That looks alot better
, most of it is gone now.
Boot in safemode again and run
Process Explorer
In the top section of the Process Exlporer screen double click on
winlogon.exe to bring up the winlogon.exe properties screen. Click on the
Threads tab at the top.
Once you see this screen click on each instance of
avpe32.dll once and then click the
kill button.
After you have killed all of the
avpe32.dll's under winlogon click
OK.
Next In the top section of the Process Exlporer screen again , double click on
explorer.exe and again click once on each instance of
avpe32.dll then click the
kill button.
Once you have done that click
OK again.
Copy the contents of Code box below to a notepad file. Save it to Desktop named
Fixreg.reg FileType .*. All Files
Code:
REGEDIT4
[-HKLM\SYSTEM\CurrentControlSet\Services\avpe64]
[-HKLM\SYSTEM\CurrentControlSet\Services\avpe32]
[-HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avpe32]
Now double click
Fixreg.reg and allow it to add/merge with registry when prompted.
Then fix these with
hjt:
O2 - BHO: (no name) - {8B6DA27E-7F64-4694-8F8F-DC87AB8C6B22} - (no file)
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O20 - Winlogon Notify: avpe32 - C:\WINDOWS\SYSTEM32\avpe32.dll
Start Killbox and place a tick next to [x]delete on reboot.
And press the "all files" button. (just above the yellow triangle)
Copy this list into the windows clipboard:
C:\WINDOWS\SYSTEM32\avpe32.dll
C:\WINDOWS\SYSTEM32\avpe32.dll
C:\WINDOWS\SYSTEM32\avpe64.sys
C:\WINDOWS\SYSTEM32\klgcptini.dat
C:\WINDOWS\SYSTEM32\qz.dll
C:\WINDOWS\SYSTEM32\qz.sys
C:\WINDOWS\SYSTEM32\stt82.ini
Back in Killbox go > file > paste from clipboard,
Click the
red highlighted X button and say yes to the prompt, then click OK.
Exit Killbox and restart your PC and post a new
hjt log to check please.
Linear Mode
