Virus issues

Your first link doesn't work, it says error 404 ;-)

I have a problem with SPYBOT SEARCH and Destroy, when I try to download AD-R.exe, a window opens saying "the resident TeaTimer.exe of spybot is active. Under these conditions, the program cannot continue to execute" :-(
I tried uninstalling spybot but I can't either "Messages file 'C:\Spybot - Search & Destroy\unins000.msg' is missing. Please correct the problem or obtain a new copy of the program.

Ok thanks, I managed to do it but I don't understand, the scan progress of AD-REMOVER is stuck at 4%.

I have the Avast antivirus installed on my computer, there won't be any conflict with squared-free???

Here is the ad-report, by the way, I have been forced to work in safe mode since this morning; previously, I was able to open it in debugging mode, but not anymore. The symptoms are as follows: the computer crashes during the full loading of Windows; I get to the desktop, and then suddenly it freezes. However, it works in safe mode.
.
======= AD-REMOVER REPORT 1.1.4.6_E | WINDOWS XP/VISTA/7 ONLY =======
.
Updated by C_XX on 11.12.2009 at 20:53
Contact: AdRemover.contact@gmail.com
Website: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Started at: 9:11:47, 14/12/2009 | Safe mode | Option: CLEAN
Executed from: C:\Program Files\Ad-Remover\
Operating system: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
PC Name: ***** | Current user: ****
.
============== NEUTRALIZED ITEM(S) ==============
.

C:\DOCUME~1\***\APPLIC~1\Mozilla\Firefox\Profiles\x4a0hq4a.default\searchplugins\askcom.xml
C:\Program Files\DaemonTools_WhenUSave_Installer
C:\DOCUME~1\***\LOCALS~1\Temp\AskSearch
C:\Program Files\Mozilla Firefox\components\---W2N-36i-i.dll

(!) -- Temporary files deleted.

.
HKCU\software\microsoft\internet explorer\searchscopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440}
.
============== Additional Scan ==============
.
.
* Mozilla FireFox Version 3.5.5 [fr] *
.
Profile Name: x4a0hq4a.default (*****)
.
(**, prefs.js) Browser.download.lastDir, H:
(**, prefs.js) Browser.search.defaultenginename, Ask.com
(**, prefs.js) Browser.search.selectedEngine, Google
(**, prefs.js) Browser.startup.homepage, hxxp://google.fr/
.
(**, prefs.js) DELETE - Browser.search.defaultengine, Ask.com
(**, prefs.js) DELETE - Browser.search.defaultenginename, Ask.com
(**, prefs.js) DELETE - Browser.search.order.1, Ask.com
.
.
.
* Internet Explorer Version 7.0.5730.11 *
.
[HKEY_CURRENT_USER\..\Internet Explorer\Main]
.
Do404Search: 01000000
Local Page: C:\WINDOWS\system32\blank.htm
Show_ToolBar: yes
Enable Browser Extensions: yes
Start Page: hxxp://fr.msn.com/
Default_search_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Default_page_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
.
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: %SystemRoot%\system32\blank.htm
Start Page: hxxp://fr.msn.com/
Search bar: hxxp://search.msn.com/spbasic.htm
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
.
Tabs: res://ieframe.dll/tabswelcome.htm
.
============== Suspect (Cracks, Serials, ...) ==============
.
C:\Documents and Settings\**\Application Data\Macromedia\Flash Player\#SharedObjects\LVGMY7XF\localhost\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Intro\Fra\5pack_fr.exe
C:\Documents and Settings\**\Local Settings\Temp\Temporary directory 1 for [PC GAME] Worms Armageddon + All weapons unblocked + cracked + xp patch by Lupen[FUMAI].zip
C:\Documents and Settings\**\Local Settings\Temp\Temporary directory 2 for [PC GAME] Worms Armageddon + All weapons unblocked + cracked + xp patch by Lupen[FUMAI].zip
C:\Documents and Settings\**\Local Settings\Temp\Temporary directory 22 for - Nero Burning Rom 6.6.0.6 Nero Vision Express 3.0.1.18 Nero Mediaplayer 1.4.0.27 Neromix 1.4.0.27 Neronet 1.2.0.2 By Doogyice With Patch Fr.zip
C:\Documents and Settings\**\Local Settings\Temp\Temporary directory 23 for - Nero Burning Rom 6.6.0.6 Nero Vision Express 3.0.1.18 Nero Mediaplayer 1.4.0.27 Neromix 1.4.0.27 Neronet 1.2.0.2 By Doogyice With Patch Fr.zip
C:\Documents and Settings\**\Local Settings\Temp\Temporary directory 24 for - Nero Burning Rom 6.6.0.6 Nero Vision Express 3.0.1.18 Nero Mediaplayer 1.4.0.27 Neromix 1.4.0.27 Neronet 1.2.0.2 By Doogyice With Patch Fr.zip
C:\Documents and Settings\**\Local Settings\Temp\Temporary directory 3 for Norton AntiVirus 2004 Pro FINAL with KeyGen & LiveUpdateExtender.zip
C:\Documents and Settings\**\Local Settings\Temp\Temporary directory 6 for Norton AntiVirus 2004 Pro FINAL with KeyGen & LiveUpdateExtender.zip
C:\Documents and Settings\**\Mes documents\excel\[PC GAME] Worms Armageddon + All weapons unblocked + cracked + xp patch by Lupen[FUMAI].zip
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Intro.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\!crack\HASPEmulPE-XP_2_33_a002W.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\!crack\hinstall.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\!crack\keygen.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\Acis\setup.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\Acrobat Reader\AdbeRdr60_enu.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\Acrobat Reader\AdbeRdr60_fra.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\Apilog - acapulco\setup.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\Apilog - bahia\setup.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\Apilog - hookipa\setup.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\Apilog - ipanema\setup.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\Apilog - marina\setup.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\Apilog - paloma\setup.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\Calculators\setup.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\CBS Pro\setup.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\Cosmo Player 2.0\cp20setup.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\Csp\setup.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\DAO\DISK1\SETUP.EXE
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\DAO\DISK1\UNINST.EXE
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\DirectX\DirectX9\dxsetup.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\ESOP\setup.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\Hasp\hdd32.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\Hasp\diagnostix\diagnostix.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\Hasp\diagnostix\ndiag16.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\Hasp\diagnostix\ndiagdos.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\Hasp\diagnostix\usbready.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\Hasp\diagnostix\install\diagnostix.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\Hasp\drivers\4.95\hinstall.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\Hasp\drivers\4.96\hinstall.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\Hasp\drivers\4.98\hinstall.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\Hasp\drivers\5.11\haspdinst.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\Hasp\monitor\aksmon.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\Hasp\monitor\hls32svc.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\Hasp\monitor\install\AKSMON32.EXE
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\Hasp\servers\novell\sap2file.exe
C:\Documents and Settings\**\Mes documents\Robobat Robot Office 19 with crack\Install\Hasp\servers\win32\lmsetup.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Install\Kpm\setup.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Install\Kremote\setup.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Install\Navigator\setup.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Install\Net_Mon\setup.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Install\Net_Prot\setup.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Install\Rcad\setup.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Install\RCAD - Enablers\setup.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Install\Robot\setup.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Install\RobotOffice\setup.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Install\ROC\setup.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Install\ROM\setup.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Install\Simulog\setup.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Install\Simulog - server\lmgrd.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Install\Simulog - server\lmtools.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Install\Simulog - server\lmutil.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Install\Simulog - server\simulogd.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Install\SolidDXF\setup.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Install\TSCC Codec\TSCC.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Install\UpdateService\installshieldupdateservice.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Intro\Eng\4pack_en.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Intro\Eng\demo32.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Intro\EngExp\4pack_en.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Intro\EngExp\demo32.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Intro\Fra\5pack_fr.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Intro\Fra\demo32.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Intro\Fra\inst.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Intro\Pol\5pack_pl.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Intro\Pol\demo32.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Intro\Rom\4pack_en.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Intro\Rom\demo32.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Intro\Rus\4pack_ru.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Intro\Rus\demo32.exe
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Manuals\Italian\robot\robot_manual_ita_180.zip
C:\Documents and Settings\**\Mesdocuments\Robobat Robot Office 19 with crack\Manuals\Spanish\robot\robot_manual_spa_180.zip
C:\Documents and Settings\**\Mesdocuments\sci-masdecade\[PC GAME] Worms Armageddon + All weapons unblocked + cracked + xp patch by Lupen[FUMAI].zip
C:\Documents and Settings\**\Mesdocuments\sci-masdecade\[PC GAME] Worms Armageddon + All weapons unblocked + cracked + xp patch by Lupen[FUMAI]\wormsarm\clokspl.exe
C:\Documents and Settings\**\Mesdocuments\sci-masdecade\[PC GAME] Worms Armageddon + All weapons unblocked + cracked + xp patch by Lupen[FUMAI]\wormsarm\Landgen.exe
C:\Documents and Settings\**\Mesdocuments\sci-masdecade\[PC GAME] Worms Armageddon + All weapons unblocked + cracked + xp patch by Lupen[FUMAI]\wormsarm\RegSetup.exe
C:\Documents and Settings\**\Mesdocuments\sci-masdecade\[PC GAME] Worms Armageddon + All weapons unblocked + cracked + xp patch by Lupen[FUMAI]\wormsarm\Silkworm_patch.exe
C:\Documents and Settings\**\Mesdocuments\sci-masdecade\[PC GAME] Worms Armageddon + All weapons unblocked + cracked + xp patch by Lupen[FUMAI]\wormsarm\WA.exe
C:\Documents and Settings\**\Mesdocuments\sci-masdecade\[PC GAME] Worms Armageddon + All weapons unblocked + cracked + xp patch by Lupen[FUMAI]\wormsarm\User\BankEditor.exe
C:\Documents and Settings\**\Mesdocuments\Thé doc\star_wars_battlefront_2_patch_v1.1_europe_18913.exe
.
===================================
.
14418 Bytes - C:\Ad-Report-CLEAN[1].log
518 Bytes - C:\Ad-Report-SCAN[1].log
518 Bytes - C:\Ad-Report-SCAN[2].log
518 Bytes - C:\Ad-Report-SCAN[3].log
14644 Bytes - C:\Ad-Report-SCAN[4].log
.
0 File(s) - C:\DOCUME~1\**\LOCALS~1\Temp
0 File(s) - C:\WINDOWS\Temp
0 File(s) - C:\WINDOWS\Prefetch
.
23 File(s) - C:\Program Files\Ad-Remover\BACKUP
2 File(s) - C:\Program Files\Ad-Remover\QUARANTINE
.
Finished at: 9:52:33 | 14/12/2009 - CLEAN[1]
.
============== E.O.F ==============

Yes, here is the report. I have quarantined those that were at high risk; should I quarantine all the others?

Version - a-squared Free 4.5
Last update: 14/12/2009 10:29:46

Scan settings:

Scan type: Detailed Scan
Objects: Memory, Traces, Cookies, C:\, D:\, E:\
Scan inside archives: On
Heuristic analysis: Off
Scan in ADS: On

Scan started: 14/12/2009 10:30:56

c:\windows\temp\altnet Detected objects: Trace.Directory.TopSearch!A2
Value: HKEY_CURRENT_USER\Software\Kazaa\InstantMessaging --> IgnoredUsers Detected objects: Trace.Registry.Kazaa Lite Resurrection!A2
Value: HKEY_CURRENT_USER\Software\Kazaa\LocalContent --> DisableSharing Detected objects: Trace.Registry.Kazaa Lite Resurrection!A2
Value: HKEY_CURRENT_USER\Software\Kazaa\SOCKS --> Enabled Detected objects: Trace.Registry.Kazaa Lite Resurrection!A2
Value: HKEY_CURRENT_USER\Software\Kazaa\Transfer --> ConcurrentDownloads Detected objects: Trace.Registry.Kazaa Lite Resurrection!A2
Value: HKEY_CURRENT_USER\Software\Kazaa\Transfer --> ConcurrentUploads Detected objects: Trace.Registry.Kazaa Lite Resurrection!A2
Value: HKEY_CURRENT_USER\Software\Kazaa\Transfer --> UploadBandwidth Detected objects: Trace.Registry.Kazaa Lite Resurrection!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Kazaa --> DisablePort80Listen Detected objects: Trace.Registry.Kazaa Lite Resurrection!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Kazaa --> UDP_probe_successes Detected objects: Trace.Registry.Kazaa Lite Resurrection!A2
Value: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Emule --> Order Detected objects: Trace.Registry.Emule 5.0!A2
Value: HKEY_CLASSES_ROOT\CLSID\{40B5CE81-C5A8-11D2-8183-00002440DFD8}\InprocServer32 --> ThreadingModel Detected objects: Trace.Registry.SurfSecret KeyPad 2.1!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{40B5CE81-C5A8-11D2-8183-00002440DFD8}\InprocServer32 --> ThreadingModel Detected objects: Trace.Registry.SurfSecret KeyPad 2.1!A2
Value: HKEY_CLASSES_ROOT\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} --> AppID Detected objects: Trace.Registry.dl.tvunetworks.com!A2
Value: HKEY_CLASSES_ROOT\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0}\InprocServer32 --> ThreadingModel Detected objects: Trace.Registry.dl.tvunetworks.com!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} --> AppID Detected objects: Trace.Registry.dl.tvunetworks.com!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0}\InprocServer32 --> ThreadingModel Detected objects: Trace.Registry.dl.tvunetworks.com!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TVUPlayer --> NSIS:Language Detected objects: Trace.Registry.dl.tvunetworks.com!A2
c:\windows\downloaded program files\downloader.inf Detected objects: Trace.File.Whazit!A2
Value: HKEY_LOCAL_MACHINE\software\classes\appid\adm.exe --> appid Detected objects: Trace.Registry.Cydoor.TOPicks.a!A2
Value: HKEY_LOCAL_MACHINE\software\classes\appid\altnet signing module.exe --> appid Detected objects: Trace.Registry.Cydoor.TOPicks.a!A2
Key: HKEY_CLASSES_ROOT\clsid\{66fc8717-efa7-4546-8c4a-e224f3a80c76} Detected objects: Trace.Registry.KaZaA!A2
Value: HKEY_CURRENT_USER\Software\Kazaa\Advanced --> Status Detected objects: Trace.Registry.Kazaa!A2
Value: HKEY_CURRENT_USER\Software\Kazaa\DontShow --> CloseToSystray Detected objects: Trace.Registry.Kazaa!A2
Value: HKEY_CURRENT_USER\Software\Kazaa\LocalContent --> DisableListFiles Detected objects: Trace.Registry.Kazaa!A2
Value: HKEY_CURRENT_USER\Software\Kazaa\Settings --> Date Detected objects: Trace.Registry.Kazaa!A2
Value: HKEY_CURRENT_USER\Software\Kazaa\Settings --> UseCount Detected objects: Trace.Registry.Kazaa!A2
Value: HKEY_CURRENT_USER\Software\Kazaa\Transfer --> CacheDiscoveryTime Detected objects: Trace.Registry.Kazaa!A2
Value: HKEY_CURRENT_USER\Software\Kazaa\Transfer --> CacheHost Detected objects: Trace.Registry.Kazaa!A2
Value: HKEY_CURRENT_USER\Software\Kazaa\Transfer --> CachePort Detected objects: Trace.Registry.Kazaa!A2
Value: HKEY_CURRENT_USER\Software\Kazaa\Transfer --> NoUploadLimitWhenIdle Detected objects: Trace.Registry.Kazaa!A2
Key: HKEY_CURRENT_USER\software\kazaa Detected objects: Trace.Registry.KaZaA!A2
Value: HKEY_CURRENT_USER\software\kazaa --> tmp Detected objects: Trace.Registry.KaZaA!A2
Key: HKEY_LOCAL_MACHINE\software\classes\clsid\{66fc8717-efa7-4546-8c4a-e224f3a80c76} Detected objects: Trace.Registry.KaZaA!A2
Value: HKEY_LOCAL_MACHINE\software\kazaa\bandwidth\in --> b0 Detected objects: Trace.Registry.KaZaA!A2
Value: HKEY_LOCAL_MACHINE\software\kazaa\bandwidth\in --> b0seconds Detected objects: Trace.Registry.KaZaA!A2
Value: HKEY_LOCAL_MACHINE\software\kazaa\bandwidth\in --> b1 Detected objects: Trace.Registry.KaZaA!A2
Value: HKEY_LOCAL_MACHINE\software\kazaa\bandwidth\lastestimate --> b Detected objects: Trace.Registry.KaZaA!A2
Value: HKEY_LOCAL_MACHINE\software\kazaa\bandwidth\lastestimate --> time Detected objects: Trace.Registry.KaZaA!A2
Value: HKEY_LOCAL_MACHINE\software\kazaa\bandwidth\out --> b0 Detected objects: Trace.Registry.KaZaA!A2
Value: HKEY_LOCAL_MACHINE\software\kazaa\bandwidth\out --> b0seconds Detected objects: Trace.Registry.KaZaA!A2
Value: HKEY_LOCAL_MACHINE\software\kazaa\bandwidth\out --> b1 Detected objects: Trace.Registry.KaZaA!A2
Value: HKEY_LOCAL_MACHINE\software\kazaa\cloudload --> sharedir Detected objects: Trace.Registry.KaZaA!A2
Key: HKEY_LOCAL_MACHINE\software\kazaa\connectioninfo Detected objects: Trace.Registry.KaZaA!A2
Value: HKEY_LOCAL_MACHINE\software\kazaa\connectioninfo --> kazaanet Detected objects: Trace.Registry.KaZaA!A2
Key: HKEY_LOCAL_MACHINE\software\kazaa\localcontent Detected objects: Trace.Registry.KaZaA!A2
Value: HKEY_LOCAL_MACHINE\software\kazaa\localcontent --> databasedir Detected objects: Trace.Registry.KaZaA!A2
Value: HKEY_LOCAL_MACHINE\software\kazaa\localcontent --> downloaddir Detected objects: Trace.Registry.KaZaA!A2
Key: HKEY_LOCAL_MACHINE\software\kazaa Detected objects: Trace.Registry.KaZaA!A2
Value: HKEY_LOCAL_MACHINE\software\kazaa --> listenport Detected objects: Trace.Registry.KaZaA!A2
Value: HKEY_LOCAL_MACHINE\software\kazaa --> tmp Detected objects: Trace.Registry.KaZaA!A2
Key: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\app management\arpcache\p2p networking Detected objects: Trace.Registry.KaZaA!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\My Way Speedbar Uninstall --> Changed Detected objects: Trace.Registry.MyWay!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\My Way Speedbar Uninstall --> SlowInfoCache Detected objects: Trace.Registry.MyWay!A2
C:\Documents and Settings\**\Application Data\Mozilla\Firefox\Profiles\x4a0hq4a.default\cookies.sqlite:1260455200500000 Detected objects: Trace.TrackingCookie.doubleclick.net!A2
C:\Documents and Settings\**\Application Data\Mozilla\Firefox\Profiles\x4a0hq4a.default\cookies.sqlite:1260456804875001 Detected objects: Trace.TrackingCookie.ad.zanox.com!A2
C:\Documents and Settings\**\Application Data\Mozilla\Firefox\Profiles\x4a0hq4a.default\cookies.sqlite:1260456805062504 Detected objects: Trace.TrackingCookie.tracking.publicidees.com!A2
C:\Documents and Settings\**\Application Data\Mozilla\Firefox\Profiles\x4a0hq4a.default\cookies.sqlite:1260456805062508 Detected objects: Trace.TrackingCookie.tracking.publicidees.com!A2
C:\Documents and Settings\**\Application Data\Mozilla\Firefox\Profiles\x4a0hq4a.default\cookies.sqlite:1260456805062510 Detected objects: Trace.TrackingCookie.tracking.publicidees.com!A2
C:\Documents and Settings\**\Application Data\Mozilla\Firefox\Profiles\x4a0hq4a.default\cookies.sqlite:1260467799109375 Detected objects: Trace.TrackingCookie.ad.yieldmanager.com!A2
C:\Documents and Settings\**\Application Data\Mozilla\Firefox\Profiles\x4a0hq4a.default\cookies.sqlite:1260467799109377 Detected objects: Trace.TrackingCookie.ad.yieldmanager.com!A2
C:\Documents and Settings\**\Application Data\Mozilla\Firefox\Profiles\x4a0hq4a.default\cookies.sqlite:1260467799109378 Detected objects: Trace.TrackingCookie.ad.yieldmanager.com!A2
C:\Documents and Settings\*\Application Data\Mozilla\Firefox\Profiles\x4a0hq4a.default\cookies.sqlite:1260467805515630 Detected objects: Trace.TrackingCookie.ad.yieldmanager.com!A2
C:\Documents and Settings\**\Application Data\Mozilla\Firefox\Profiles\x4a0hq4a.default\cookies.sqlite:1260519263015625 Detected objects: Trace.TrackingCookie.fl01.ct2.comclick!A2
C:\Documents and Settings\**\Application Data\Mozilla\Firefox\Profiles\x4a0hq4a.default\cookies.sqlite:1260519263031250 Detected objects: Trace.TrackingCookie.fl01.ct2.comclick!A2
C:\Documents and Settings\**\Application Data\Mozilla\Firefox\Profiles\x4a0hq4a.default\cookies.sqlite:1260519263234375 Detected objects: Trace.TrackingCookie.fl01.ct2.comclick!A2
C:\Documents and Settings\**\Application Data\Mozilla\Firefox\Profiles\x4a0hq4a.default\cookies.sqlite:1260521688609376 Detected objects: Trace.TrackingCookie.ad.zanox.com!A2
C:\Documents and Settings\**\Application Data\Mozilla\Firefox\Profiles\x4a0hq4a.default\cookies.sqlite:1260530800312501 Detected objects: Trace.TrackingCookie.fl01.ct2.comclick!A2
C:\Documents and Settings\**\Application Data\Mozilla\Firefox\Profiles\x4a0hq4a.default\cookies.sqlite:1260531193578126 Detected objects: Trace.TrackingCookie.tracking.publicidees.com!A2
C:\Documents and Settings\**\Application Data\Mozilla\Firefox\Profiles\x4a0hq4a.default\cookies.sqlite:1260531193578128 Detected objects: Trace.TrackingCookie.tracking.publicidees.com!A2
C:\Documents and Settings\**\Application Data\Mozilla\Firefox\Profiles\x4a0hq4a.default\cookies.sqlite:1260600833328000 Detected objects: Trace.TrackingCookie.www.smartadserver.com!A2
C:\Documents and Settings\**\Application Data\Mozilla\Firefox\Profiles\x4a0hq4a.default\cookies.sqlite:1260600834828001 Detected objects: Trace.TrackingCookie.stat.dealtime!A2
C:\Documents and Settings\**\Application Data\Mozilla\Firefox\Profiles\x4a0hq4a.default\cookies.sqlite:1260610200000000 Detected objects: Trace.TrackingCookie.www.googleadservices.com!A2
C:\Documents and Settings\**\Application Data\Mozilla\Firefox\Profiles\x4a0hq4a.default\cookies.sqlite:1260610710718004 Detected objects: Trace.TrackingCookie.ad.yieldmanager.com!A2
C:\Documents and Settings\**\Application Data\Mozilla\Firefox\Profiles\x4a0hq4a.default\cookies.sqlite:1260621504062000 Detected objects: Trace.TrackingCookie.statse.webtrendslive!A2
C:\Documents and Settings\**\Application Data\Mozilla\Firefox\Profiles\x4a0hq4a.default\cookies.sqlite:1260637633953000 Detected objects: Trace.TrackingCookie.www.com!A2
C:\Documents and Settings\**\Application Data\Mozilla\Firefox\Profiles\x4a0hq4a.default\cookies.sqlite:1260637635390000 Detected objects: Trace.TrackingCookie.www.com!A2
C:\Documents and Settings\**\Application Data\Mozilla\Firefox\Profiles\x4a0hq4a.default\cookies.sqlite:1260777890312001 Detected objects: Trace.TrackingCookie.ad.yieldmanager.com!A2
C:\Documents and Settings\**\Application Data\Mozilla\Firefox\Profiles\x4a0hq4a.default\cookies.sqlite:1260777890312003 Detected objects: Trace.TrackingCookie.ad.yieldmanager.com!A2
C:\Documents and Settings\**\Local Settings\Application Data\Mozilla\Firefox\Profiles\x4a0hq4a.default\Cache(2)\A31E9DEDd01 Detected objects: Trojan.Generic!IK
C:\GenProc\Outil\GetVersion.exe Detected objects: Trojan-Dropper.Agent!IK
C:\Program Files\sina\SAP\update\setup.exe Detected objects: Trojan.Generic!IK
C:\System Volume Information\_restore{516609DC-C6E7-4F60-8AED-682A1CD6D5AA}\RP949\A0147080.exe Detected objects: Trojan.Generic!IK

Analyzed

Files: 257192
Traces: 406988
Cookies: 669
Processes: 13

Objects found

Files: 4
Traces: 53
Cookies: 30
Processes: 0
Registry keys: 0

Scan finished: 14/12/2009 11:52:13
Scan time: 1:21:17

C:\GenProc\Outil\GetVersion.exe In Quarantine Trojan-Dropper.Agent!IK
C:\Documents and Settings\gilles fabrice\Local Settings\Application Data\Mozilla\Firefox\Profiles\x4a0hq4a.default\Cache(2)\A31E9DEDd01 In Quarantine Trojan.Generic!IK
C:\Program Files\sina\SAP\update\setup.exe In Quarantine Trojan.Generic!IK
C:\System Volume Information\_restore{516609DC-C6E7-4F60-8AED-682A1CD6D5AA}\RP949\A0147080.exe In Quarantine Trojan.Generic!IK

In Quarantine

Files: 4
Traces: 0
Cookies: 0

Well, here is the report, the problem persists, during the startup requested by malware, it was necessary to run in debug mode.
Malwarebytes' Anti-Malware 1.42
Database version: 3357
Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.11

12/14/2009 5:20:50 PM
mbam-log-2009-12-14 (5-20-50).txt

Scan type: Quick scan
Items scanned: 111475
Elapsed time: 12 minute(s), 6 second(s)

Infected memory process(es): 0
Infected memory module(s): 1
Infected registry key(s): 2
Infected registry value(s): 0
Infected registry data item(s): 0
Infected folder(s): 0
Infected file(s): 3

Infected memory process(es):
(No harmful items detected)

Infected memory module(s):
c:\WINDOWS\system32\sshnas.dll (Trojan.FakeAlert) -> Delete on reboot.

Infected registry key(s):
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SSHNAS (Trojan.Renos) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Handle (Malware.Trace) -> Quarantined and deleted successfully.

Infected registry value(s):
(No harmful items detected)

Infected registry data item(s):
(No harmful items detected)

Infected folder(s):
(No harmful items detected)

Infected file(s):
C:\WINDOWS\Tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\sshnas.dll (Trojan.FakeAlert) -> Delete on reboot.

navilog report

Fix Navipromo version 4.0.5 started on 14/12/2009 18:03:01.96

!!! Warning, this report may indicate legitimate files/programs!!!
!!! Post this report on the forum for analysis!!!

Tool executed from C:\Program Files\navilog1

Updated on 10.11.2009 at 18:00 by IL-MAFIOSO

Microsoft Windows XP Home Edition ( v5.1.2600 ) Service Pack 3
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 3000+ )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : ***** ( Administrator )
BOOT : Normal boot

Antivirus : avast! antivirus 4.8.1368 [VPS 091214-0] 4.8.1368 (Activated)


A:\ (USB)
C:\ (Local Disk) - NTFS - Total:74 Go (Free:44 Go)
D:\ (Local Disk) - NTFS - Total:70 Go (Free:69 Go)
E:\ (Local Disk) - FAT32 - Total:3 Go (Free:2 Go)
F:\ (CD or DVD)
G:\ (CD or DVD)
I:\ (USB)
J:\ (USB)
K:\ (USB)
L:\ (USB)


Search executed in normal mode


[b]No Navipromo/Egdaccess Infection found/b



*** Scan completed 14/12/2009 18:03:35.70 ***

I have cleaned everything well but I don't see where to repair the registry???
Avast keeps finding the virus I mentioned above every 5 minutes!?

Rooter.exe (v1.0.2) par Eric_71
.
SeDebugPrivilege accordé avec succès ...
.
Windows XP Édition Familiale (5.1.2600) Service Pack 3
[32_bits] - x86 Family 6 Model 10 Stepping 0, AuthenticAMD
.
[wscsvc] (Centre de sécurité) EN COURS D'EXECUTION (état:4)
[SharedAccess] EN COURS D'EXECUTION (état:4)
Pare-feu Windows -> Activé
.
Internet Explorer 7.0.5730.11
Mozilla Firefox 3.5.5 (fr)
.
A:\ [Amovible]
C:\ [Fixe-NTFS] .. ( Total:74 Go - Libre:44 Go )
D:\ [Fixe-NTFS] .. ( Total:70 Go - Libre:69 Go )
E:\ [Fixe-FAT32] .. ( Total:3 Go - Libre:2 Go )
F:\ [CD_Rom]
G:\ [CD_Rom]
I:\ [Amovible]
J:\ [Amovible]
K:\ [Amovible]
L:\ [Amovible]
.
Scan : 19:48.37
Chemin : C:\Documents and Settings\****\Bureau\Rooter.exe
Utilisateur : **** ( Administrateur -> OUI )
.
----------------------\\ Processus
.
Verrouillé [Processus Système] (0)
______ Système (4)
______ \SystemRoot\System32\smss.exe (348)
______ \??\C:\WINDOWS\system32\csrss.exe (412)
______ \??\C:\WINDOWS\system32\winlogon.exe (436)
______ C:\WINDOWS\system32\services.exe (484)
______ C:\WINDOWS\system32\lsass.exe (496)
______ C:\WINDOWS\system32\svchost.exe (652)
______ C:\WINDOWS\system32\svchost.exe (728)
______ C:\WINDOWS\System32\svchost.exe (800)
______ C:\WINDOWS\System32\svchost.exe (852)
______ C:\WINDOWS\System32\svchost.exe (1000)
______ C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe (1204)
______ C:\WINDOWS\Explorer.EXE (1212)
______ C:\Program Files\Alwil Software\Avast4\ashServ.exe (1264)
______ C:\WINDOWS\system32\spoolsv.exe (1640)
______ C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe (1676)
______ C:\Program Files\Fichiers communs\ACD Systems\FR\DevDetect.exe (1684)
______ C:\WINDOWS\SOUNDMAN.EXE (1700)
______ C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe (1744)
______ C:\WINDOWS\system32\ctfmon.exe (1816)
______ C:\WINDOWS\System32\svchost.exe (1904)
______ C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe (1912)
______ C:\Program Files\PhotoWise\quicklnk.exe (2028)
______ C:\Program Files\Java\jre6\bin\jqs.exe (176)
______ C:\Program Files\OpenOffice.org 3\program\soffice.exe (408)
______ C:\Program Files\Fichiers communs\RbtProt\sgsrv.exe (400)
______ C:\WINDOWS\System32\svchost.exe (860)
______ C:\Program Files\OpenOffice.org 3\program\soffice.bin (836)
______ C:\WINDOWS\System32\wdfmgr.exe (1064)
______ C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe (2384)
______ C:\Program Files\Alwil Software\Avast4\ashWebSv.exe (2504)
______ C:\WINDOWS\System32\alg.exe (2912)
______ C:\Documents and Settings\***\Bureau\Rooter.exe (3944)
.
----------------------\\ Disque\Harddisk0\
.
\Device\Harddisk0 [Secteurs : 63 x 512 Octets]
.
\Device\Harddisk0\Partition1 --[ MBR ]-- (Offset_Début:32256 | Longueur:79990815744)
\Device\Harddisk0\Partition0 (Offset_Début:79990848000 | Longueur:80048424960)
\Device\Harddisk0\Partition2 (Offset_Début:79990880256 | Longueur:75853499904)
\Device\Harddisk0\Partition0 (Offset_Début:155844380160 | Longueur:4194892800)
\Device\Harddisk0\Partition3 (Offset_Début:155844412416 | Longueur:4194860544)
.
----------------------\\ Tâches planifiées
.
C:\WINDOWS\Tasks\desktop.ini
C:\WINDOWS\Tasks\SA.DAT
C:\WINDOWS\Tasks\Symantec NetDetect.job
.
----------------------\\ Registre
.
.
----------------------\\ Fichiers & Dossiers
.
C:\DOCUME~1\***\Mes documents\excel\[PC GAME] Worms Armageddon + Toutes les armes débloquées + crack + patch xp par Lupen[FUMAI].zip
C:\DOCUME~1\***\Mes documents\***\[PC GAME] Worms Armageddon + Toutes les armes débloquées + crack + patch xp par Lupen[FUMAI].zip
C:\DOCUME~1\****\Mes documents\Robobat Robot Office 19 with crack\!crack\keygen.exe
[b]==> Cracks & Keygens <==/b
.
----------------------\\ Scan terminé à 19:48.47
.
C:\Rooter$\Rooter_1.txt - (14/12/2009 | 19:48.47).c

Well, I still have the same problem; to restart I have to press F8 and go into debug mode. Another symptom is that now my Windows firewall is disabled and I can't turn it back on.
Here is the report:
SmitFraudFix v2.424

Report created at 13:07:17.81, 15/12/2009
Executed from C:\Documents and Settings\***\Desktop\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
The file system type is NTFS
Fix executed in safe mode

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
!!!Warning, the following keys are not necessarily infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Stopping processes


»»»»»»»»»»»»»»»»»»»»»»»» hosts

127.0.0.1 localhost

»»»»»»»»»»»»»»»»»»»»»»»» VACFix

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.
»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files


»»»»»»»»»»»»»»»»»»»»»»»» IEDFix

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix

Agent.OMZ.Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» RK


»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: VIA Rhine II Fast Ethernet Adapter
DNS Server Search Order: 192.168.1.1

HKLM\SYSTEM\CCS\Services\Tcpip\..\{0881A4DB-E331-4D72-AB3C-F36D0049269D}: DhcpNameServer=***.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{0881A4DB-E331-4D72-AB3C-F36D0049269D}: DhcpNameServer=***.1.1
HKLM\SYSTEM\CS2\Services\Tcpip\..\{0881A4DB-E331-4D72-AB3C-F36D0049269D}: NameServer=****.2.0.50
HKLM\SYSTEM\CS3\Services\Tcpip\..\{0881A4DB-E331-4D72-AB3C-F36D0049269D}: DhcpNameServer=***.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=***.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=***.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=***.1.1


»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temporary Files


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Warning, the following keys are not necessarily infected!!!

"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» RK.2



»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

Cleaning completed.

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix
!!!Warning, the following keys are not necessarily infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» End

The link does not work..... ComboFix is not available for download

Here it is, it's done, I deleted all the .tmp files.

Well, I couldn't do the last operation you asked me because when I deleted the .temp files, I tried to restart the computer and then it was impossible to access Windows (safe mode, debugging, etc...) I tried everything but nothing worked. I had to reinstall Windows with a format of the hard drive, I don't have any viruses anymore but I lost everything... too bad. Thanks anyway for your collaboration.