Sorry for the delay
Can you do the following please
Since you are going to uninstall the Trial version of Nod32
Can you do it now please
Having more than one Active av running in the background, can cause conflicts and decrease system performance
Reboot if prompted
Back in Windows
Download and install
Windows CleanUp! 4.5.1==Open
Cleanup! by double-clicking the icon on your desktop (or from the Start > All Programs menu).
Set the program up as follows:
Click "Options..."
Move the arrow down to "Custom CleanUp!"
Put a check next to the following (Make sure nothing else is checked!):
* Empty Recycle Bins
* Delete Cookies
* Delete Prefetch files
* Cleanup! All Users
Click OK
Press the CleanUp! button to start the program.
When it's done click Close
Decline to log off or restart the computer
Do a "System scan only" with Hijackthis and put a check next to these entries:
R3 - Default URLSearchHook is missing
O2 - BHO: bg - {7BDAF75A-0D6F-4F50-AFE9-333D08DF4005} - (no file)
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O2 - BHO: IE - {D157330A-9EF3-49F8-9A67-4141AC41ADD4} - C:\WINDOWS\DOWNLO~1\cnshook.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\zh-hk\msntb.dll (file missing)
O4 - HKLM\..\Run: [CnsMin] Rundll32.exe C:\WINDOWS\DOWNLO~1\CnsMin.dll,Rundll32
O4 - HKLM\..\Run: [HNETPOLCY] rundll32.exe C:\DOCUME~1\Roland\LOCALS~1\Temp\RarSFX0\HNETPO~1.DLL,Start
O4 - HKCU\..\Run: [HNETPOLCY] rundll32.exe C:\DOCUME~1\Roland\LOCALS~1\Temp\RarSFX0\HNETPO~1.DLL,Start
After you have ticked the above entry, close
All other open windows
Including this one
Leave Hijackthis open and click FIX CHECKED
OK the prompt and exit Hijackthis
Reboot the computer
Back in Windows
==Download and then Install
Ewido anti-malware 3.5When installing, under "Additional Options"
Uncheck "Install background guard" and "Install scan via context menu".
From the main ewido screen, click on
Update in the left menu, then click the
Start update button.
After the update finishes (the status bar at the bottom will display "Update successful")
If for some reason the Updater won't work can you manually download the
Updates from this link after you have Ewido installed
http://www.ewido.net/en/download/updates/==In
Ewido Anti-MalwareClick on the
Scanner button on the left menu
Select
Complete System Scan*If Ewido finds something it will prompt you with "Infected Object found"
Ensure the following are Selected
*1. Perform Action = Remove
*2. Create Encrypted Backup in Quarantine (Recommended)
*3. Perform action with all infections
Then click OK
When Ewido has finished it's scan click the "Save Report" button
Save the report to desktop
Exit Ewido
Note: when Ewido is running it's scan, don't open any other windows, let it run uninterrupted please
Reboot one last time
Access Internet Options via Control Panel
Under the Programs tab "Reset Web Settings"
Come back here and post a fresh hijackthis log and the whole log from Ewido's
EDIT>>I forgot about this entry in your hijackthis log
O23 - Service: SDAgent Service (SDAgentService) - Unknown owner - C:\Program Files\Common Files\smartde\sde.exe (file missing)
If your unsure what it's related too, can you do the following please
Go to START>>>RUN>>>type in
services.mscHit OK
In the next window, look on the right hand side for this service
name----
SDAgent ServiceDouble click on it---
STOP the service--If running
In the drop down menu, change the startup type to
DisabledThe file may still be around
Go to either of these links
http://virusscan.jotti.org/or
http://www.virustotal.com/flash/index_en.htmlUse the browse button and navigate to this file on your hard disk
C:\Program Files\Common Files\smartde\
sde.exe<--this file
Right click on the file and choose Select
Then use the Submit button
Let it finish scanning
Could you post back the results of the scan back here please
