but I can't delete the rlls.dll files from my system32 folder.
D'oh! Even not in Safe Mode? Then download two programs that I've never used before, too (but seen often in this matter):LSPfix: http://www.cexx.org/lspfix.htm
and
Killbox: http://www.bleepingcomputer.com/files/killbox.php
Use Killbox to kill the rlls.dll: (Text stolen from dlh6213)
---------------------------------------------------------------------------------
Unzip the file to your desktop. Go offline until this is completed.
Run Pocket Killbox and paste the full file path of the below file in the box and click on Standard File Kill and End Explorer Shell While Killing File. Click on the button with the red circle and an X in the middle after you enter the file path.
C:\WINDOWS\System32\rlls.dll
Reboot afterwards if the file was successfully deleted.
If the file was not deleted, do not reboot yet. Run Pocket Killbox again, and again paste the full file path in the box, but this time click on Delete on Reboot. Click on the button with the red circle and an X in the middle; you will get a message saying File will be deleted on next reboot, Process and Reboot now? Click Yes to reboot.
-----------------------------------------------------------------------------
Now unzip and run LSPfix. If something appears in the right box, click "finish" and reboot. If not, close it and be as confused as I am...;) Post a new log when you finished these surgeries.
Now let's discuss this one:
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = sas.r21.mchsi.com:8000
Do you recognize your service provider here? I'm not sure if this is a good or a bad entry. It seems to be related to "walledgarden.mchsd.com" and they all look like an ISP. If this is your ISP, don't touch it. If not, tell me if you tried to fix it and what happened.
