Update MBA-M and do another full scan, have it remove all that is found.

Sorry if I sounded like I was in a bad mood, I apologize, I really am sorry and I certainly never meant to imply that you are stupid, because I certainly do not believe that you are. I guess I get...

Well, it may have come in with something else, not sure.
Take a look at these entries from your combofix log...

There is where the OpenCandy shows...all four of those items were run at exactly...

Absolutely. But you MUST UNINSTALL all three of those first, and the Norton should be uninstalled also, just to be certain that it IS installed correctly.

Uninstall all of those as directed,...

Think it is time for a big gun.
Do the following:

The first thing you should do is print out this guide, as we will close all the open windows and programs, including your web browser, before...

Ok, let's try this a different way, maybe be able to figure out if this is a false positive or not.
Go to http://virusscan.jotti.org/en
There you and upload each of these files singly and allow...

Download Combofix and run it:

http://www.bleepingcomputer.com/comb...o-use-combofix

Download it to your Desktop as that and follow the instructions in the link very carefully to run it and then...

That's what I thought PP.
You heard the man scraddock.
Please download GMER Rootkit Scanner:
http://www.gmer.net/download.php

-- DoubleClick the .exe file and, if asked, allow the gmer.sys...

Sorry, we're a bit short handed these days.

Uninstall IObit Security 360 using Add/Remove. This company is not a very reputable company and it is not recommended.
After that do the following:
...

Actually depends on WHERE this file is located. csrss.exe can be a legitimate file IF located in C:\Windows\System32. It stands for Client Server Runtime.

This is a bit confusing, you say you want...

PLEASE do the fix that Crunchie told you to do. This has gotten absolutely ridiculous! Of course the IP number is valid. Nobody said it was not. This wouldn't be on there unless it was a valid IP...

When Avast, or any reliable anti-virus program finds a virus it removes the infection by placing it in Quarantine. Meaning it is LOCKED up it cannot hurt anything. It is then up to the user of the...

Now for your unneeded auto starting programs; All of these programs auto start when the computer starts and then generally run all the time in the back ground. None of them are needed for the smooth...

Try it this way first.
Go to Start, Control Panel, Administrative Tools, Services.
When Services opens scroll through the list until you see these files;
Automatic LiveUpdate Scheduler - Symantec...

Doing the same things the other person is accused of doing is not regaining power, it is dropping to their low level and therefore giving them more power because it proves them right in their...

Not a good idea. Registry "cleaners/fixers" very often bring on a lot more trouble than you are all ready having. Leave it alone.

For the Norton program, first go to Task Manager and look for this...

Hi and welcome to Daniweb. Remain calm ok. Let's see what we can do here. The guy is a sleeze!
Did you find this on the laptop or the computer in question? If it is on both of the computers then...

darkrecess, this thread is closed. You need to begin your own with all necessary information concerning the computer, the problems you are experiencing and steps you have taken thus far to attempt to...

Have to note something here. There is a WHOLE lot more going on here than you trying to force a Safe Boot using msconfig. I am referring back to your Original Thread...

This search bar IS malware. There has to be a way to get rid of it.

Ok here's the list. I have purposely left off items having to do with your printer, your scanner, you photos, and your dial-up modem sometimes those programs are so darned touchy that if you disable...

So glad it worked. See, this shows you, use proven CLEAN programs. Visit only clean, proven web sites.

Sorry I missed your post last evening. Looks pretty good.
You need to update your Java program, it is way out of date. Please do this:
Go HERE (http://www.java.com/en/download/manual.jsp) and...

Yes the computer itself looks clean. However, before you do scans of the USB drives you need to disable the AutoPlay feature for USB devices, otherwise you could re-infect the computer if these...

Download ComboFix (http://download.bleepingcomputer.com/sUBs/ComboFix.exe), You will get a prompt asking if you want to run or save the file. Choose SAVE and save it to the desk top. DO NOT RUN it...

SDFix must be used in Safe Mode only. This may be one reason why you say it won't work. But if you feel it has replicated then, why?

SDFix wouldn't be the tool to use for that anyway. It is not...

I note several things immediately in the HJT log.
#1. SpyBot TeaTimer is running. This needs to be disabled as it WILL interfere with any fixes done.
* Run Spybot-S&D in Advanced Mode
* If...

I would say it could be very likely all three could show clean but you could still have something on there. AdAware especially is not the program it used to be. Avast and Spybot both are very good...

Did you reboot the computer?
Now do the following:
Download HiJackThis (http://download.cnet.com/Trend-Micro-HijackThis/3000-8022_4-10781312.html). Run a full system scan and save the log.
Post...

Thanks Crunchie!
aharrold, first of all you need to Uninstall Combofix as it won't be needed anymore.
To do this do the following:
* Click START then RUN
* Now type Combofix /u in the runbox and...

The ESET log clearly shows infected files:
C:\Documents and Settings\pouneh\Desktop\burningart\home\Mailbox multiple threats (contained infected files) but nothing was cleaned. You should run it...

hari, one reason your problem is not solved is you have not posted back here in 6 weeks. There is no way we can offer help if the poster fails to return in short order. Since 6 weeks have passed...

This gives us NO information whatsoever, the same as what, who? We need actual information before we can even suggest what the problem might be. You have to realize that threads don't stay together,...

No, no, not done yet, still some things to be done. You need to run HiJackThis again. Place a check mark next to the following entries:

O17 -...

Did you run the programs requested?
Where are the other logs requested? The MBA-M log and the ESET log?
Did you run the ATF-Cleaner? Now there are at least TRIPLE the number of temp files showing...

I recommended removing it because many times this is indicative of browser hijacking. If you personally have set this yourself leave it alone.

You know what, I am at the point of really not caring anymore one way or another whether you do whatever I say. You have questioned every suggestion, you have refused to follow instructions and...

Not to interfere but have you checked your Windows Security Center in Control Panel and see what it says?

Try this:
Please Download ATF-Cleaner.exe by Atribune (http://www.atribune.org/ccount/click.php?id=1)(Windows XP, 2K, 2003 & Vista ONLY) save it to the desktop for easy access.

RUN...

MBA-M was NOT run correctly it it had been the infection would be gone, it is NOT. How do we know it was NOT run correctly? Because the logs show it was not.
#1. As Crunchie noted, your scan was...