Sorry, just a quick look, scoot and run.
Highly suspect:
O4 - HKUS\S-1-5-18\..\Run: [av_md] C:\WINDOWS\system32\config\systemprofile\av_md.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [av_md] C:\WINDOWS\system32\config\systemprofile\av_md.exe (User 'Default user')
Fix:
O2 - BHO: (no name) - {CFA99F9B-4892-4038-84FA-B7F99E681DCF} - c:\windows\system32\yvgioeh.dll (file missing)
O20 - Winlogon Notify: guqjqhmt - yvgioeh.dll (file missing)
HJT ACTIONS
Suspect: Upload the file/s to VirusTotal, Send a sample to avast if multiple detections at VT and Fix in HJT (see below)
####
Check the suspect file/s at:
VirusTotal - Multi engine on-line virus scanner and report the findings here in the topic, the URL in the Address bar of the VT results page. If multiple scanners find these infected send the samples to avast for analysis and inclusion in the virus database.
Send the sample to
virus@avast.com zipped and password protected with the password in email body, a reference to this topic (give URL) and undetected malware in the subject.
Or you can also add the file to the User Files (File, Add) section of the avast chest (if it isn't already there) where it can do no harm and send it from there.
A copy of the file/s will remain in the original location, so you will need to take further action and can remove/rename that.
Send it from the User Files section of the chest (select the file, right click, email to Alwil Software). It will be uploaded (not actually emailed) to avast when the next avast auto (or manual) update is done.
Run HJT again (close any other windows except HJT), tick the box to the left of the suspect entry you wish to fix, click the Fix Selected Button.
####
~~~~
Remnants of Norton, Fix in HJT and also run the tool below:
O23 - Service: Norton Internet Security - Unknown owner - C:\Program Files\Norton Internet Security\Engine\16.0.0.125\ccSvcHst.exe (file missing)
A link worth looking at, which is a program removal tool that can remove the remnants of a number of different Norton Programs:
Removing your Norton program using SymNRTOr
ftp://ftp.symantec.com/public/english_us_canada/removal_tools/Norton_Removal_Tool.exe