critical system errors! Log from smitfraudfix

We may not be able to clean everything the first time around because you have not posted a Hijackthis log, but we'll do our best.

Please print these instructions so you can refer to them easily.

Download AVG Anti-Spyware from HERE and save that file to your desktop.
This is a 30 day trial of the program

1. 
   
2. Once you have downloaded ewido anti-spyware, locate the icon on the desktop and double-click it to launch the set up program.
3. Select Change state" to inactivate 'Resident Shield' and 'Automatic Updates'
4. Right click on ewido in the system tray and uncheck "Start with Windows".
   Go to Start > Run and type: services.msc
5. Press "OK".
6. In Services, click the "Extended tab" and scroll down the list to find ewido anti-spyware 4.0 guard.
7. When you find the guard service, double-click on it.
8. In the Properties Window > General Tab that opens, click the "Stop" button.
9. From the drop-down menu next to "Startup Type", click on "Manual".
10. Now click "Apply", then "OK" and close the Services window.
11. Once the setup is complete you will need run AVG AS and update the definition files.
12. On the main screen select the icon "Update" then select the "Update now" link.
13. Next select the "Start Update" button, the update will start and a progress bar will show the updates being installed.
14. If you are having problems with the updater, manually update with the AVG AS Full database installer from here.
    
15. Once the update has completed select the "Scanner" icon at the top of the screen, then select the "Settings" tab.
16. Once in the Settings screen click on "Recommended actions" and then select "Quarantine".
17. Under "Reports"
18. Select "Automatically generate report after every scan"
19. Un-Select "Only if threats were found"
20. Close AVG Anti-Spyware, Do Not run a scan just yet. We will shortly.
    
    
    
    Please reboot your computer in Safe Mode by doing the following :
    • Restart your computer
    • After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
    • Instead of Windows loading as normal, a menu with options should appear;
    • Select the first option, to run Windows in Safe Mode, then press "Enter".
    • Choose your usual account.
    Once in Safe Mode, open the SmitfraudFix folder again and double-click smitfraudfix.cmd
    Select option #2 - Clean by typing 2 and press " Enter" to delete infected files.
    
    You will be prompted : "Registry cleaning - Do you want to clean the registry ?"; answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.
    
    The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter".
    
    The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart anyway into normal Windows.
    A text file will appear onscreen, with results from the cleaning process; please copy/paste the content of that report along with all others into your next reply along with a new HijackThis log.
    The report can also be found at the root of the system drive, usually at C:\rapport.txt
    
    Warning : Running option #2 on a non-infected computer will remove your Desktop background.
    
    
    ____________________________________________________________
    
    Clean out your Temporary Internet files. Proceed like this:
    
    • Quit Internet Explorer and quit any instances of Windows Explorer.
    • Click Start, click Control Panel, and then double-click Internet Options.
    • On the General tab, click Delete Files under Temporary Internet Files.
    • In the Delete Files dialog box, tick the Delete all offline content check box , and then click OK.
    • On the General tab, click Delete Cookies under Temporary Internet Files, and then click OK.
    • Click on the Programs tab then click the Reset Web Settings button. Click Apply then OK.
    • Click OK.
    Next Click Start, click Control Panel and then double-click Display.
    Click on the Desktop tab, then click the Customize Desktop button. Click on the Web tab. Under Web Pages you should see a checked entry called Security info or something similar. If it is there, select that entry and click the Delete button. Click Ok then Apply and Ok.
    Empty the Recycle Bin by right-clicking the Recycle Bin icon on your Desktop, and then clicking Empty Recycle Bin
    ______________________________
    
    Close ALL open Windows / Programs / Folders.
    
    
    • While in Safe Mode, launch AVG Anti-Spyware by double-clicking the icon on your desktop.
    • Select the "Scanner" icon at the top and then the "Scan" tab then click on "Complete System Scan".
    • AVG AS will now begin the scanning process, be patient this may take a little time.
    • Once the scan is complete do the following:
      
    • If you have any infections you will prompted, then select "Apply all actions"
    • Next select the "Reports" icon at the top.
    • Select the "Save report as" button in the lower left hand of the screen and save it to a text file on your system (make sure to remember where you saved that file, this is important).
    • Close AVG AS and reboot your system back into Normal Mode.
    
    
    Click HERE to download a self-extractable version of HijackThis.
    
    • Double click on hijackthis.exe to extract hijackthis to folder c:\hijackthis.
    • It will extract it to that folder and open the folder for you.
    • It will also create a shortcut on your desktop to HijackThis.
    • 
      
    • It will scan and the log should open in notepad.Click on "Edit > Select
    • All" then click on "Edit > Copy" to copy the entire contents of the
    • log.
    Come back here to this thread and paste the HJT log in your next reply. Also include the report from SmitfraudFix found here: C:\rapport.txt
    and the report from AVG AS
    
    DO NOT have HijackThis fix anything yet. Most of what it finds will be harmless or even required.
    
    You may need several replies to post the requested logs, otherwise they might get cut off.