My Computer having issues

my computer is have a problem some antivirus name winpc keeps popin up messing up my interenet n every min annoyin me i want to get rid of it i don't want to pay for it n i never ask for it so please help

DDS (Ver_09-05-14.01) - NTFSx86 NETWORK
Run by twilliams08 at 14:26:35.21 on Tue 05/19/2009
Internet Explorer: 7.0.6001.18000
Microsoft Windows Vista Home Premium 6.0.6001.1.1252.1.1033.18.958.487 [GMT -5:00]

AV: Windows Live OneCare *On-access scanning enabled* (Updated) {427ADFC3-B354-4A51-BE34-A9D4218E45C4}
SP: Windows Defender *disabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
SP: Windows Live OneCare *enabled* (Updated) {CC7E50BA-BA8C-4DDE-B5AC-EA53BC38D01B}
FW: Windows Live OneCare Firewall *disabled* {A3899D22-27E6-4A7E-AE4E-2C106646DAAB}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Fenrir & Co\Sleipnir\bin\Sleipnir.exe
C:\Users\twilliams08\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8J93F0Z4\dds[1].scr
C:\Windows\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

============== Pseudo HJT Report ===============

uSearch Page = hxxp://www.google.com
uStart Page = hxxp://www.myspace.com/
mStart Page = hxxp://www.google.com
mDefault_Page_URL = hxxp://www.google.com
uInternet Settings,ProxyOverride = *.local
mSearchAssistant = hxxp://www.google.com/ie
uURLSearchHooks: SweetIM For Internet Explorer: {bc4ffe41-de9f-46fa-b455-aad49b9f9938} - c:\program files\macrogaming\sweetimbarforie\toolbar.dll
BHO: Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
BHO: ZILLAbar Browser Helper Object: {1827766b-9f49-4854-8034-f6ee26fcb1ec} - c:\program files\stopzilla!\SZSG.dll
BHO: SWEETIE Class: {1a0aadcd-3a72-4b5f-900f-e3bb5a838e2a} - c:\progra~1\macrog~1\sweeti~1\toolbar.dll
BHO: AskBar BHO: {201f27d4-3704-41d6-89c1-aa35e39143ed} - c:\program files\askbardis\bar\bin\askBar.dll
BHO: ALOT Toolbar: {5aa2ba46-9913-4dc7-9620-69ab0fa17ae7} - c:\program files\alot\bin\alot.dll
BHO: DealioBHO Class: {6a87b991-a31f-4130-ae72-6d0c294bf082} - c:\program files\dealio\kb124\Dealio.dll
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0\bin\ssv.dll
BHO: (Gaming)2: {971f630e-ad68-4d6e-b0c3-1c627aac80f1} - c:\program files\gamingsquared\gaming2\G2IE_v1042.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\googletoolbar2.dll
BHO: CBrowserHelperObject Object: {ca6319c0-31b7-401e-a518-a07c3db8f777} - c:\program files\bae\BAE.dll
BHO: STOPzilla Browser Helper Object: {e3215f20-3212-11d6-9f8b-00d0b743919d} - c:\program files\stopzilla!\SZIEBHO.dll
BHO: TBSB04757 Class: {fcbccb87-9224-4b8d-b117-f56d924beb18} - c:\program files\freeze.com toolbar\freeze_us.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
TB: SweetIM For Internet Explorer: {bc4ffe41-de9f-46fa-b455-aad49b9f9938} - c:\program files\macrogaming\sweetimbarforie\toolbar.dll
TB: ALOT Toolbar: {5aa2ba46-9913-4dc7-9620-69ab0fa17ae7} - c:\program files\alot\bin\alot.dll
TB: STOPzilla: {98828ded-a591-462f-83ba-d2f62a68b8b8} - c:\program files\stopzilla!\SZSG.dll
TB: Dealio: {e67c74f4-a00a-4f2c-9fec-fd9dc004a67f} - c:\program files\dealio\kb124\Dealio.dll
TB: Veoh Browser Plug-in: {d0943516-5076-4020-a3b5-aefaf26ab263} - c:\program files\veoh networks\veoh\plugins\reg\VeohToolbar.dll
TB: &Google: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\googletoolbar2.dll
TB: Ask Toolbar: {3041d03e-fd4b-44e0-b742-2d9b88305f98} - c:\program files\askbardis\bar\bin\askBar.dll
EB: Dealio: {5c4c24d0-28b6-4b6b-b70f-e09848367f10} - c:\program files\dealio\kb124\Dealio.dll
EB: DF Bar: {67fcef90-073e-11de-8c30-0800200c9a66} - %SystemRoot%\system32\shdocvw.dll
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe
uRun: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
uRun: [DellSupport] "c:\program files\dellsupport\DSAgnt.exe" /startup
uRun: [DellTransferAgent] "c:\programdata\dell\transferagent\TransferAgent.exe"
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
uRun: [Google Update] "c:\users\twilliams08\appdata\local\google\update\GoogleUpdate.exe" /c
uRun: [DumbIdol] "c:\programdata\DALE 01 01.7dah8"
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
uRun: [vejamevuyo] Rundll32.exe "c:\programdata\yamomenu\yamomenu.dll",s
uRun: [AVScan] c:\users\twilliams08\appdata\roaming\winav.exe
uRun: [DigiFast] c:\users\twilliams08\appdata\roaming\digifast\digifast.exe
uRun: [SfKg6wIPuSpdc] c:\users\twilliams08\appdata\roaming\microsoft\windows\sxhfqws.exe
uRun: [setup2.exe] c:\windows\system32\setup2.exe
uRun: [RegistryMechanic] c:\program files\registry mechanic\RMTray.exe /H
uRun: [AROReminder] c:\program files\advanced registry optimizer\ARO.exe -rem
uRun: [CPMa3fd7a4d] Rundll32.exe "c:\programdata\dutesora\dutesora.dll",a
uRun: [a0ce49d1] rundll32.exe "c:\programdata\libinisu\libinisu.dll",b
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start
mRun: []
mRun: [Google Desktop Search] "c:\program files\google\google desktop search\GoogleDesktop.exe" /startup
mRun: [ECenter] c:\dell\e-center\EULALauncher.exe
mRun: [ISUSPM Startup] c:\progra~1\common~1\instal~1\update~1\ISUSPM.exe -startup
mRun: [SweetIM] c:\program files\macrogaming\sweetim\SweetIM.exe
mRun: [HostManager] c:\program files\common files\aol\1191802956\ee\AOLSoftware.exe
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [SigmatelSysTrayApp] sttray.exe
mRun: [NvSvc] RUNDLL32.EXE c:\windows\system32\nvsvc.dll,nvsvcStart
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [WinBlueSoft] c:\program files\winbluesoft software\winbluesoft\WinBlueSoft.exe -min
mRun: [ISTray] "c:\program files\spyware doctor\pctsTray.exe"
mRun: [OneCareUI] "c:\program files\microsoft windows onecare live\winssnotify.exe"
StartupFolder: c:\users\twilli~2\appdata\roaming\micros~1\windows\startm~1\programs\startup\onenot~1.lnk - c:\program files\microsoft office\office12\ONENOTEM.EXE
StartupFolder: c:\users\twilli~2\appdata\roaming\micros~1\windows\startm~1\programs\startup\sleipn~1.lnk - c:\program files\fenrir & co\sleipnir\bin\Sleipnir.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\digita~1.lnk - c:\program files\digital line detect\DLG.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\ymetray.lnk - c:\program files\yahoo!\yahoo! music jukebox\ymetray.exe
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Compare Prices with &Dealio - c:\users\twilliams08\appdata\locallow\dealio\kb124\res\DealioSearch.html
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: Open In New Document - file:///C:/Program Files/Muddly/muddlycontext.htm
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC} - c:\program files\java\jre1.6.0\bin\npjpi160.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
IE: {7F9DB11C-E358-4ca6-A83D-ACC663939424} - {9999A076-A9E2-4C99-8A2B-632FC9429223} - c:\program files\bonjour\ExplorerPlugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
IE: {E908B145-C847-4e85-B315-07E2E70DECF8} - {9F038672-0425-4792-BC9C-36DE3308E8AA} - c:\program files\dealio\kb124\Dealio.dll
Trusted Zone: turbotax.com
DPF: {48DD0448-9209-4F81-9F6D-D83562940134} - hxxp://lads.myspace.com/upload/MySpaceUploader1006.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab
TCP: NameServer = 85.255.112.81,85.255.112.148
Notify: GoToAssist - c:\program files\citrix\gotoassist\514\G2AWinLogon.dll
AppInit_DLLs: c:\progra~1\google\google~1\GOEC62~1.DLL

================= FIREFOX ===================

FF - ProfilePath -

============= SERVICES / DRIVERS ===============

R0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore.sys [2009-5-16 130936]
R2 sdAuxService;PC Tools Auxiliary Service;c:\program files\spyware doctor\pctsAuxs.exe [2009-5-16 348752]
S2 IntuitUpdateService;Intuit Update Service;c:\program files\common files\intuit\update service\IntuitUpdateService.exe [2008-10-10 13088]
S2 OcHealthMon;Windows Live OneCare Health Monitor;c:\program files\microsoft windows onecare live\OcHealthMon.exe [2009-3-22 24936]
S2 Viewpoint Manager Service;Viewpoint Manager Service;"c:\program files\viewpoint\common\viewpointservice.exe" --> c:\program files\viewpoint\common\ViewpointService.exe [?]
S3 GoogleDesktopManager-061008-081103;Google Desktop Manager 5.7.806.10245;c:\program files\google\google desktop search\GoogleDesktop.exe [2007-2-19 29744]
S3 motccgp;Motorola USB Composite Device Driver;c:\windows\system32\drivers\motccgp.sys [2007-4-5 17920]
S3 motccgpfl;MotCcgpFlService;c:\windows\system32\drivers\motccgpfl.sys [2007-1-23 7680]
S3 MotDev;Motorola Inc. USB Device;c:\windows\system32\drivers\motodrv.sys [2007-5-4 42112]
S3 motport;Motorola USB Diagnostic Port;c:\windows\system32\drivers\motport.sys [2007-5-4 22528]

=============== Created Last 30 ================

2009-05-18 23:30 --d----- C:\Lop SD
2009-05-18 23:20 --d----- C:\_OTMoveIt
2009-05-18 16:03 --d----- c:\programdata\libinisu
2009-05-18 16:03 --d----- c:\programdata\bitonuta
2009-05-18 16:03 --d----- c:\progra~2\libinisu
2009-05-18 16:03 --d----- c:\progra~2\bitonuta
2009-05-18 01:30 --d----- c:\programdata\dutesora
2009-05-18 01:30 --d----- c:\programdata\budidepu
2009-05-18 01:30 --d----- c:\progra~2\dutesora
2009-05-18 01:30 --d----- c:\progra~2\budidepu
2009-05-17 13:30 --d----- c:\programdata\wutakizu
2009-05-17 13:30 --d----- c:\programdata\fowerovo
2009-05-17 13:30 --d----- c:\progra~2\wutakizu
2009-05-17 13:30 --d----- c:\progra~2\fowerovo
2009-05-17 01:15 37,440 a------- c:\windows\system32\drivers\msfwhlpr.sys
2009-05-17 01:15 91,200 a------- c:\windows\system32\drivers\msfwdrv.sys
2009-05-17 01:12 53,168 a------- c:\windows\system32\drivers\MpFilter.sys
2009-05-17 01:04 --d----- c:\program files\Microsoft Windows OneCare Live
2009-05-17 00:45 --d----- c:\programdata\tijevufi
2009-05-17 00:45 --d----- c:\programdata\mihamake
2009-05-17 00:45 --d----- c:\progra~2\tijevufi
2009-05-17 00:45 --d----- c:\progra~2\mihamake
2009-05-16 21:33 13,698 a------- c:\windows\7cc09ddware3z255.ocx
2009-05-16 13:03 --d----- c:\users\twilli~2\appdata\roaming\Sammsoft
2009-05-16 13:03 --d----- c:\program files\AskBarDis
2009-05-16 13:03 --d----- c:\program files\Advanced Registry Optimizer
2009-05-16 12:26 159,600 a------- c:\windows\system32\drivers\pctgntdi.sys
2009-05-16 12:26 130,936 a------- c:\windows\system32\drivers\PCTCore.sys
2009-05-16 12:26 73,840 a------- c:\windows\system32\drivers\PCTAppEvent.sys
2009-05-16 12:26 64,392 a------- c:\windows\system32\drivers\pctplsg.sys
2009-05-16 12:26 --d----- c:\program files\common files\PC Tools
2009-05-16 12:26 --d----- c:\users\twilli~2\appdata\roaming\PC Tools
2009-05-16 12:26 --d----- c:\programdata\PC Tools
2009-05-16 12:26 --d----- c:\program files\Spyware Doctor
2009-05-16 12:26 --d----- c:\progra~2\PC Tools
2009-05-16 12:25 506,368 a------- c:\windows\system32\msxml.dll
2009-05-16 11:56 --d----- c:\programdata\rumenite
2009-05-16 11:56 --d----- c:\programdata\hawupopa
2009-05-16 11:56 --d----- c:\progra~2\rumenite
2009-05-16 11:56 --d----- c:\progra~2\hawupopa
2009-05-15 23:07 12,696 a------- c:\windows\5177hazktoo5499.exe
2009-05-15 12:16 --d----- c:\programdata\pukugusa
2009-05-15 12:16 --d----- c:\programdata\nizoguya
2009-05-15 12:16 --d----- c:\progra~2\pukugusa
2009-05-15 12:16 --d----- c:\progra~2\nizoguya
2009-05-15 11:20 --d----- c:\users\twilli~2\appdata\roaming\digifast
2009-05-15 10:05 13,230 a------- c:\windows\f5zownloa59r645.dll
2009-05-15 09:59 7,117 a------- c:\windows\system32\21985tr5z14e.dll
2009-05-15 00:58 13,052 a------- c:\windows\3323sparsz5859.bin
2009-05-14 14:40 13,772 a------- c:\windows\9158zir3135.dll
2009-05-14 12:32 178 a------- c:\users\twilli~2\appdata\roaming\asd.bat
2009-05-14 10:07 --d----- c:\programdata\lubudeyu
2009-05-14 10:07 --d----- c:\programdata\hebebubo
2009-05-14 10:07 --d----- c:\progra~2\lubudeyu
2009-05-14 10:07 --d----- c:\progra~2\hebebubo
2009-05-13 20:07 1,097,728 a------- c:\users\twilli~2\appdata\roaming\winav.exe
2009-05-13 19:09 --d----- c:\users\twilli~2\appdata\roaming\ptidle
2009-05-13 14:37 --d----- c:\program files\DigitalLabs
2009-05-13 13:12 4 a------- c:\windows\system32\gxvxccounter
2009-05-13 13:10 --d----- c:\program files\BHVideo
2009-05-13 12:56 --d----- c:\programdata\wukoraga
2009-05-13 12:56 --d----- c:\programdata\nilejonu
2009-05-13 12:56 --d----- c:\progra~2\wukoraga
2009-05-13 12:56 --d----- c:\progra~2\nilejonu
2009-05-13 03:14 13,553 a------- c:\windows\system32\7z9dvir50649.bin
2009-05-12 09:59 --d----- c:\programdata\pinadili
2009-05-12 09:59 --d----- c:\programdata\jitabine
2009-05-12 09:59 --d----- c:\progra~2\pinadili
2009-05-12 09:59 --d----- c:\progra~2\jitabine
2009-05-11 21:57 13,729 a------- c:\windows\9a90stezl2568.ocx
2009-05-11 15:39 --d----- c:\programdata\muvetuvo
2009-05-11 15:39 --d----- c:\programdata\bejaline
2009-05-11 15:39 --d----- c:\progra~2\muvetuvo
2009-05-11 15:39 --d----- c:\progra~2\bejaline
2009-05-10 14:20 --d----- c:\programdata\wosawamu
2009-05-10 14:20 --d----- c:\progra~2\wosawamu
2009-05-10 14:20 --d----- c:\programdata\rabivufu
2009-05-10 14:20 --d----- c:\progra~2\rabivufu
2009-05-10 05:26 17,530 a------- c:\windows\system32\95e9zac5door786.exe
2009-05-09 18:59 --d----- c:\programdata\wipalego
2009-05-09 18:59 --d----- c:\progra~2\wipalego
2009-05-09 18:58 --d----- c:\programdata\guserohu
2009-05-09 18:58 --d----- c:\progra~2\guserohu
2009-05-08 17:16 4,078 a------- c:\windows\6554vi999z.cpl
2009-05-08 11:12 --d----- c:\programdata\zogapero
2009-05-08 11:12 --d----- c:\programdata\foweriyo
2009-05-08 11:12 --d----- c:\progra~2\zogapero
2009-05-08 11:12 --d----- c:\progra~2\foweriyo
2009-05-07 17:34 17,836 a------- c:\windows\system32\c54vzr9933.bin
2009-05-07 17:00 --d----- c:\programdata\yamomenu
2009-05-07 17:00 --d----- c:\programdata\puzesale
2009-05-07 17:00 --d----- c:\programdata\gazitopu
2009-05-07 17:00 --d----- c:\progra~2\yamomenu
2009-05-07 17:00 --d----- c:\progra~2\puzesale
2009-05-07 17:00 --d----- c:\progra~2\gazitopu
2009-05-07 16:59 --d----- c:\programdata\wapoyali
2009-05-07 16:59 --d----- c:\programdata\juyarono
2009-05-07 16:59 --d----- c:\progra~2\wapoyali
2009-05-07 16:59 --d----- c:\progra~2\juyarono
2009-05-07 16:59 --d----- c:\programdata\weyokupi
2009-05-07 16:59 --d----- c:\progra~2\weyokupi
2009-05-07 09:32 2,685 a------- c:\windows\system32\95advir3162z.cpl
2009-05-06 13:23 --d----- c:\programdata\hewalote
2009-05-06 13:23 --d----- c:\progra~2\hewalote
2009-05-06 13:23 --d----- c:\programdata\yulejoka
2009-05-06 13:23 --d----- c:\progra~2\yulejoka
2009-05-06 13:23 --d----- c:\programdata\keyisori
2009-05-06 13:23 --d----- c:\progra~2\keyisori
2009-05-05 12:06 --d----- c:\programdata\fuhiheje
2009-05-05 12:06 --d----- c:\progra~2\fuhiheje
2009-05-05 12:06 --d----- c:\programdata\vemogefi
2009-05-05 12:06 --d----- c:\programdata\dewegabu
2009-05-05 12:06 --d----- c:\progra~2\vemogefi
2009-05-05 12:06 --d----- c:\progra~2\dewegabu
2009-05-04 12:27 --d----- c:\programdata\rewufufu
2009-05-04 12:27 --d----- c:\programdata\nuhizume
2009-05-04 12:27 --d----- c:\progra~2\rewufufu
2009-05-04 12:27 --d----- c:\progra~2\nuhizume
2009-05-04 12:15 --d----- c:\users\twilli~2\appdata\roaming\LimeWire
2009-05-04 12:13 --d----- c:\program files\LimeWire
2009-05-04 03:53 6,130 a------- c:\windows\system32\1529859ruz554.ocx
2009-05-03 21:50 15,454 a------- c:\windows\5zbdv9r14545.ocx
2009-05-03 13:57 --d----- c:\programdata\vamegeye
2009-05-03 13:57 --d----- c:\programdata\rafarade
2009-05-03 13:57 --d----- c:\progra~2\vamegeye
2009-05-03 13:57 --d----- c:\progra~2\rafarade
2009-05-03 05:50 120,905,687 a------- c:\windows\MEMORY.DMP
2009-05-02 23:36 --d----- c:\programdata\tulozuru
2009-05-02 23:36 --d----- c:\progra~2\tulozuru
2009-05-02 23:36 --d----- c:\programdata\mayunosi
2009-05-02 23:36 --d----- c:\programdata\bohonusa
2009-05-02 23:36 --d----- c:\progra~2\mayunosi
2009-05-02 23:36 --d----- c:\progra~2\bohonusa
2009-05-02 11:35 --d----- c:\programdata\tesifeke
2009-05-02 11:35 --d----- c:\programdata\sakiduru
2009-05-02 11:35 --d----- c:\progra~2\tesifeke
2009-05-02 11:35 --d----- c:\progra~2\sakiduru
2009-05-02 11:35 --d----- c:\programdata\vusurewi
2009-05-02 11:35 --d----- c:\progra~2\vusurewi
2009-05-01 11:23 --d----- c:\users\twilli~2\appdata\roaming\Graboid Inc
2009-05-01 11:00 --d----- c:\programdata\vuboduje
2009-05-01 11:00 --d----- c:\programdata\huzaweli
2009-05-01 11:00 --d----- c:\progra~2\vuboduje
2009-05-01 11:00 --d----- c:\progra~2\huzaweli
2009-05-01 11:00 --d----- c:\programdata\gadapobo
2009-05-01 11:00 --d----- c:\progra~2\gadapobo
2009-04-30 14:12 --d----- c:\users\twilli~2\appdata\roaming\MozillaControl
2009-04-30 14:09 --d----- c:\program files\Mozilla ActiveX Control v1.7.12
2009-04-30 14:05 --d----- c:\program files\Graboid
2009-04-30 13:28 --d----- c:\programdata\wafasika
2009-04-30 13:28 --d----- c:\programdata\dohososa
2009-04-30 13:28 --d----- c:\programdata\dititeha
2009-04-30 13:28 --d----- c:\progra~2\wafasika
2009-04-30 13:28 --d----- c:\progra~2\dohososa
2009-04-30 13:28 --d----- c:\progra~2\dititeha
2009-04-30 13:27 --d----- c:\programdata\nogayeda
2009-04-30 13:27 --d----- c:\programdata\ladahawe
2009-04-30 13:27 --d----- c:\progra~2\nogayeda
2009-04-30 13:27 --d----- c:\progra~2\ladahawe
2009-04-30 13:27 --d----- c:\programdata\dubuwemo
2009-04-30 13:27 --d----- c:\progra~2\dubuwemo
2009-04-30 13:27 --d----- c:\programdata\namogizu
2009-04-30 13:27 --d----- c:\progra~2\namogizu
2009-04-29 08:14 --d----- c:\programdata\pazoyoli
2009-04-29 08:14 --d----- c:\progra~2\pazoyoli
2009-04-29 08:14 --d----- c:\programdata\gikuyaju
2009-04-29 08:14 --d----- c:\progra~2\gikuyaju
2009-04-28 11:04 --d----- c:\programdata\viveveno
2009-04-28 11:04 --d----- c:\programdata\tupurevo
2009-04-28 11:04 --d----- c:\progra~2\viveveno
2009-04-28 11:04 --d----- c:\progra~2\tupurevo
2009-04-27 13:52 --d----- c:\programdata\tesegigo
2009-04-27 13:52 --d----- c:\progra~2\tesegigo
2009-04-27 13:52 --d----- c:\programdata\tifizafe
2009-04-27 13:52 --d----- c:\programdata\konemabo
2009-04-27 13:52 --d----- c:\progra~2\tifizafe
2009-04-27 13:52 --d----- c:\progra~2\konemabo
2009-04-27 11:09 12,740 a------- c:\windows\z0865spa9bot55f.dll
2009-04-27 03:39 16,716 a------- c:\windows\system32\zee3t9reat48725.dll
2009-04-26 12:04 --d----- c:\programdata\remowoka
2009-04-26 12:04 --d----- c:\programdata\menukabu
2009-04-26 12:04 --d----- c:\progra~2\remowoka
2009-04-26 12:04 --d----- c:\progra~2\menukabu
2009-04-26 12:04 --d----- c:\programdata\vativise
2009-04-26 12:04 --d----- c:\progra~2\vativise
2009-04-26 10:30 3,035 a------- c:\windows\270cdow5lza9er2900.exe
2009-04-26 00:04 --d----- c:\programdata\zirigofo
2009-04-26 00:04 --d----- c:\programdata\jafofega
2009-04-26 00:04 --d----- c:\progra~2\zirigofo
2009-04-26 00:04 --d----- c:\progra~2\jafofega
2009-04-26 00:04 --d----- c:\programdata\dinuhago
2009-04-26 00:04 --d----- c:\progra~2\dinuhago
2009-04-24 10:50 --d----- c:\users\twilli~2\appdata\roaming\Lunascape
2009-04-24 10:47 --d----- c:\program files\Lunascape
2009-04-24 10:20 --d----- c:\users\twilli~2\appdata\roaming\Radical Software Ltd
2009-04-24 10:17 --d----- c:\program files\Wyzo
2009-04-24 08:42 --d----- c:\programdata\hegizuku
2009-04-24 08:42 --d----- c:\programdata\fusizota
2009-04-24 08:42 --d----- c:\progra~2\hegizuku
2009-04-24 08:42 --d----- c:\progra~2\fusizota
2009-04-24 08:42 --d----- c:\programdata\sufarudi
2009-04-24 08:42 --d----- c:\progra~2\sufarudi
2009-04-23 17:12 3,307 a------- c:\windows\6530ba5zdoo92318.ocx
2009-04-23 16:24 14,181 a------- c:\windows\59990virzs79a.cpl
2009-04-23 14:47 --d----- c:\programdata\rofefuzi
2009-04-23 14:47 --d----- c:\programdata\dasabisi
2009-04-23 14:47 --d----- c:\progra~2\rofefuzi
2009-04-23 14:47 --d----- c:\progra~2\dasabisi
2009-04-23 14:47 --d----- c:\programdata\wiwirira
2009-04-23 14:47 --d----- c:\progra~2\wiwirira
2009-04-22 13:33 --d----- c:\programdata\zinetozu
2009-04-22 13:33 --d----- c:\progra~2\zinetozu
2009-04-22 13:33 --d----- c:\programdata\wevozahe
2009-04-22 13:33 --d----- c:\programdata\vufulowe
2009-04-22 13:33 --d----- c:\progra~2\wevozahe
2009-04-22 13:33 --d----- c:\progra~2\vufulowe
2009-04-22 01:42 14,315 a------- c:\windows\6069threzt6454.exe
2009-04-21 05:58 9,983 a------- c:\windows\system32\76bcthzeat95489.bin
2009-04-20 18:59 --d----- c:\program files\VideoLAN
2009-04-20 14:01 --d----- c:\programdata\kazepala
2009-04-20 14:01 --d----- c:\progra~2\kazepala
2009-04-20 14:01 --d----- c:\programdata\zamivoru
2009-04-20 14:01 --d----- c:\programdata\hilijizi
2009-04-20 14:01 --d----- c:\progra~2\zamivoru
2009-04-20 14:01 --d----- c:\progra~2\hilijizi
2009-04-20 11:09 4,327 a------- c:\windows\system32\4af6zpar9e13865.dll
2009-04-20 02:01 --d----- c:\programdata\sitoyufe
2009-04-20 02:01 --d----- c:\progra~2\sitoyufe
2009-04-20 02:01 --d----- c:\programdata\jovireha
2009-04-20 02:01 --d----- c:\progra~2\jovireha
2009-04-20 02:01 --d----- c:\programdata\bakevibe
2009-04-20 02:01 --d----- c:\progra~2\bakevibe
2009-04-19 23:46 12,595 a------- c:\windows\system32\15d49hreaz29776.bin

==================== Find3M ====================

2009-05-16 13:43 1,097,728 a------- c:\windows\system32\setup2.exe
2009-05-15 14:32 16,113 a------- c:\windows\452ds9ywarez780.exe
2009-04-18 04:31 15,917 a------- c:\windows\system32\z3846spa9botd15.exe
2009-04-17 10:27 17,868 a------- c:\windows\system32\11195ackdo9rz21.dll
2009-04-14 07:46 6,867 a------- c:\windows\system32\68f5down9oader24z.dll
2009-04-14 05:25 16,782 a------- c:\windows\system32\3a55tzrea915490.dll
2009-04-12 23:23 10,563 a------- c:\windows\system32\5169hizf2233.exe
2009-04-09 12:31 13,752 a------- c:\windows\system32\2916virus7z5.bin
2009-04-07 09:31 16,706 a------- c:\windows\system32\59e5bazkdoo9923.bin
2009-04-03 13:06 7,782 a------- c:\windows\system32\75a05zr9629.bin
2009-04-02 00:30 13,833 a------- c:\windows\system32\59z5spambot3d8.exe
2009-03-28 00:42 13,093 a------- c:\windows\70459zwnloader1863.dll
2009-03-24 16:15 10,914 a------- c:\windows\system32\202z5vir9s309.dll
2009-03-18 09:59 12,443 a------- c:\windows\1zabackd9or8725.exe
2009-03-16 22:38 40,960 a------- c:\windows\apppatch\apihex86.dll
2009-03-16 22:38 13,824 a------- c:\windows\system32\apilogen.dll
2009-03-16 22:38 24,064 a------- c:\windows\system32\amxread.dll
2009-03-16 05:19 11,183 a------- c:\windows\system32\6a9eb5ckdz9r2002.exe
2009-03-14 12:14 16,615 a------- c:\windows\6571down9oazer2954.dll
2009-03-14 02:20 3,575 a------- c:\windows\system32\3620spyz5re2669.exe
2009-03-13 18:28 4,893 a------- c:\windows\system32\225159orm37ez.exe
2009-03-11 20:47 3,444 a------- c:\windows\a5dthrez919868.bin
2009-03-10 08:54 13,350 a------- c:\windows\system32\7055downloazer5916.exe
2009-03-07 05:15 13,029 a------- c:\windows\z709sp95se2796.bin
2009-03-02 23:46 3,599,328 a------- c:\windows\system32\ntkrnlpa.exe
2009-03-02 23:46 3,547,632 a------- c:\windows\system32\ntoskrnl.exe
2009-03-02 23:40 827,392 a------- c:\windows\system32\wininet.dll
2009-03-02 23:39 183,296 a------- c:\windows\system32\sdohlp.dll
2009-03-02 23:39 551,424 a------- c:\windows\system32\rpcss.dll
2009-03-02 23:39 26,112 a------- c:\windows\system32\printfilterpipelineprxy.dll
2009-03-02 23:37 78,336 a------- c:\windows\system32\ieencode.dll
2009-03-02 23:37 98,304 a------- c:\windows\system32\iasrecst.dll
2009-03-02 23:37 54,784 a------- c:\windows\system32\iasads.dll
2009-03-02 23:37 44,032 a------- c:\windows\system32\iasdatastore.dll
2009-03-02 22:04 666,624 a------- c:\windows\system32\printfilterpipelinesvc.exe
2009-03-02 21:38 17,408 a------- c:\windows\system32\iashost.exe
2009-03-02 21:28 26,624 a------- c:\windows\system32\ieUnatt.exe
2009-03-02 12:23 6,583 a------- c:\windows\system32\45z1addware9477.exe
2009-02-18 14:41 2,897 a------- c:\windows\20z429ack5ool242.exe
2008-11-24 14:02 174 a--sh--- c:\program files\desktop.ini
2008-11-24 13:56 86,016 a------- c:\windows\inf\infstor.dat
2008-11-24 13:56 51,200 a------- c:\windows\inf\infpub.dat
2008-11-24 13:56 86,016 a------- c:\windows\inf\infstrng.dat
2008-11-24 13:42 665,600 a------- c:\windows\inf\drvindex.dat
2007-10-30 00:16 262,144 a------- c:\progra~2\ntuser.dat
2006-11-02 07:42 287,440 a------- c:\windows\inf\perflib\0409\perfi.dat
2006-11-02 07:42 287,440 a------- c:\windows\inf\perflib\0409\perfh.dat
2006-11-02 07:42 30,674 a------- c:\windows\inf\perflib\0409\perfd.dat
2006-11-02 07:42 30,674 a------- c:\windows\inf\perflib\0409\perfc.dat
2006-11-02 04:20 287,440 a------- c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 04:20 287,440 a------- c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 04:20 30,674 a------- c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 04:20 30,674 a------- c:\windows\inf\perflib\0000\perfc.dat
2008-10-18 16:23 16,384 a--sh--- c:\windows\serviceprofiles\localservice\appdata\local\microsoft\windows\history\history.ie5\index.dat
2008-10-18 16:23 32,768 a--sh--- c:\windows\serviceprofiles\localservice\appdata\local\microsoft\windows\temporary internet files\content.ie5\index.dat
2008-10-18 16:23 16,384 a--sh--- c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\windows\cookies\index.dat
2007-02-20 01:59 8,192 a--sh--- c:\windows\users\default\NTUSER.DAT

============= FINISH: 14:28:53.25 ===============

Wow, what a mess you have here.

• Download combofix from here
  Link 1
  Link 2
  
  1. If you are using Firefox, make sure that your download settings are as follows:
  
  * Tools->Options->Main tab
  * Set to "Always ask me where to Save the files".
  
  2. During the download, rename Combofix to Combo-Fix as follows:
  
  
  
  
  
  3. It is important you rename Combofix during the download, but not after.
  4. Please do not rename Combofix to other names, but only to the one indicated.
  5. Close any open browsers.
  6. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
  
  
• We need to disable your local AV (Anti-virus) before running Combofix.
  
• See HERE for how to disable your AV. (Windows OneCare)
  
• Double click on ComboFix.exe.
  
• Follow the prompts. NOTE:
  
• Allow combofix to run.
  
• Post C:\combofix.txt back here.
  
  Note:
  Do not mouseclick combofix's window whilst it's running. That may cause it to stall.
  

it said it might be tainted

Okay, stop it from running for now, we'll try using it later. For now, we'll try another method.

Please download the current version of HijackThis from HERE

• Double click and run the installer.
  
• It will install to C:\Program Files\Trend Micro\HijackThis\hijackthis.exe
  
• After installing, you should get the user agreement, press accept and Hijack This will run.
  
• Select Do a system scan and save a log file. This will open a notepad file of everything Hijack This found, copy and paste it back here.
  

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:25:29 PM, on 5/19/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18226)
Boot mode: Safe mode with network support

Running processes:
C:\Windows\Explorer.EXE
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Fenrir & Co\Sleipnir\bin\Sleipnir.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.myspace.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: SITEguard BHO - {1827766B-9F49-4854-8034-F6EE26FCB1EC} - C:\Program Files\STOPzilla!\SZSG.dll
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: ALOT Toolbar - {5AA2BA46-9913-4dc7-9620-69AB0FA17AE7} - C:\Program Files\alot\bin\alot.dll
O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb124\Dealio.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\Program Files\Java\jre1.6.0\bin\ssv.dll
O2 - BHO: (Gaming)2 - {971F630E-AD68-4d6e-B0C3-1C627AAC80F1} - C:\Program Files\GamingSquared\Gaming2\G2IE_v1042.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O2 - BHO: STOPzilla Browser Helper Object - {E3215F20-3212-11D6-9F8B-00D0B743919D} - C:\Program Files\STOPzilla!\SZIEBHO.dll
O2 - BHO: TBSB04757 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\Freeze.com Toolbar\freeze_us.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O3 - Toolbar: ALOT Toolbar - {5AA2BA46-9913-4dc7-9620-69AB0FA17AE7} - C:\Program Files\alot\bin\alot.dll
O3 - Toolbar: STOPzilla - {98828DED-A591-462F-83BA-D2F62A68B8B8} - C:\Program Files\STOPzilla!\SZSG.dll
O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb124\Dealio.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [ECenter] c:\dell\E-Center\EULALauncher.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1191802956\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SigmatelSysTrayApp] sttray.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [WinBlueSoft] C:\Program Files\WinBlueSoft Software\WinBlueSoft\WinBlueSoft.exe -min
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [DellTransferAgent] "C:\ProgramData\Dell\TransferAgent\TransferAgent.exe"
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\twilliams08\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [DumbIdol] "C:\ProgramData\DALE 01 01.7dah8"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [vejamevuyo] Rundll32.exe "C:\ProgramData\yamomenu\yamomenu.dll",s
O4 - HKCU\..\Run: [AVScan] C:\Users\twilliams08\AppData\Roaming\winav.exe
O4 - HKCU\..\Run: [DigiFast] C:\Users\twilliams08\AppData\Roaming\digifast\digifast.exe
O4 - HKCU\..\Run: [SfKg6wIPuSpdc] C:\Users\twilliams08\AppData\Roaming\Microsoft\Windows\sxhfqws.exe
O4 - HKCU\..\Run: [setup2.exe] C:\Windows\system32\setup2.exe
O4 - HKCU\..\Run: [RegistryMechanic] C:\Program Files\Registry Mechanic\RMTray.exe /H
O4 - HKCU\..\Run: [AROReminder] C:\Program Files\Advanced Registry Optimizer\ARO.exe -rem
O4 - HKCU\..\Run: [a0ce49d1] rundll32.exe "C:\ProgramData\libinisu\libinisu.dll",b
O4 - HKCU\..\Run: [CPMa3fd7a4d] Rundll32.exe "C:\ProgramData\wavemile\wavemile.dll",a
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Startup: Sleipnir Speed Launcher.lnk = ?
O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe
O4 - Global Startup: ymetray.lnk = C:\Program Files\Yahoo!\Yahoo! Music Jukebox\ymetray.exe
O8 - Extra context menu item: Compare Prices with &Dealio - C:\Users\twilliams08\AppData\LocalLow\Dealio\kb124\res\DealioSearch.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Open In New Document - file:///C:/Program Files/Muddly/muddlycontext.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:\Program Files\Java\jre1.6.0\bin\npjpi160.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files\Bonjour\ExplorerPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb124\Dealio.dll
O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb124\Dealio.dll
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.112.81,85.255.112.148
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.112.81,85.255.112.148
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.112.81,85.255.112.148
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll
O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll (file missing)
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: dlcf_device - - C:\Windows\system32\dlcfcoms.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Intuit Update Service (IntuitUpdateService) - Intuit Inc. - C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe
O23 - Service: McAfee Real-time Scanner (McShield) - Unknown owner - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe (file missing)
O23 - Service: McAfee SystemGuards (McSysmon) - Unknown owner - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe (file missing)
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: STOPzilla Service (szserver) - iS3, Inc. - C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe
O23 - Service: Viewpoint Manager Service - Unknown owner - C:\Program Files\Viewpoint\Common\ViewpointService.exe (file missing)
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 10947 bytes

Hello.

• Open HijackThis
  
• Choose "Do a system scan only"
  
• Check the boxes in front of these lines:
  
  
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
  O4 - HKCU\..\Run: [DumbIdol] "C:\ProgramData\DALE 01 01.7dah8"
  O4 - HKCU\..\Run: [vejamevuyo] Rundll32.exe "C:\ProgramData\yamomenu\yamomenu.dll",s
  O4 - HKCU\..\Run: [AVScan] C:\Users\twilliams08\AppData\Roaming\winav.exe
  O4 - HKCU\..\Run: [DigiFast] C:\Users\twilliams08\AppData\Roaming\digifast\digifast.exe
  O4 - HKCU\..\Run: [SfKg6wIPuSpdc] C:\Users\twilliams08\AppData\Roaming\Microsoft\Windows\sxhfqws.exe
  O4 - HKCU\..\Run: [setup2.exe] C:\Windows\system32\setup2.exe
  O4 - HKCU\..\Run: [RegistryMechanic] C:\Program Files\Registry Mechanic\RMTray.exe /H
  O4 - HKCU\..\Run: [AROReminder] C:\Program Files\Advanced Registry Optimizer\ARO.exe -rem
  O4 - HKCU\..\Run: [a0ce49d1] rundll32.exe "C:\ProgramData\libinisu\libinisu.dll",b
  O4 - HKCU\..\Run: [CPMa3fd7a4d] Rundll32.exe "C:\ProgramData\wavemile\wavemile.dll",a
  O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.112.81,85.255.112.148
  O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.112.81,85.255.112.148
  O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.112.81,85.255.112.148
  
  
  
• Press "Fix Checked"
  
• Close Hijack This.
  

Please download the OTMoveIt3 by OldTimer.

• Save it to your desktop.
  
• Please double-click OTMoveIt3.exe to run it.
  
• Copy the bolded text below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):
  
  
  :files
  C:\ProgramData\DALE 01 01.7dah8
  C:\Lop SD
  C:\Users\twilliams08\AppData\Roaming\Microsoft\Windows\sxhfqws.exe
  c:\programdata\libinisu
  c:\programdata\bitonuta
  c:\progra~2\libinisu
  c:\progra~2\bitonuta
  c:\programdata\dutesora
  c:\programdata\budidepu
  c:\progra~2\dutesora
  c:\progra~2\budidepu
  c:\programdata\wutakizu
  c:\programdata\fowerovo
  c:\progra~2\wutakizu
  c:\progra~2\fowerovo
  c:\programdata\tijevufi
  c:\programdata\mihamake
  c:\progra~2\tijevufi
  c:\progra~2\mihamake
  c:\windows\7cc09ddware3z255.ocx
  c:\program files\AskBarDis
  c:\programdata\rumenite
  c:\programdata\hawupopa
  c:\progra~2\rumenite
  c:\progra~2\hawupopa
  c:\windows\5177hazktoo5499.exe
  c:\programdata\pukugusa
  c:\programdata\nizoguya
  c:\progra~2\pukugusa
  c:\progra~2\nizoguya
  c:\users\twilli~2\appdata\roaming\digifast
  c:\windows\f5zownloa59r645.dll
  c:\windows\system32\21985tr5z14e.dll
  c:\windows\3323sparsz5859.bin
  c:\windows\9158zir3135.dll
  c:\users\twilli~2\appdata\roaming\asd.bat
  c:\programdata\lubudeyu
  c:\programdata\hebebubo
  c:\progra~2\lubudeyu
  c:\progra~2\hebebubo
  c:\users\twilli~2\appdata\roaming\winav.exe
  c:\users\twilli~2\appdata\roaming\ptidle
  c:\windows\system32\gxvxccounter
  c:\programdata\wukoraga
  c:\programdata\nilejonu
  c:\progra~2\wukoraga
  c:\progra~2\nilejonu
  c:\windows\system32\7z9dvir50649.bin
  c:\programdata\pinadili
  c:\programdata\jitabine
  c:\progra~2\pinadili
  c:\progra~2\jitabine
  c:\windows\9a90stezl2568.ocx
  c:\programdata\muvetuvo
  c:\programdata\bejaline
  c:\progra~2\muvetuvo
  c:\progra~2\bejaline
  c:\programdata\wosawamu
  c:\progra~2\wosawamu
  c:\programdata\rabivufu
  c:\progra~2\rabivufu
  c:\windows\system32\95e9zac5door786.exe
  c:\programdata\wipalego
  c:\progra~2\wipalego
  c:\programdata\guserohu
  c:\progra~2\guserohu
  c:\windows\6554vi999z.cpl
  c:\programdata\zogapero
  c:\programdata\foweriyo
  c:\progra~2\zogapero
  c:\progra~2\foweriyo
  c:\windows\system32\c54vzr9933.bin
  c:\programdata\yamomenu
  c:\programdata\puzesale
  c:\programdata\gazitopu
  c:\progra~2\yamomenu
  c:\progra~2\puzesale
  c:\progra~2\gazitopu
  c:\programdata\wapoyali
  c:\programdata\juyarono
  c:\progra~2\wapoyali
  c:\progra~2\juyarono
  c:\programdata\weyokupi
  c:\progra~2\weyokupi
  c:\windows\system32\95advir3162z.cpl
  c:\programdata\hewalote
  c:\progra~2\hewalote
  c:\programdata\yulejoka
  c:\progra~2\yulejoka
  c:\programdata\keyisori
  c:\progra~2\keyisori
  c:\programdata\fuhiheje
  c:\progra~2\fuhiheje
  c:\programdata\vemogefi
  c:\programdata\dewegabu
  c:\progra~2\vemogefi
  c:\progra~2\dewegabu
  c:\programdata\rewufufu
  c:\programdata\nuhizume
  c:\progra~2\rewufufu
  c:\progra~2\nuhizume
  c:\users\twilli~2\appdata\roaming\LimeWire
  c:\program files\LimeWire
  c:\windows\system32\1529859ruz554.ocx
  c:\windows\5zbdv9r14545.ocx
  c:\programdata\vamegeye
  c:\programdata\rafarade
  c:\progra~2\vamegeye
  c:\progra~2\rafarade
  c:\programdata\tulozuru
  c:\progra~2\tulozuru
  c:\programdata\mayunosi
  c:\programdata\bohonusa
  c:\progra~2\mayunosi
  c:\progra~2\bohonusa
  c:\programdata\tesifeke
  c:\programdata\sakiduru
  c:\progra~2\tesifeke
  c:\progra~2\sakiduru
  c:\programdata\vusurewi
  c:\progra~2\vusurewi
  c:\programdata\vuboduje
  c:\programdata\huzaweli
  c:\progra~2\vuboduje
  c:\progra~2\huzaweli
  c:\programdata\gadapobo
  c:\progra~2\gadapobo
  c:\programdata\wafasika
  c:\programdata\dohososa
  c:\programdata\dititeha
  c:\progra~2\wafasika
  c:\progra~2\dohososa
  c:\progra~2\dititeha
  c:\programdata\nogayeda
  c:\programdata\ladahawe
  c:\progra~2\nogayeda
  c:\progra~2\ladahawe
  c:\programdata\dubuwemo
  c:\progra~2\dubuwemo
  c:\programdata\namogizu
  c:\progra~2\namogizu
  c:\programdata\pazoyoli
  c:\progra~2\pazoyoli
  c:\programdata\gikuyaju
  c:\progra~2\gikuyaju
  c:\programdata\viveveno
  c:\programdata\tupurevo
  c:\progra~2\viveveno
  c:\progra~2\tupurevo
  c:\programdata\tesegigo
  c:\progra~2\tesegigo
  c:\programdata\tifizafe
  c:\programdata\konemabo
  c:\progra~2\tifizafe
  c:\progra~2\konemabo
  c:\windows\z0865spa9bot55f.dll
  c:\windows\system32\zee3t9reat48725.dll
  c:\programdata\remowoka
  c:\programdata\menukabu
  c:\progra~2\remowoka
  c:\progra~2\menukabu
  c:\programdata\vativise
  c:\progra~2\vativise
  c:\windows\270cdow5lza9er2900.exe
  c:\programdata\zirigofo
  c:\programdata\jafofega
  c:\progra~2\zirigofo
  c:\progra~2\jafofega
  c:\programdata\dinuhago
  c:\progra~2\dinuhago
  c:\programdata\hegizuku
  c:\programdata\fusizota
  c:\progra~2\hegizuku
  c:\progra~2\fusizota
  c:\programdata\sufarudi
  c:\progra~2\sufarudi
  c:\windows\6530ba5zdoo92318.ocx
  c:\windows\59990virzs79a.cpl
  c:\programdata\rofefuzi
  c:\programdata\dasabisi
  c:\progra~2\rofefuzi
  c:\progra~2\dasabisi
  c:\programdata\wiwirira
  c:\progra~2\wiwirira
  c:\programdata\zinetozu
  c:\progra~2\zinetozu
  c:\programdata\wevozahe
  c:\programdata\vufulowe
  c:\progra~2\wevozahe
  c:\progra~2\vufulowe
  c:\windows\6069threzt6454.exe
  c:\windows\system32\76bcthzeat95489.bin
  c:\program files\VideoLAN
  c:\programdata\kazepala
  c:\progra~2\kazepala
  c:\programdata\zamivoru
  c:\programdata\hilijizi
  c:\progra~2\zamivoru
  c:\progra~2\hilijizi
  c:\windows\system32\4af6zpar9e13865.dll
  c:\programdata\sitoyufe
  c:\progra~2\sitoyufe
  c:\programdata\jovireha
  c:\progra~2\jovireha
  c:\programdata\bakevibe
  c:\progra~2\bakevibe
  c:\windows\system32\15d49hreaz29776.bin
  c:\windows\system32\setup2.exe
  c:\windows\452ds9ywarez780.exe
  c:\windows\system32\z3846spa9botd15.exe
  c:\windows\system32\11195ackdo9rz21.dll
  c:\windows\system32\68f5down9oader24z.dll
  c:\windows\system32\3a55tzrea915490.dll
  c:\windows\system32\5169hizf2233.exe
  c:\windows\system32\2916virus7z5.bin
  c:\windows\system32\59e5bazkdoo9923.bin
  c:\windows\system32\75a05zr9629.bin
  c:\windows\system32\59z5spambot3d8.exe
  c:\windows\70459zwnloader1863.dll
  c:\windows\system32\202z5vir9s309.dll
  c:\windows\1zabackd9or8725.exe
  c:\windows\system32\6a9eb5ckdz9r2002.exe
  c:\windows\6571down9oazer2954.dll
  c:\windows\system32\3620spyz5re2669.exe
  c:\windows\system32\225159orm37ez.exe
  c:\windows\a5dthrez919868.bin
  c:\windows\system32\7055downloazer5916.exe
  c:\windows\z709sp95se2796.bin
  c:\windows\system32\45z1addware9477.exe
  c:\windows\20z429ack5ool242.exe
  
  
  
• Return to OTMoveIt3, right click in the "Paste instructions for items to be Moved" window (under the light blue bar) and choose Paste.
  
• Click the red Moveit! button.
  
• Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
  
• Close OTMoveIt3
  

If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

Please post the OTMoveIt log.

========== FILES ==========
C:\ProgramData\DALE 01 01.7dah8 moved successfully.
C:\Lop SD\Backup-Lop\Viewpoint moved successfully.
C:\Lop SD\Backup-Lop\Users\TWILLI~2\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\TorrentSpeeder moved successfully.
C:\Lop SD\Backup-Lop\Users\TWILLI~2\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs moved successfully.
C:\Lop SD\Backup-Lop\Users\TWILLI~2\AppData\Roaming\MICROS~1\Windows\STARTM~1 moved successfully.
C:\Lop SD\Backup-Lop\Users\TWILLI~2\AppData\Roaming\MICROS~1\Windows\Cookies moved successfully.
C:\Lop SD\Backup-Lop\Users\TWILLI~2\AppData\Roaming\MICROS~1\Windows moved successfully.
C:\Lop SD\Backup-Lop\Users\TWILLI~2\AppData\Roaming\MICROS~1 moved successfully.
C:\Lop SD\Backup-Lop\Users\TWILLI~2\AppData\Roaming moved successfully.
C:\Lop SD\Backup-Lop\Users\TWILLI~2\AppData\Local\Temp moved successfully.
C:\Lop SD\Backup-Lop\Users\TWILLI~2\AppData\Local moved successfully.
C:\Lop SD\Backup-Lop\Users\TWILLI~2\AppData moved successfully.
C:\Lop SD\Backup-Lop\Users\TWILLI~2 moved successfully.
C:\Lop SD\Backup-Lop\Users moved successfully.
C:\Lop SD\Backup-Lop\Reg moved successfully.
C:\Lop SD\Backup-Lop\ProgramData\part dead amok eggs moved successfully.
C:\Lop SD\Backup-Lop\ProgramData moved successfully.
C:\Lop SD\Backup-Lop\Program Files\TorrentSpeeder moved successfully.
C:\Lop SD\Backup-Lop\Program Files moved successfully.
C:\Lop SD\Backup-Lop\Hosts moved successfully.
C:\Lop SD\Backup-Lop moved successfully.
C:\Lop SD moved successfully.
C:\Users\twilliams08\AppData\Roaming\Microsoft\Windows\sxhfqws.exe moved successfully.
c:\programdata\libinisu moved successfully.
c:\programdata\bitonuta moved successfully.
File/Folder c:\progra~2\libinisu not found.
File/Folder c:\progra~2\bitonuta not found.
c:\programdata\dutesora moved successfully.
c:\programdata\budidepu moved successfully.
File/Folder c:\progra~2\dutesora not found.
File/Folder c:\progra~2\budidepu not found.
c:\programdata\wutakizu moved successfully.
c:\programdata\fowerovo moved successfully.
File/Folder c:\progra~2\wutakizu not found.
File/Folder c:\progra~2\fowerovo not found.
c:\programdata\tijevufi moved successfully.
c:\programdata\mihamake moved successfully.
File/Folder c:\progra~2\tijevufi not found.
File/Folder c:\progra~2\mihamake not found.
LoadLibrary failed for c:\windows\7cc09ddware3z255.ocx
c:\windows\7cc09ddware3z255.ocx NOT unregistered.
c:\windows\7cc09ddware3z255.ocx moved successfully.
c:\program files\AskBarDis\bar\Settings moved successfully.
c:\program files\AskBarDis\bar\bin moved successfully.
c:\program files\AskBarDis\bar moved successfully.
c:\program files\AskBarDis moved successfully.
c:\programdata\rumenite moved successfully.
c:\programdata\hawupopa moved successfully.
File/Folder c:\progra~2\rumenite not found.
File/Folder c:\progra~2\hawupopa not found.
c:\windows\5177hazktoo5499.exe moved successfully.
c:\programdata\pukugusa moved successfully.
c:\programdata\nizoguya moved successfully.
File/Folder c:\progra~2\pukugusa not found.
File/Folder c:\progra~2\nizoguya not found.
c:\users\twilli~2\appdata\roaming\digifast moved successfully.
LoadLibrary failed for c:\windows\f5zownloa59r645.dll
c:\windows\f5zownloa59r645.dll NOT unregistered.
c:\windows\f5zownloa59r645.dll moved successfully.
LoadLibrary failed for c:\windows\system32\21985tr5z14e.dll
c:\windows\system32\21985tr5z14e.dll NOT unregistered.
c:\windows\system32\21985tr5z14e.dll moved successfully.
c:\windows\3323sparsz5859.bin moved successfully.
LoadLibrary failed for c:\windows\9158zir3135.dll
c:\windows\9158zir3135.dll NOT unregistered.
c:\windows\9158zir3135.dll moved successfully.
c:\users\twilli~2\appdata\roaming\asd.bat moved successfully.
c:\programdata\lubudeyu moved successfully.
c:\programdata\hebebubo moved successfully.
File/Folder c:\progra~2\lubudeyu not found.
File/Folder c:\progra~2\hebebubo not found.
c:\users\twilli~2\appdata\roaming\winav.exe moved successfully.
c:\users\twilli~2\appdata\roaming\ptidle moved successfully.
File/Folder c:\windows\system32\gxvxccounter not found.
c:\programdata\wukoraga moved successfully.
c:\programdata\nilejonu moved successfully.
File/Folder c:\progra~2\wukoraga not found.
File/Folder c:\progra~2\nilejonu not found.
c:\windows\system32\7z9dvir50649.bin moved successfully.
c:\programdata\pinadili moved successfully.
c:\programdata\jitabine moved successfully.
File/Folder c:\progra~2\pinadili not found.
File/Folder c:\progra~2\jitabine not found.
LoadLibrary failed for c:\windows\9a90stezl2568.ocx
c:\windows\9a90stezl2568.ocx NOT unregistered.
c:\windows\9a90stezl2568.ocx moved successfully.
c:\programdata\muvetuvo moved successfully.
c:\programdata\bejaline moved successfully.
File/Folder c:\progra~2\muvetuvo not found.
File/Folder c:\progra~2\bejaline not found.
c:\programdata\wosawamu moved successfully.
File/Folder c:\progra~2\wosawamu not found.
c:\programdata\rabivufu moved successfully.
File/Folder c:\progra~2\rabivufu not found.
c:\windows\system32\95e9zac5door786.exe moved successfully.
c:\programdata\wipalego moved successfully.
File/Folder c:\progra~2\wipalego not found.
c:\programdata\guserohu moved successfully.
File/Folder c:\progra~2\guserohu not found.
c:\windows\6554vi999z.cpl moved successfully.
c:\programdata\zogapero moved successfully.
c:\programdata\foweriyo moved successfully.
File/Folder c:\progra~2\zogapero not found.
File/Folder c:\progra~2\foweriyo not found.
c:\windows\system32\c54vzr9933.bin moved successfully.
c:\programdata\yamomenu moved successfully.
c:\programdata\puzesale moved successfully.
c:\programdata\gazitopu moved successfully.
File/Folder c:\progra~2\yamomenu not found.
File/Folder c:\progra~2\puzesale not found.
File/Folder c:\progra~2\gazitopu not found.
c:\programdata\wapoyali moved successfully.
c:\programdata\juyarono moved successfully.
File/Folder c:\progra~2\wapoyali not found.
File/Folder c:\progra~2\juyarono not found.
c:\programdata\weyokupi moved successfully.
File/Folder c:\progra~2\weyokupi not found.
c:\windows\system32\95advir3162z.cpl moved successfully.
c:\programdata\hewalote moved successfully.
File/Folder c:\progra~2\hewalote not found.
c:\programdata\yulejoka moved successfully.
File/Folder c:\progra~2\yulejoka not found.
c:\programdata\keyisori moved successfully.
File/Folder c:\progra~2\keyisori not found.
c:\programdata\fuhiheje moved successfully.
File/Folder c:\progra~2\fuhiheje not found.
c:\programdata\vemogefi moved successfully.
c:\programdata\dewegabu moved successfully.
File/Folder c:\progra~2\vemogefi not found.
File/Folder c:\progra~2\dewegabu not found.
c:\programdata\rewufufu moved successfully.
c:\programdata\nuhizume moved successfully.
File/Folder c:\progra~2\rewufufu not found.
File/Folder c:\progra~2\nuhizume not found.
c:\users\twilli~2\appdata\roaming\LimeWire\themes\windows_theme moved successfully.
c:\users\twilli~2\appdata\roaming\LimeWire\themes moved successfully.
c:\users\twilli~2\appdata\roaming\LimeWire\promotion moved successfully.
c:\users\twilli~2\appdata\roaming\LimeWire\.AppSpecialShare moved successfully.
c:\users\twilli~2\appdata\roaming\LimeWire moved successfully.
c:\program files\LimeWire\lib moved successfully.
c:\program files\LimeWire moved successfully.
LoadLibrary failed for c:\windows\system32\1529859ruz554.ocx
c:\windows\system32\1529859ruz554.ocx NOT unregistered.
c:\windows\system32\1529859ruz554.ocx moved successfully.
LoadLibrary failed for c:\windows\5zbdv9r14545.ocx
c:\windows\5zbdv9r14545.ocx NOT unregistered.
c:\windows\5zbdv9r14545.ocx moved successfully.
c:\programdata\vamegeye moved successfully.
c:\programdata\rafarade moved successfully.
File/Folder c:\progra~2\vamegeye not found.
File/Folder c:\progra~2\rafarade not found.
c:\programdata\tulozuru moved successfully.
File/Folder c:\progra~2\tulozuru not found.
c:\programdata\mayunosi moved successfully.
c:\programdata\bohonusa moved successfully.
File/Folder c:\progra~2\mayunosi not found.
File/Folder c:\progra~2\bohonusa not found.
c:\programdata\tesifeke moved successfully.
c:\programdata\sakiduru moved successfully.
File/Folder c:\progra~2\tesifeke not found.
File/Folder c:\progra~2\sakiduru not found.
c:\programdata\vusurewi moved successfully.
File/Folder c:\progra~2\vusurewi not found.
c:\programdata\vuboduje moved successfully.
c:\programdata\huzaweli moved successfully.
File/Folder c:\progra~2\vuboduje not found.
File/Folder c:\progra~2\huzaweli not found.
c:\programdata\gadapobo moved successfully.
File/Folder c:\progra~2\gadapobo not found.
c:\programdata\wafasika moved successfully.
c:\programdata\dohososa moved successfully.
c:\programdata\dititeha moved successfully.
File/Folder c:\progra~2\wafasika not found.
File/Folder c:\progra~2\dohososa not found.
File/Folder c:\progra~2\dititeha not found.
c:\programdata\nogayeda moved successfully.
c:\programdata\ladahawe moved successfully.
File/Folder c:\progra~2\nogayeda not found.
File/Folder c:\progra~2\ladahawe not found.
c:\programdata\dubuwemo moved successfully.
File/Folder c:\progra~2\dubuwemo not found.
c:\programdata\namogizu moved successfully.
File/Folder c:\progra~2\namogizu not found.
c:\programdata\pazoyoli moved successfully.
File/Folder c:\progra~2\pazoyoli not found.
c:\programdata\gikuyaju moved successfully.
File/Folder c:\progra~2\gikuyaju not found.
c:\programdata\viveveno moved successfully.
c:\programdata\tupurevo moved successfully.
File/Folder c:\progra~2\viveveno not found.
File/Folder c:\progra~2\tupurevo not found.
c:\programdata\tesegigo moved successfully.
File/Folder c:\progra~2\tesegigo not found.
c:\programdata\tifizafe moved successfully.
c:\programdata\konemabo moved successfully.
File/Folder c:\progra~2\tifizafe not found.
File/Folder c:\progra~2\konemabo not found.
LoadLibrary failed for c:\windows\z0865spa9bot55f.dll
c:\windows\z0865spa9bot55f.dll NOT unregistered.
c:\windows\z0865spa9bot55f.dll moved successfully.
LoadLibrary failed for c:\windows\system32\zee3t9reat48725.dll
c:\windows\system32\zee3t9reat48725.dll NOT unregistered.
c:\windows\system32\zee3t9reat48725.dll moved successfully.
c:\programdata\remowoka moved successfully.
c:\programdata\menukabu moved successfully.
File/Folder c:\progra~2\remowoka not found.
File/Folder c:\progra~2\menukabu not found.
c:\programdata\vativise moved successfully.
File/Folder c:\progra~2\vativise not found.
c:\windows\270cdow5lza9er2900.exe moved successfully.
c:\programdata\zirigofo moved successfully.
c:\programdata\jafofega moved successfully.
File/Folder c:\progra~2\zirigofo not found.
File/Folder c:\progra~2\jafofega not found.
c:\programdata\dinuhago moved successfully.
File/Folder c:\progra~2\dinuhago not found.
c:\programdata\hegizuku moved successfully.
c:\programdata\fusizota moved successfully.
File/Folder c:\progra~2\hegizuku not found.
File/Folder c:\progra~2\fusizota not found.
c:\programdata\sufarudi moved successfully.
File/Folder c:\progra~2\sufarudi not found.
LoadLibrary failed for c:\windows\6530ba5zdoo92318.ocx
c:\windows\6530ba5zdoo92318.ocx NOT unregistered.
c:\windows\6530ba5zdoo92318.ocx moved successfully.
c:\windows\59990virzs79a.cpl moved successfully.
c:\programdata\rofefuzi moved successfully.
c:\programdata\dasabisi moved successfully.

File/Folder c:\progra~2\rofefuzi not found.
File/Folder c:\progra~2\dasabisi not found.
c:\programdata\wiwirira moved successfully.
File/Folder c:\progra~2\wiwirira not found.
c:\programdata\zinetozu moved successfully.
File/Folder c:\progra~2\zinetozu not found.
c:\programdata\wevozahe moved successfully.
c:\programdata\vufulowe moved successfully.
File/Folder c:\progra~2\wevozahe not found.
File/Folder c:\progra~2\vufulowe not found.
c:\windows\6069threzt6454.exe moved successfully.
c:\windows\system32\76bcthzeat95489.bin moved successfully.
c:\program files\VideoLAN\VLC\skins\fonts moved successfully.
c:\program files\VideoLAN\VLC\skins moved successfully.
c:\program files\VideoLAN\VLC\sdk\include\vlc\plugins moved successfully.
c:\program files\VideoLAN\VLC\sdk\include\vlc moved successfully.
c:\program files\VideoLAN\VLC\sdk\include moved successfully.
c:\program files\VideoLAN\VLC\sdk moved successfully.
c:\program files\VideoLAN\VLC\plugins moved successfully.
c:\program files\VideoLAN\VLC\osdmenu\dvd\volume moved successfully.
c:\program files\VideoLAN\VLC\osdmenu\dvd\unselect moved successfully.
c:\program files\VideoLAN\VLC\osdmenu\dvd\selection moved successfully.
c:\program files\VideoLAN\VLC\osdmenu\dvd\selected moved successfully.
c:\program files\VideoLAN\VLC\osdmenu\dvd moved successfully.
c:\program files\VideoLAN\VLC\osdmenu\default\volume moved successfully.
c:\program files\VideoLAN\VLC\osdmenu\default\selection moved successfully.
c:\program files\VideoLAN\VLC\osdmenu\default\selected moved successfully.
c:\program files\VideoLAN\VLC\osdmenu\default moved successfully.
c:\program files\VideoLAN\VLC\osdmenu moved successfully.
c:\program files\VideoLAN\VLC\locale\zh_TW\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\zh_TW moved successfully.
c:\program files\VideoLAN\VLC\locale\zh_CN\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\zh_CN moved successfully.
c:\program files\VideoLAN\VLC\locale\tr\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\tr moved successfully.
c:\program files\VideoLAN\VLC\locale\th\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\th moved successfully.
c:\program files\VideoLAN\VLC\locale\sv\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\sv moved successfully.
c:\program files\VideoLAN\VLC\locale\sq\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\sq moved successfully.
c:\program files\VideoLAN\VLC\locale\sl\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\sl moved successfully.
c:\program files\VideoLAN\VLC\locale\sk\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\sk moved successfully.
c:\program files\VideoLAN\VLC\locale\ru\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\ru moved successfully.
c:\program files\VideoLAN\VLC\locale\ro\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\ro moved successfully.
c:\program files\VideoLAN\VLC\locale\pt_BR\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\pt_BR moved successfully.
c:\program files\VideoLAN\VLC\locale\pl\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\pl moved successfully.
c:\program files\VideoLAN\VLC\locale\pa\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\pa moved successfully.
c:\program files\VideoLAN\VLC\locale\oc\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\oc moved successfully.
c:\program files\VideoLAN\VLC\locale\nn\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\nn moved successfully.
c:\program files\VideoLAN\VLC\locale\nl\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\nl moved successfully.
c:\program files\VideoLAN\VLC\locale\ne\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\ne moved successfully.
c:\program files\VideoLAN\VLC\locale\nb\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\nb moved successfully.
c:\program files\VideoLAN\VLC\locale\ms\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\ms moved successfully.
c:\program files\VideoLAN\VLC\locale\lv\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\lv moved successfully.
c:\program files\VideoLAN\VLC\locale\lt\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\lt moved successfully.
c:\program files\VideoLAN\VLC\locale\ko\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\ko moved successfully.
c:\program files\VideoLAN\VLC\locale\ka\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\ka moved successfully.
c:\program files\VideoLAN\VLC\locale\ja\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\ja moved successfully.
c:\program files\VideoLAN\VLC\locale\it\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\it moved successfully.
c:\program files\VideoLAN\VLC\locale\hu\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\hu moved successfully.
c:\program files\VideoLAN\VLC\locale\hi\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\hi moved successfully.
c:\program files\VideoLAN\VLC\locale\he\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\he moved successfully.
c:\program files\VideoLAN\VLC\locale\gl\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\gl moved successfully.
c:\program files\VideoLAN\VLC\locale\fur\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\fur moved successfully.
c:\program files\VideoLAN\VLC\locale\fr\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\fr moved successfully.
c:\program files\VideoLAN\VLC\locale\fa\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\fa moved successfully.
c:\program files\VideoLAN\VLC\locale\eu\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\eu moved successfully.
c:\program files\VideoLAN\VLC\locale\es\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\es moved successfully.
c:\program files\VideoLAN\VLC\locale\en_GB\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\en_GB moved successfully.
c:\program files\VideoLAN\VLC\locale\de\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\de moved successfully.
c:\program files\VideoLAN\VLC\locale\da\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\da moved successfully.
c:\program files\VideoLAN\VLC\locale\cs\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\cs moved successfully.
c:\program files\VideoLAN\VLC\locale\co\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\co moved successfully.
c:\program files\VideoLAN\VLC\locale\ca\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\ca moved successfully.
c:\program files\VideoLAN\VLC\locale\ar\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\ar moved successfully.
c:\program files\VideoLAN\VLC\locale\af\LC_MESSAGES moved successfully.
c:\program files\VideoLAN\VLC\locale\af moved successfully.
c:\program files\VideoLAN\VLC\locale moved successfully.
c:\program files\VideoLAN\VLC\http\requests moved successfully.
c:\program files\VideoLAN\VLC\http\old\vlm moved successfully.
c:\program files\VideoLAN\VLC\http\old\admin moved successfully.
c:\program files\VideoLAN\VLC\http\old moved successfully.
c:\program files\VideoLAN\VLC\http\js moved successfully.
c:\program files\VideoLAN\VLC\http\images moved successfully.
c:\program files\VideoLAN\VLC\http\dialogs moved successfully.
c:\program files\VideoLAN\VLC\http moved successfully.
c:\program files\VideoLAN\VLC moved successfully.
c:\program files\VideoLAN moved successfully.
c:\programdata\kazepala moved successfully.
File/Folder c:\progra~2\kazepala not found.
c:\programdata\zamivoru moved successfully.
c:\programdata\hilijizi moved successfully.
File/Folder c:\progra~2\zamivoru not found.
File/Folder c:\progra~2\hilijizi not found.
LoadLibrary failed for c:\windows\system32\4af6zpar9e13865.dll
c:\windows\system32\4af6zpar9e13865.dll NOT unregistered.
c:\windows\system32\4af6zpar9e13865.dll moved successfully.
c:\programdata\sitoyufe moved successfully.
File/Folder c:\progra~2\sitoyufe not found.
c:\programdata\jovireha moved successfully.
File/Folder c:\progra~2\jovireha not found.
c:\programdata\bakevibe moved successfully.
File/Folder c:\progra~2\bakevibe not found.
c:\windows\system32\15d49hreaz29776.bin moved successfully.
File/Folder c:\windows\system32\setup2.exe not found.
c:\windows\452ds9ywarez780.exe moved successfully.
c:\windows\system32\z3846spa9botd15.exe moved successfully.
LoadLibrary failed for c:\windows\system32\11195ackdo9rz21.dll
c:\windows\system32\11195ackdo9rz21.dll NOT unregistered.
c:\windows\system32\11195ackdo9rz21.dll moved successfully.
LoadLibrary failed for c:\windows\system32\68f5down9oader24z.dll
c:\windows\system32\68f5down9oader24z.dll NOT unregistered.
c:\windows\system32\68f5down9oader24z.dll moved successfully.
LoadLibrary failed for c:\windows\system32\3a55tzrea915490.dll
c:\windows\system32\3a55tzrea915490.dll NOT unregistered.
c:\windows\system32\3a55tzrea915490.dll moved successfully.
c:\windows\system32\5169hizf2233.exe moved successfully.
c:\windows\system32\2916virus7z5.bin moved successfully.
c:\windows\system32\59e5bazkdoo9923.bin moved successfully.
c:\windows\system32\75a05zr9629.bin moved successfully.
c:\windows\system32\59z5spambot3d8.exe moved successfully.
LoadLibrary failed for c:\windows\70459zwnloader1863.dll
c:\windows\70459zwnloader1863.dll NOT unregistered.
c:\windows\70459zwnloader1863.dll moved successfully.
LoadLibrary failed for c:\windows\system32\202z5vir9s309.dll
c:\windows\system32\202z5vir9s309.dll NOT unregistered.
c:\windows\system32\202z5vir9s309.dll moved successfully.
c:\windows\1zabackd9or8725.exe moved successfully.
c:\windows\system32\6a9eb5ckdz9r2002.exe moved successfully.
LoadLibrary failed for c:\windows\6571down9oazer2954.dll
c:\windows\6571down9oazer2954.dll NOT unregistered.
c:\windows\6571down9oazer2954.dll moved successfully.
c:\windows\system32\3620spyz5re2669.exe moved successfully.
c:\windows\system32\225159orm37ez.exe moved successfully.
c:\windows\a5dthrez919868.bin moved successfully.
c:\windows\system32\7055downloazer5916.exe moved successfully.
c:\windows\z709sp95se2796.bin moved successfully.
c:\windows\system32\45z1addware9477.exe moved successfully.
c:\windows\20z429ack5ool242.exe moved successfully.

OTMoveIt3 by OldTimer - Version 1.0.11.0 log created on 05192009_164223

Hello.
Okay, that should of lifted some weight, so lets get an uninstall log now.

• Open HijackThis.
  
• When Hijack This opens, click "Open the Misc Tools section"
  
• Then select "Open Uninstall Manager"
  
• Click on "Save List..." (generates uninstall_list.txt)
  
• Click Save, copy and paste the results in your next post.
  

ok will wat i am doin get rid of the winpc program that i never ask for n this winblue thing they both keep poppin up n it annoyin n will it get rid of virus as well

Well I only had a DDS log to work with, that won't show me everything I need to fight it off, that's why I ask that you run tools I've posted for you, and we'll fight it off till it's gone.

2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
725plv32
Acrobat.com
Acrobat.com
Adobe AIR
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Media Player
Advanced Registry Optimizer
AnswerWorks 4.0 Runtime - English
AnswerWorks 5.0 English Runtime
AOL Install
AOL Uninstaller (Choose which Products to Remove)
Apple Software Update
Ask Toolbar
Banctec Service Agreement
BHVideo
Bonjour
Conexant D850 PCI V.92 Modem
Corel Paint Shop Pro Photo XI
Corel Snapfire Plus
Coupon Printer for Windows
CyberScrub Privacy Suite 5.0
Dealio Toolbar 3.1.1
Dell Games
Dell System Customization Wizard
DellSupport
Digital Line Detect
DigitalLabs
Disney Pirates of the Caribbean Online
DivX Codec
DivX Converter
DivX Player
DivX Web Player
Documentation & Support Launcher
EarthLink Setup Files
ffdshow [rev 1909] [2008-03-20]
Flock (2.0)
Freeze.com Toolbar
Frosty Games
Games, Music, & Photos Launcher
GameTap
GamingSquared Console
Google Desktop
Google Toolbar for Internet Explorer
Google Toolbar for Internet Explorer
GoToAssist 8.0.0.514
Graboid Video 1.5
HijackThis 2.0.2
Internet Service Offers Launcher
Java(TM) SE Runtime Environment 6
kSolo Recorder
Lunascape5
Macrogaming SweetIM 2.1
Microsoft Office Excel MUI (English) 2007
Microsoft Office Home and Student 2007
Microsoft Office Home and Student 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Modem Diagnostic Tool
Morpheus Photo Mixer v3.01
Motorola Driver Installation
Mozilla ActiveX Control v1.7.12
Mozilla Firefox (3.0.6)
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
Muddly
MyJAL MediaPAL
MyLayout Profile Editor
NetWaiting
NVIDIA Drivers
Opera 9.60
QuickTime
Registry Mechanic 8.0
Rhapsody
Rhapsody Player Engine
Roxio Creator Audio
Roxio Creator BDAV Plugin
Roxio Creator Copy
Roxio Creator Data
Roxio Creator DE
Roxio Creator Tools
Roxio Drag-to-Disc
Roxio Express Labeler
Roxio MyDVD DE
Roxio Update Manager
RTC Client API v1.2
Safari
Screensavers Installer Version 3
Security Update for 2007 Microsoft Office System (KB951550)
Security Update for 2007 Microsoft Office System (KB951944)
Security Update for 2007 Microsoft Office System (KB960003)
Security Update for CAPICOM (KB931906)
Security Update for CAPICOM (KB931906)
Security Update for Microsoft Office Excel 2007 (KB959997)
Security Update for Microsoft Office OneNote 2007 (KB950130)
Security Update for Microsoft Office PowerPoint 2007 (KB957789)
Security Update for Microsoft Office system 2007 (KB954326)
Security Update for Microsoft Office system 2007 (KB956828)
Security Update for Microsoft Office Word 2007 (KB956358)
Security Update for Visio 2007 (KB947590)
SigmaTel Audio
Sleipnir Version 2.8.3
Smart Video Codec v1.6
Snap Visual Search
Sonic Activation Module
Spyware Doctor 6.0
STOPzilla
SweetIM For Internet Explorer 3.0b
TBS WMP Plug-in
The Weather Channel Desktop
TurboTax 2008
TurboTax 2008 WinPerFedFormset
TurboTax 2008 WinPerProgramHelp
TurboTax 2008 WinPerReleaseEngine
TurboTax 2008 WinPerTaxSupport
TurboTax 2008 WinPerUserEducation
TurboTax 2008 wnyiper
TurboTax 2008 wrapper
TurboTax Deluxe 2007
Update for 2007 Microsoft Office System (KB967642)
URL Assistant
User's Guides
Utherverse 3D Client
Utherverse 3D Client
VC80CRTRedist - 8.0.50727.762
VeohTV BETA
VideoLAN VLC media player 0.8.6d
Viewpoint Media Player
Virtual DJ - Atomix Productions
Weather Services
Windows Media Player Firefox Plugin
Wyzo 3.0.2
Yahoo! Install Manager
Yahoo! Music Jukebox
Yahoo! Toolbar
YouTube Uploader

Hello.
Lets uninstall a few things first.

• Click Start >> Control Panel.
  
• Under the Programs click Uninstall a Program
  
• Highlight the following:
  
  Ask Toolbar
  Freeze.com Toolbar
  Frosty Games
  Java(TM) SE Runtime Environment 6
  VideoLAN VLC media player 0.8.6d
  Viewpoint Media Player
  
  
• Click on the Uninstall/Change button at the top.
  

Please download and run this tool.

Download Malwarebytes' Anti-Malware from Here

Double Click mbam-setup.exe to install the application.

• Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  
• If an update is found, it will download and install the latest version.
  
• Once the program has loaded, select "Perform Quick Scan", then click Scan.
  
• The scan may take some time to finish,so please be patient.
  
• When the scan is complete, click OK, then Show Results to view the results.
  
• Make sure that everything is checked, and click Remove Selected.
  
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Note)
  
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  

Note:
If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.
Click OK to either and let MBAM proceed with the disinfection process.
If asked to restart the computer, please do so immediately.

Post the contents of the MBAM Log.

ok i am doi nall this in safe mode when i log on normal wil lall this still be there

Hopefully not, we've removed a lot of run values and quarantined a bunch of stuff where the malware was hiding, MBAM should pick up on the rest, then we'll get another new DDS log and see if there's anything amiss.

ok i had to restart

Can you post the MBAM report when done? =)

it works now all the problem i haad with the pop up are gone thanks

I doubt they are, please post the MBAM log.

they are it be a whole day i have no pop ups n i don't rember if i save that or not

or no virus warnig no problem at all
so thank

Open MBAM again, and go into the "Logs" tab. Open the most recent log by double clicking it.

Copy and paste the log back here.