There was not a desktop shortcut until I put one there last night after we got IE working (having disabled the Avast Security Addons).
I’ve deleted it now. What should I do next?
Could you now use IE to visit a few sites and let me know how the computer is behaving now
IE works fine but otherwise the PC is behaving exactly as before, including a repeat appearance in Avast stats of that script starting in Last Scanned Items.
Could you go to Control Panel > Internet options > Advanced Tab
Click the Reset button
Then try IE again to see if the script re-appears
Interestingly, it wouldn’t allow a reset until ‘all windows were closed’ - there were none open. Only when I killed the iexplor processes in Task Manager would it allow a reset. I haven’t seen the processes restart yet, but I’ll keep checking.
Running IE does, of course, start the process but they disappear when IE is closed.
Yes monitor it and if it restarts let me know and I will dig deeper
Unfortunately we are still left with all the same issues: multiple iexplor processes for no apparent reason, and Windows freezing or suddenly closing down once or twice each day. Avast alerts relating to those processes are still a regular occurrence.
I think I’ve proved that those processes are related to IE (I couldn’t do a reset of IE until I killed them), but why, on a 64-bit machine, are they occurring at all? A 32-bit version of IE is not even installed on this machine.
Is it significant that almost all viruses captured in the Chest (attached) are related to Win32?
They are all showing as adware and a fair few are in your download/temp folder
Lets have another look with OTL as I can now see what avast is finding
Could you run a quick scan with OTL and ensure all users is checked. There will only be one log
Log attached.
Windows suffered a shutdown during the first two attempts.
OK let me know the result of this fix please
Warning This fix is only relevant for this system and no other, using on another computer may cause problems
Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot
Run OTL
[*]Under the Custom Scans/Fixes box at the bottom, paste in the following
https://dl.dropbox.com/u/73555776/OTL_Fix.GIF
:Commands
[CREATERESTOREPOINT]
:OTL
O4 - HKU\S-1-5-21-3838763673-1115839168-2840729140-1000..\Run: [Akworks] C:\Windows\SysWow64\regsvr32.exe (Microsoft Corporation)
[2014/03/09 12:01:18 | 000,001,172 | ---- | C] () -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
:Commands
[resethosts]
[emptytemp]
[Reboot]
[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.
Log attached
Have you downloaded/installed/updated any programmes over the last few days
Avast on March 2nd. IE9 on March 5th - as I mentioned in my first post - because it wouldn’t run.
How is IE behaving now ?
IE has been behaving well since you had me do a reset several posts ago. Having said that, I rarely use it.
When you previously asked about recent downloads, I should have mentioned that over the weekend I started getting a mystery message on boot-up: ‘The security information is invalid or has been modified This program will be terminated’. A Google search seemed to point towards the ULead Video Studio programme that I haven’t used for months. I uninstalled it yesterday and haven’t yet re installed. I don’t get that message any longer.
This was around the time we were running the latest OTL scans. I hate to tempt fate, but since doing that uninstall as well as the last Run Fix yesterday, I haven’t seen any problems: no rogue processes, no Avast alerts, Windows is stable.
Can any of this be explained? Did the logs provide any clues?
If this is indeed now sorted, I’d like to thank you for all your help - it’s much appreciated.
There was some adware on the system which we removed with OTL also the run key which may be related to Ulead video trying to call home
Subject to no further problems 
I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems
Now the best part of the day ----- Your log now appears clean 
A good workman always cleans up after himself so…The following will implement some cleanup procedures as well as reset System Restore points:
Download and run Delfix
https://dl.dropboxusercontent.com/u/73555776/delfix.JPG
: Keep Java Updated :
WARNING: Java is the #1 exploited program at this time. The Department of Homeland Security recommends that computer users disable Java
See this article and this article.
I would recommend that you completely uninstall Java unless you need it to run an important software.
In that instance I would recommend that you disable Java in your browsers until you need it for that software and then enable it. (See How to diasble Java in your web browser and How to unplug Java from the browser)
Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:
CryptoPrevent install this programme to lock down and prevent crypto ransome ware
https://dl.dropboxusercontent.com/u/73555776/CryptoPrevent.JPG
Update and run weekly to keep your system clean
It is critical to have both a firewall and anti virus to protect your system and to keep them updated.
To learn more about how to protect yourself while on the internet read our little guide How did I get infected in the first place ?Keep safe 
Thanks for being house proud! I’ve done all that you asked. I’ve removed Java and I’ll see how much it affects me, if at all. Another good article here that supports your suggestion: http://www.theguardian.com/technology/askjack/2013/feb/08/java-remove-ask-jack-technology
CryptoPrevent up and running. I already had Malwarebytes.
I’ve looked at the ‘How did I get infected …’ article before and I’m a little concerned that the post is more than 5 years old. For example, tt mentions Spyblaster which I have seen denigrated here and elsewhere. Can we be sure these recommendations are still valid?
Is there real advantage in opting for the full version of Avast?
Finally, I’ve noticed of late that many (legitimate) websites contain adverts that do indeed reflect very closely products I have been looking at on other sites. Is that a direct consequence of adware and something that should never happen?
That thread is edited every few months or so but it does become old very quickly … I have yet to find another article that is more current.
The full advantage of either Pro or AIS is in the online banking security area, but in the main for the run of the mill home user, free should suffice.
The one thing always to bear in mind is that anti-malware/antivirus programmes are always playing catchup, the malware writers have the edge here
Unfortunately ads are a nice little earner for website owners, it is the malformed ads that are the problem and again it is always catchup time.
Most sites use their cookies to follow where you are going so using the AOS addon (when it works ) is a good ploy
I have been Java free now for a few years and only a minority of sites need it activated, so I do not go there
Just a final word (hopefully) to say thanks again for your assistance. No further problems have occurred and I hope to keep it that way.
And I have found a better security read
To learn more about how to protect yourself while on the internet read this little guide Best security practices Keep safe