Rogue Antivirus

[Deltron]

2 infections found @ 1 hour, 11 minutes. Weird, these usually take about forty minutes.

http://www.mediafire.com/?gpo3y7cmbua81hm

[Quintus]

Disable System Restore while you're at it. When the scan is finished and the files have been removed, enable it before you reboot.

[Deltron]

Restarting right now. Do you want me to attempt to run Bootkit Remover again?

MBAM:
http://pastebin.com/0iPAzXEz

[Quintus]

Do a reboot first. Post here after that and I'll provide you with further instructions. Remember to disconnect yourself from the Internet.

[Deltron]

I already finished the scan, and rebooted. When do I disconnect from the internet?

[Quintus]

Still a BSOD, I believe?

[Deltron]

I didn't pay attention; I took a shower. Would you like me to reboot and see?

[Quintus]

Go ahead.

[Deltron]

BSOD. Internal_Power_Error

[Quintus]

Proceed to what I told you in my PM. Use the other tool.

• Step 29
  
  Please download OldTimer ListIt (OTL) from 'here'. Please click the Go (Arrow Button) or press Enter in the URL address bar to start the download.

• • Save it to your desktop.
    
  • Please double-click OTL.exe to run it.
    
  • Make sure all other windows are closed to let it run uninterrupted.
    
  • Under the Custom Scan box paste this in:
    
    
    Code:

    %systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\*.exe /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.sys
%systemroot%\system32\drivers\*.dll
%systemroot%\system32\drivers\*.ini
%systemroot%\system32\drivers\*.exe
%SYSTEMDRIVE%\*.*
%PROGRAMFILES%\*.
%appdata%\*.*
netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
disk.sys
nvstor32.sys
ahcix86s.sys
nvrd32.sys
symmpi.sys
adp3132.sys
mv61xx.sys
usbstor.sys
/md5stop
CREATERESTOREPOINT
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs

• • Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan won't take long.
    
  • When the scan completes, it will open two Notepad windows.
    • OTL.txt
      
    • Extras.txt
  • These are saved in the same location as OTL.
    
  • Please copy (Right-click > Select All > Copy) the contents of these files, one at a time, and post it with your next reply.