I am not sure how to see Bios with the keyboard problem. What is the key sequence and timing for Win 7?
Dug up manual, F2 during dell logo gets Bios. Laptop discusses F12 for a hardware tester, and both have F8 for modified windows boot. Still not sure keyboard will be active at the right time.
Thanks,
John
If you have a PS2 keyboard hanging around you could use that to get to the BIOS setup
Basically you need USB to be active at boot :
enable USB device legacy support in BIOS
Any further alerts from Avast ?
Finished a full scan which ran over night. Avast only found files located where OTL moved them. Complained Avast dll files path not present. Looking at seachcom_001 just now after scan and the -f.list file was 0 bits, but scaning the other files found a threat in anther list file that was not -f name but was -m. Other files there with -m and -l names were not considered threat. Some had 0 content, but some had some content and were not found as threat files. Avast did not self start on boot last night, but did wake from icon on desktop when I clicked it.
My Dell desktop does not have the older keyboard style connector interface according to manual.
New scan also found same file in zip file in IE temporary Internet Files.
On USB issue, went back through Device Manager and rechecked power management functions on USB devices. Found both Generic USB Hub and USB Root Hub entries in Power Management for “Allow this device to wake the computer” to be grayed out and not checked. Could not get that to change. Under Human interface, all usb input devices did not have a power management tab. HID compliant devices did, and I made sure all were checked on for wake up. The mouse and keyboard entries listed them as HID compliant devices and both are checked for Power Management wake up. So USB hub wake up seems to be the problem. Something has blocked Power Management wake up feature for them.
Remove the hub and then check whether power management is available
New scan also found same file in zip file in IE temporary Internet FilesThat would suggest that it is a web site that you are visiting... Have you set IE to delete temp files on closing ?
Added searchcom_001 to default locations for CCleaner to delete. Already set to delete IE temporary Internet Files and other similiar locations. Avast run with high detection levels are detecting spybot teatimer in memory as threat: JS:ScriptSH-inf [Trj]. Also getting some zip files as bombs. One was photos I scanned and stored about a year ago. Another is old files from Nero 8 in installed folder.
Looked at usbhub entry in hardware with regedit, but did not know enough to make any changes. There were entries but did not know what they were doing.
I did set IE to delete temp files in the advanced tap but am still finding them. Just checked and that selection was still there, but some of the security settings looked lower with a protection mode unchecked. Changed to medium level standard settings and when I restart will take effect.
Moved mouse and keyboard to forward direct USB ports on computer. Will see if that gets around hub issue. Doesn’t the boot cycle restart all hub hardware? I did a hardware check on the hub entries with device manager and saw no changes after the plug and play check came back.
Have not been going to many of my usual sites with this working. Mainly here and microsoft sites. Also a few new sites on virus issues.
The fact that it resides in the temp ie files leads me to suspect a website, plus I can see no sign of Blecko on your system
It might actually be worth removing the Hub from the computer and see if that resolves the boot problem
A compression bomb just means a highly compressed file and is just an advisory … Although I think they should remove that description
How is the computer behaving otherwise ?
Got into Bios. no legacy option, just on or off and data rate. Both were right.
Tested removing hubs and changing power options. Tried reinstalling driver, reset, adding hubs without devices, reinstalling hub drivers, and did not find any fixes for power management option.
I usually use gogoanime.com, stoptazmo.com, and a paid anime download site for fun. Otherwise shop at Amazon, and other big name sites. Visit manufactorer sites for new hardware. AVS software installed for video work. Nero 8 also. added freemake video software this year. use spybot, windows defender, and Avast with windows firewall. have dropbox.
Will upgrade IE to high security after this visit for a little while. Usually use medium.
Have turned on avast protection of IE. Also teatimer and related spybot protection.
Can get MS virus scanning software to try to find anything. Also have access to Sy norton suite from comcast. Could download Avira free. Also have tried to install a free one year copy of Kaspersky Anti-virus on the laptop, but removed it when it did not install right with the firewall. Stopped all other access to internet. Found some suggestions for fixing it later, but did not have windows firewall access set up right at the time to do any of them. Not sure if it will allow installation on a different machine.
Been using Avast without the mail shield working for a year. Figured out how to get my thunderbird and Avast to work right last weekend. Also found out the MS Live mail and a hotmail account can not be done in avast that I use on my laptop for now. Trying out live for the first time there.
I will also remove the anti-phishing domain advisor, have not seen any results of it running.
I need to remove the remainder of spyhunter that is running. I uninstalled it, and it seems to have left something behind. It could be my infection.
Most computer programs are working normally. No errors. Long time issue with incomplete installation of DAP. Dap installed completely on the laptop with same OS. Just deleted some new files on searchcom location. Freemaker installation had some adware that was a problem several months ago. Also keyboard boot problem started then. Tried Spyhunter due to that about that time. Avast had been finding some infections in the java cach. Boot time scans were best at clearing them. Otherwise both boot time and standard full system scans did not find this problem until Jul 19. Last full system scan before that was Jul 5.
I expect to remove the OTL moved files when you give approval.
I did a repair of Avast which fixed the boot problem.
Let me know when I should start further clean up attempts without you.
Thanks,
John
OK I will remove the tools but you should clear out all the other stuff
Freemaker installation had some adware that was a problem several months agoThat probably came bundled with the Becko toolbar
Subject to no further problems 
I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems
Now the best part of the day ----- Your log now appears clean 
A good workman always cleans up after himself so…The following will implement some cleanup procedures as well as reset System Restore points:
Run OTL
[*]Under the Custom Scans/Fixes box at the bottom, paste in the following
:Commands [resethosts] [emptytemp] [Reboot]
[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
Remove ComboFix
[*]Hold down the Windows key + R on your keyboard. This will display the Run dialogue box
[*]In the Run box, type in ComboFix /Uninstall (Notice the space between the “x” and “/”) then click OK
http://i1224.photobucket.com/albums/ee362/Essexboy3/Misc%20screen%20shots/CF_Uninstall-1.jpg
[]Follow the prompts on the screen
[]A message should appear confirming that ComboFix was uninstalled
Run OTL and hit the cleanup button. It will remove all the programmes we have used plus itself.
We will now confirm that your hidden files are set to that, as some of the tools I use will change that
[*]Go to control panel
[*]Select folder options (Appearance > Folder options in category view)
[*]Select the View Tab.
[*]Under the Hidden files and folders heading select Do not show hidden files and folders.
[]Click Yes to confirm.
[]Click OK.
http://users.telenet.be/bluepatchy/miekiemoes/images/javaicon.gif
Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system.
Please follow these steps to remove older version of Java components and upgrade the application.
Upgrading Java:
[] Go to this site and click Do I have Java
[] It will check your current version and then offer to update to the latest version
SPRING CLEAN
To manually create a new Restore Point
[*]Go to Control Panel and select System
[*]Select System
[*]On the left select System Protection and accept the warning if you get one
[*]Select System Protection Tab
[*]Select Create at the bottom
[*]Type in a name i.e. Clean
[*]Select Create
Now we can purge the infected ones
[*]GoStart > All programs > Accessories > system tools
[*]Right click Disc cleanup and select run as administrator
[*]Select Your main drive and accept the warning if you get one
[*]For a few moments the system will make some calculations
[*]Select the More Options tab
[*]In the System Restore and Shadow Backups select Clean up
[*]Select Delete on the pop up
[]Select OK
[]Select Delete
Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:
http://img233.imageshack.us/img233/7729/mbamicontw5.gif
Malwarebytes. Update and run weekly to keep your system clean
Download and install FileHippo update checker and run it monthly it will show you which programmes on your system need updating and give a download link
It is critical to have both a firewall and anti virus to protect your system and to keep them updated. To keep your operating system up to date visit
To learn more about how to protect yourself while on the internet read our little guide How did I get infected in the first place ?
Keep safe 
Used your script to take off the programs on both desktop and laptop. Have a few little items left, but mostly done. I ran OTL for 180 days back files before removing it. Attaching log for your info. Still seeing files generated on searchcom_001. Removed a lot of unused software that was running in background.
I failed to mention that a program that I installed to backup data from my cell phone (sony Erik…) had been identified as virus by avast much later than when the installation was done. Only the install program was identified. However the program was pulling a different program from the web since the manufactorer had dropped support called Sony PC Suite. That unusal practice might have made the identification. Came from Cnet2 which I thought was ok site. I submitted it from the virus chest to avast for review as false positive, but have not heard anything back. I also sent the searchcom_001 infected file for review.
The Java site passed my configuration without any recommendations, but I reviewed removing old versions on the site, did so, and it still passed as complete.
Do you use Speedbit ?
OK that revealed an old Blekko data entry
Warning This fix is only relevant for this system and no other, using on another computer may cause problems
Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot
Run OTL
[*]Under the Custom Scans/Fixes box at the bottom, paste in the following
https://dl.dropbox.com/u/73555776/OTL_Fix.GIF
:Files ipconfig /flushdns /c C:\ProgramData\blekko toolbars:Commands
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]
[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
I think speedbit comes with DAP which I use. I have Dap on both computers, but have avoided speedbit as much as possible. In clearing software, I removed DAP programs from the desktop. Do you want a new scan for the changes made before I do that fix?
No run the fix as is please
OK, ran fix and followed with 180 day scan with otl. attaching results. size of each will require multiple posts.
180 day scan results after blecko fix run. Sorry size is 272KB and is not being allowed to be posted. Program said some data was lost in ANSI version.
I had speedbit on as a result of errors in downloading DAP. When I forgot to uncheck download of speedbit, it would also change my homepage to speedbit search page. I do not like that, so try not to download it. I was letting a copy of speed bit run as an alternative search on IE for several months. Does Speedbit do high risk data mining of personal data?
Thanks,
John