Avast! refuses to update definitions on desktop

[cherryshot]

Along time ago, i had someone check out my pc cause i was having issues and he downloaded stuff to fix it, i never knew it was still running...

[cherryshot]

Just checked my task manager, 72 processes ...dont remember being that many...is that normal?

[SafeSurf]

Registry_Mechanic may be conflicting with other software.  You need to uninstall it.  If you cannot remove it via Control Panel > Add/Remove Programs, try installing Revo Uninstaller (free) http://download.cnet.com/Revo-Uninstaller/3000-2096_4-10687648.html.

[cherryshot]

Well if it helps theres other programs that he installed, ad-aware, bigfix, exterminate it!, hijackthis 1.99.1

Im just going down the list in add/remove program...i am removing registry mechanic...what about these others?

[SafeSurf]

In the future when we ask what security programs you have on your machine, either current or previous, it helps a LOT to mention these programs and if/when they were/were not removed because they can conflict with antivirus software as well as other security programs.

[cherryshot]

There is also Windows Defender. But i thought none of these programs are running

[cherryshot]

Ok sorry whats next

[SafeSurf]

OK...you have a lot of issues going on.  I want you to listen carefully.

1. Turn Windows Firewall ON.
2. Turn Windows Defender ON and update the definitions.
3. Uninstall the following software from your machine: CA_antivirus, Registry_Mechanic, ad-aware, bigfix, exterminate it!.
3. Go to this link within this forum and follow the instructions for malware removal http://forum.avast.com/index.php?topic=53253.0.  Follow every step carefully because I want you to post your MBAM log and your OTL log as a reply so we can analyze it for malware. 

But you need to do the items posted above in the order I described.  Do you understand?

[cherryshot]

i understand all except OTL log

[SafeSurf]

When you get to that step, go to the link I gave you and there are step-by-step instructions.  You will be doing the MBAM scan first, then the OTL part.  It is easy to follow.  

Things may work out just by uninstalling things as well.  After you uninstall a program...REBOOT.  I will check in with you tomorrow, but others will be here to assist you.

[cherryshot]

Ok thank you

[cherryshot]

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4326

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

7/20/2010 5:31:31 PM
mbam-log-2010-07-20 (17-31-31).txt

Scan type: Quick scan
Objects scanned: 150707
Time elapsed: 37 minute(s), 27 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 2
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\getpack21 (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\microsoft winupdate (Backdoor.Bot) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

[cherryshot]

OTL log attached.

[Tarq57]

Hi cherryshot,
Is there a logical explanation you can think of why so many of the characters in the OTL log are in Chinese?

[cherryshot]

wont let me repost, ill just copy paste...