Win7 x64 Sp1 (have sfc log) crashes and errors after updates-malware?

Thanks lol...and I browsed the log and saw some suspicious looking stuff in there actually...hope I can get my system up and running like it was prior, this is my main computer with all of my work stuff.

As for entries I want to keep...have not one clue, I leave that up to the learned Guru (bowing profusely)

Jacee said:

Using AdwCleaner v3: Scan & Clean:
Double click on AdwCleaner.exe to run the tool again.
Click on the Scan button.
AdwCleaner will begin to scan your computer like it did before.
After the scan has finished...

This time click on the Clean button. All items shown above are garbage you don't want!!

Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
After rebooting, a logfile report (AdwCleaner[S#].txt) will open automatically (where the largest value of # represents the most recent report).
Copy and paste the contents of that logfile in your next reply.
A copy of that logfile will also be saved in the C:\AdwCleaner folder

After you've done that, download TFC by Old Timer TFC - Temp File Cleaner by OldTimer - Geeks to Go Forums and save it to your desktop.
Save any unsaved work. TFC will close ALL open programs including your browser!
Double-click on TFC.exe to run it. If you are using Vista/Windows 7 right-click on the file and choose Run As Administrator.
Click the Start button to begin the cleaning process and let it run uninterrupted to completion.
Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway to ensure a complete clean.

Ok, did Stage 1 with ADw...attached the log files before and after cleaning...have to admit, booted faster already...moving on to stage 2, wish me luck.

Umm, Jacee...call me paranoid a bit, but just wanted to advise on what took place with stage 2 TFC...ran it, found temp files, but when it finished, it didn't prompt me to restart to clean...instead is opened my "libraries" folder...is that indicative of anything?

Well I restarted manually (shut down>restart) and when it did restart I still apparently don't have elevated admin privileges and found a bunch of hidden files on my desktop (jpg album art and desktop.ini) which was unexpected, but didn't freak me out. I just went to folder options to hide known extensions, but left option to show hidden files and folders.

Went into my main subdirectory and found a lot of log (.LOG1 and.LOG2 extension) files and;

.regtran-ms files
.TM.blf files

have no idea what those extensions are but all of them start with ntuser

e.g. ntuser.dat{54b77abd-384d-11df-9ac7-a7ce7f31c209}.TMContainer00000000000000000001.regtrans-ms

there is also an actual ntuser.dat file.

should I be concerned? I also scanned again with Adw and here's the log attached...

Not gonna do anything until I hear from my great and powerful Guru..

Jacee said:

Let's see what is running in security to determine your question.

Download Security Check by screen317 from here http://screen317.spywareinfoforum.org/SecurityCheck.exe or here http://screen317.spywareinfoforum.org/
Save it to your Desktop.
Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt.
Please post the contents of that document.

Ok, thank you again for so much help. One thing I noticed prior to scanning was that firefox would close with no error message, just exit and when I open it I'm offered to restore the session.

I checked the taskmanager and saw that my dllhost.exe was hogging a lot of memory (though not sure that was related to firefox closing or the system freezing.

Also, I had to disable kingsoft realtime defense because almost every application cited here to download kept getting quarantined. Thinking I may have to uninstall it.

Saved the log file from the scan as checkup.txt

Jacee said:

Uninstall all of these programs:

Wise Registry Cleaner 7.83
CleanMyPC - Registry Cleaner
Duplicate Cleaner Free 3.1.4
Windows7 does not need a registry cleaner. More often then not, they will affect your computer in adverse ways, instead of helping it!

kingsoft kingsoft antivirus
Trend Micro
You have three anti-virus programs running (including MSE). Anti-virus programs are resource hogs. They will fight each other for your system's resources and some fight each other's virus definitions.

Reboot after uninstalling all the above applications.

If you want to have another anti-virus to scan your system, use an "online scanner". I recommend ESET.
scan your machine with ESET OnlineScan[/b]

1. Hold down Control and click on the following link to open ESET OnlineScan in a new window.
   ESET OnlineScan
2. Click the button.
3. For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
   
   1. Click on to download the ESET Smart Installer. Save it to your desktop.
   2. Double click on the icon on your desktop.
   
   
4. Check
5. Click the button.
6. Accept any security warnings from your browser.
7. Check
8. Push the Start button.
9. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
10. When the scan completes, push
11. Push , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
12. Push the button.
13. Push

Sorry for the in between replies...working at the same time. Ok, will uninstall those programs, but do I need to uninstall the duplicate cleaner? I actually do use that mostly with my usb flash drives because I'm constantly moving files from one computer to the other and use duplicate cleaner to just delete duplicate word files or pictures...not really on the laptop itself.

Wow, didn't know I don't need a registry cleaner...the way they are touted on legit sites.

As for online scanners, I use the trend micro housecall (aside from the extra stuff I'll delete as suggested) is that ok to keep or should I just go with eset?

Jacee said:

You can keep the duplicate cleaner for your flash drive. You will need TrendMicro's uninstall tool:
Uninstalling Trend Micro program using the Diagnostic Toolkit

Umm, Jacee...call me paranoid a bit, but just wanted to advise on what took place with stage 2 TFC...ran it, found temp files, but when it finished, it didn't prompt me to restart to clean...instead is opened my "libraries" folder...is that indicative of anything?

I'm wondering if SlimCleaner may have something to do with opening the Libraries folder

Ok, well I'll uninstall slimcleaner as well, and will restart and do the eset scan and send log file