Avast Pro & System restore disabled by Malware called c5zedo. Please help

[rwm24kau]

I keep getting pop up adds and getting my files switched around out of order. I noticed the c5zedo going back to its web address on several long page downloads on the bottom left of my page. I tried using my system restore but it won't let me restore to an earlier time. It's disabled my Avast Pro I just bought a few months ago. I hope not to lose my picture files more than anything. What to do? Can any free program remove this crap? I have a little money in my PayPal. Can any site scan and remove the virus and repair my windows XP SP3? 

[ArtemisF0wl]

System restore is not the way to remove an infection. but there is hope... post in the virus removal topic here at this forum http://forum.avast.com/index.php?board=4.0 . a member named "essexboy" is an expert at stuff like this.

in the meantime, you can try a scan with malwarebytes http://www.malwarebytes.org/  

its free, just decline the trial after installation. be sure not to delete your scan log, as essexboy may need that info. good luck!

[ady4um]

If there is no response at the "virus/worms" section of Avast forum, you should not wait specifically for essexboy (he is not reachable until the 8th or 9th of this month), you could try for example http://www.geekstogo.com/forum/, where essexboy himself and many others are active and know about "disinfection".

[DavidR]

Unfortunately essexboy, who normally covers these analysis and specialist malware removal tasks is on holiday. There a couple of others who have experience of the analysis of the OTL logs, but they aren't as frequently on-line as essexboy is/was.

Essexboy is on holiday and will be away from his system 28th September to 6th October. It may take him a little while after that to aclimatise

In the meantime, you could go to Geekstogo. Before posting read this topic, http://www.geekstogo.com/forum/topic/2852-malware-and-spyware-cleaning-guide/, include in the first post a description of the problem, the OTL scan logs and the aswMBR log.  That should get a quick response.

For information on and a download location for aswMBR.exe read this topic, http://forum.avast.com/index.php?topic=53253.0.