New personal protection virus HELP

I just get that virus yesterday now my entire window just turn blue can not be use, all program i try run will just shut down, the anti virus i just download also can not be run since ever time i install it it just get shut down, the weird part is the only thing i can use is the internet not even the ctrl+alt+delete can be use

Hello.

Please download exeHelper from one of the two links.
Link 1
Link 2

• Double-click on exeHelper.com or exeHelper.scr to run the fix.
  
• A black window should pop up, press any key to close once the fix is completed.
  
• Post the contents of log.txt (Will be created in the directory where you ran exeHelper.com)
  

Note: If the window shows a message that says "Error deleting file", please re-run the program before posting a log - and post the two logs together (they will both be in the one file).

Please download the current version of HijackThis from HERE

• Double click and run the installer.
  
• It will install to C:\Program Files\Trend Micro\HijackThis\hijackthis.exe
  
• After installing, you should get the user agreement, press accept and Hijack This will run.
  
• Select Do a system scan and save a log file. This will open a notepad file of everything Hijack This found, copy and paste it back here.
  

ok i already download all the file BUT it can not be install every time i click it it just get close i see that another person have the same problems as me BUT now even my msconfig also can not be use every time i i restarts the com it will still be auto on

ok i use Rkill and it did shut the virus down for few second but i still can not use malware and after that few second the virus rerun itself i also try msconf by unclick every box but every time i restarts com the box will auto click back ( this delay the virus form running like 1-2sec normaly it run as soon as the com is up)

Are you able to run exeHelper?

Ok first i need to say is ALL program will be shut down after a few second i MEAN ALL, lucky rkill use less then that so i can shut the virus down for a few more second in that time if my hand is fast enough i manage to do exehelper but every time after it delete it also afew second later the virus reapper again


exeHelper by Raktor
Build 20091204
Run at 11:09:30 on 12/11/09
Now searching...
Checking for numerical processes...
Checking for sysguard processes...
Checking for bad processes...
Killed process personalprotector.exe
Checking for bad files...
Deleting file C:\Program Files\Personal Protector\personalprotector.exe
Checking for bad registry entries...
Removing HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\personalprotector
Resetting filetype association for .exe
Resetting filetype association for .com
Resetting userinit and shell values...
Resetting policies...
--Finished--

exeHelper by Raktor
Build 20091204
Run at 11:10:08 on 12/11/09
Now searching...
exeHelper by Raktor
Build 20091204
Run at 11:10:24 on 12/11/09
Now searching...
Checking for numerical processes...
exeHelper by Raktor
Build 20091204
Run at 11:10:39 on 12/11/09
Now searching...
Checking for numerical processes...
Checking for sysguard processes...
exeHelper by Raktor
Build 20091204
Run at 11:10:54 on 12/11/09
Now searching...
Checking for numerical processes...
Checking for sysguard processes...
Checking for bad processes...
Killed process personalprotector.exe
Checking for bad files...
Deleting file C:\Program Files\Personal Protector\personalprotector.exe
Checking for bad registry entries...
Removing HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\personalprotector
Resetting filetype association for .exe
Resetting filetype association for .com
Resetting userinit and shell values...
Resetting policies...
--Finished--

exeHelper by Raktor
Build 20091204
Run at 11:11:39 on 12/11/09
Now searching...
Checking for numerical processes...
Checking for sysguard processes...
exeHelper by Raktor
Build 20091204
Run at 11:11:54 on 12/11/09
Now searching...
Checking for numerical processes...
Checking for sysguard processes...
Checking for bad processes...
Killed process personalprotector.exe
Checking for bad files...
Deleting file C:\Program Files\Personal Protector\personalprotector.exe
Checking for bad registry entries...
Removing HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\personalprotector
Resetting filetype association for .exe
Resetting filetype association for .com
Resetting userinit and shell values...
Resetting policies...
--Finished--

new info hope can help


Running from: C:\z.exe

Log file at : C:\Documents and Settings\user\Desktop\Win32kDiag.txt

WARNING: Could not get backup privileges!

Searching 'C:\WINDOWS'...





Finished!


second one

Volume in drive C is h
Volume Serial Number is BD9D-E600

Directory of C:\WINDOWS\system32

04/08/2004 07:56 180,224 scecli.dll

Directory of C:\WINDOWS\system32

04/08/2004 07:56 407,040 netlogon.dll

Directory of C:\WINDOWS\system32

04/08/2004 07:56 55,808 eventlog.dll
3 File(s) 643,072 bytes

Directory of C:\WINDOWS\system32\dllcache

04/08/2004 07:56 180,224 scecli.dll

Directory of C:\WINDOWS\system32\dllcache

04/08/2004 07:56 407,040 netlogon.dll

Directory of C:\WINDOWS\system32\dllcache

04/08/2004 07:56 55,808 eventlog.dll
3 File(s) 643,072 bytes

Total Files Listed:
6 File(s) 1,286,144 bytes
0 Dir(s) 11,499,458,560 bytes free

Can you run Hijack This?

can not

Please download and run this tool.

Download Malwarebytes' Anti-Malware from Here

Double Click mbam-setup.exe to install the application.

• Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  
• If an update is found, it will download and install the latest version.
  
• Once the program has loaded, select "Perform Quick Scan", then click Scan.
  
• The scan may take some time to finish,so please be patient.
  
• When the scan is complete, click OK, then Show Results to view the results.
  
• Make sure that everything is checked, and click Remove Selected.
  
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Note)
  
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  

Note:
If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.
Click OK to either and let MBAM proceed with the disinfection process.
If asked to restart the computer, please do so immediately.

Post the contents of the MBAM Log.