Once again, latest FRST.txt is here:
http://users.frii.com/viciii3/FRST.txt
A couple of things I noticed...why would "regedit.exe" run at startup (if I am looking at the log correctly)? Also, I'm not sure what the "HP button managaer" is?
Button Mgr: Looks to be a Webcam driver, Regedit has an [x] on the right of the entry - should be resolved.
Why Regedit was started at boot? Not sure.
viciii3,
My apology for the delay...
Before I forget, you may want to consider purchasing a USB Hard Disk Drive, and storing your photos and any other goodies/memories there. In the event another infection took hold of the computer, the HDD would not be plugged in to it. Also, copying the photos to a CD would work. You would need some type of software to copy them. Just a thought.
Let's press on...
Please open: Notepad
Copy the contents of the quote box below.
Paste the to Notepad.
Save it on the flashdrive that has FRST as: fixlist.txt
[quote]start
HKLM-x32\...\Run: [] [x]
HKU\mom\...\Run: [Regedit32] C:\windows\system32\regedit.exe [x]
2013-02-19 10:21 - 2013-02-19 10:49 - 00000184 ____A C:\ProgramData\-XHnASFcJrnlLmYDr
2013-02-19 10:21 - 2013-02-19 10:49 - 00000160 ____A C:\ProgramData\-XHnASFcJrnlLmYD
2013-02-19 10:20 - 2013-02-19 10:49 - 00000088 ____A C:\ProgramData\XHnASFcJrnlLmYD
end[quote]
Now, restart the computer and enter System Recovery Options/Command Prompt, etc., as you did before.
Run FRST and press the Fix button, just once, and wait.
When done, the tool creates a log on the flashdrive called: Fixlog.txt
Please post Fixlog.txt to your reply.
Also, do you know what these folders are, or what they contain:
C:\Users\mom\Application Data\3D9CBA70
C:\Users\mom\AppData\Roaming\3D9CBA70
Quote