HJT log looks clean.
AVG report indicates three infection locations.
One in Documents & Settings, which was cured.
Two others are in Restore Points.
One was moved to the vault, the other can't be cured.
We'll reset System Restore, and it should take care of the problem.
1. Download
ATF Cleaner by Atribune.
Double-click
ATF-Cleaner.exe to run the program.
Under
Main choose:
Select All
Unselect Cookies.
Click the
Empty Selected button.
If you use Firefox browser
Click
Firefox at the top and choose:
Select All
NOTE: If you would like to keep your saved passwords, please click
No at the prompt.
Unselect Cookies.
Click the
Empty Selected button.
If you use Opera browser
Click
Opera at the top and choose:
Select All
NOTE: If you would like to keep your saved passwords, please click
No at the prompt.
Unselect Cookies.
Click the
Empty Selected button.
Click
Exit on the Main menu to close the program.
2. Turn off System Restore:
-
Windows XP:
1. Click Start.
2. Right-click the My Computer icon, and then click Properties.
3. Click the System Restore tab.
4. Check "Turn off System Restore".
5. Click Apply.
6. When turning off System Restore, the existing restore points will be deleted. Click Yes to do this.
7. Click OK.
-
Windows Vista:
1. Click Start.
2. Right-click the Computer icon, and then click Properties.
3. Click on System Protection under the Tasks column on the left side
4. Click on Continue on the "User Account Control" window that pops up
5. Under the System Protection tab, find Available Disks
6. Uncheck the box for any drive you wish to disable system restore on (in most cases, drive "C:")
7. When turning off System Restore, the existing restore points will be deleted. Click "Turn System Restore Off" on the popup window to do this.
8. Click OK
3. Restart computer.
4. Turn System Restore on.
5. Make sure,
Windows Updates are current.
6. Empty AVG vault. Re-run AVG, and see, if it still reports anything.