full of malwares, help!

Hiya

Are you still having this problem? If so, sorry for the delay, these forums are very busy. Lets see what we can do.

So, looking at the logs I see plenty of things that need to go. Can you use a usb drive to transfer tools across, so that you can run them? If so, can you do this, and we'll see what other stuff needs to go:

Download OTL to your Desktop, then transfer it to the pc with the flash drive.

After running the below scan, transfer the logs back with your flash drive, and post them here in the post :)

(Vista or Win 7 => right click and Run As Administrator)

• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
• When the window appears, underneath Output at the top change it to Standard Output.
• At the top, check the box entitled Scan All Users
• Toward the bottom, check:
  All Users
  LOP Check
  Purity Check
• Under the Standard Registry box change it to All
  Do not change any settings unless otherwise told to do so.
• Please copy the text in the code box below and paste it in the Custom Scans/Fixes box in OTL:
  
  
  Code:

  ---

  DRIVES
netsvcs
activex
msconfig
drivers32
%systemroot%\assembly\GAC_32\*.ini
%systemroot%\assembly\GAC_64\*.ini
%ALLUSERSPROFILE%\Application Data\*.exe
%APPDATA%\*.
safebootminimal
safebootnetwork
%SYSTEMDRIVE%\*.*
%PROGRAMFILES%\*.exe
%LOCALAPPDATA%\*.exe
%windir%\Installer\*.*
%windir%\system32\tasks\*.*
%windir%\system32\tasks\*.* /64
%systemroot%\Fonts\*.exe
%systemroot%\*. /mp /s
/md5start
pnrpnsp.dll
nwprovau.dll
nlaapi.dll
napinsp.dll
mswsock.dll
winrnr.dll
wshelper.dll
consrv.dll
explorer.exe
winlogon.exe
regedit.exe
Userinit.exe
svchost.exe
services.exe
user32.dll
atapi.sys
csrss.exe
PRINTISOLATIONHOST.EXE
/md5stop
hklm\software\clients\startmenuinternet|command /rs
hklm\software\clients\startmenuinternet|command /64 /rs
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemdrive%\$Recycle.Bin|@;true;true;true /fp
%systemroot%\system32\drivers\*.sys /lockedfiles
C:\Windows\assembly\tmp\U\*.* /s
%Temp%\smtmp\* \s
%Temp%\smtmp\1\*.*
%Temp%\smtmp\2\*.*
%Temp%\smtmp\3\*.*
%Temp%\smtmp\4\*.*
dir "%systemdrive%\*" /S /A:L /C
CREATERESTOREPOINT

  ---

• Click the Run Scan button. The scan wont take long.
  A black box will appear, this is part of the custom scan, so don't be alarmed ;)
  IF OTL SAYS 'NOT RESPONDING' DON'T USE THE MOUSE. IT WILL CARRY ON SCANNING AFTER A FEW MINUTES
  
  
• When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
  
• Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time and post them in your topic
  

Regards

eddie