt registry.

I suggest you post in the software forum as we can not do malware removal until your system is up and stable. I will leave this thread open for when you return in a stable system.