yes please 
[quote author=maheshc link=topic=80903.msg666956#msg666956 date=1310699914]
[quote author=essexboy link=topic=80903.msg666794#msg666794 date=1310662977]
Would you like me to take a look ?
what is the next step to make you look at this issue ?
To ensure that I get all the information this log will need to be attached (instructions at the end) if it is to large to attach then upload to Mediafire and post the sharing link.
Download OTS to your Desktop
[*]Close ALL OTHER PROGRAMS.
[*]Double-click on OTS.exe to start the program.
[*]Check the box that says Scan All Users
[*]Under Additional Scans check the following:
Reg - Disabled MS Config Items
Reg - Drivers32
Reg - NetSvcs
Reg - SafeBoot Minimal
Reg - Shell Spawning
Evnt - EventViewer Logs (Last 10 Errors)
File - Lop Check
[*]Under the Custom Scan box paste this in
%USERPROFILE%..|smtmp;true;true;true /FP
%SYSTEMDRIVE%*.exe
/md5start
volsnap.*
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
/md5stop
%systemroot%*. /mp /s
hklm\software\clients\startmenuinternet|command /rs
hklm\software\clients\startmenuinternet|command /64 /rs
CREATERESTOREPOINT
[*]Now click the Run Scan button on the toolbar.
[*]Let it run unhindered until it finishes.
[*]When the scan is complete Notepad will open with the report file loaded in it.
[*]Click the Format menu and make sure that Wordwrap is not checked. If it is then click on it to uncheck it.
Please attach the log in your next post.
THEN
Download aswMBR.exe ( 1.8mb ) to your desktop.
Double click the aswMBR.exe to run it
Click the “Scan” button to start scan
http://i1224.photobucket.com/albums/ee362/Essexboy3/aswMBR2-1.gif
On completion of the scan click save log, save it to your desktop and post in your next reply
as you can see this is my previous post, the same problem is arising 
the OTS.EXE will get stuck while scanning “internet explorer settings…” :-[
OK switch programmes
Download OTL to your Desktop
[*]Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
[*]Select All Users
[*]Under the Custom Scan box paste this in
netsvcs
%SYSTEMDRIVE%*.exe
/md5start
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
/md5stop
%systemroot%*. /mp /s
CREATERESTOREPOINT
[*]Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
[*]When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
[*]Attach both logs
OTL is getting stuck in scanning firefox settings… same thing as before :-[
can you guess why this problem is arising ? is it coz of virus or some of my system files are corrupted ?
Could you try the quick scan with no script entered and if it sticks again - I have a tyotally different one to use
same thing, even in quick scan it is getting stuck in same place.
for your reference–
Few days ago at this same situation, you suggested to scan with DDS, later on you asked me to Download and Install Combofix
Ah right - I am old so I forget things ;D
Could you run aswMBR and DDS then please
aswMBR.TXT
DDS.TXT
attach.txt
cdrom is still showing as suspicious, so I will ask for a system analysis now
Download AVPTool from Here to your desktop
Run the programme you have just downloaded to your desktop (it will be randomly named )
First we will run a virus scan
On the first tab select all elements down to Computer and then select start scan
Once it has finished select report and post that.
http://i1224.photobucket.com/albums/ee362/Essexboy3/avpfront-1.jpg
Do not close AVPTool or it will self uninstall, if it does uninstall - then just rerun the setup file on your desktop
Now an analysis scan
Select the Manual Disinfection tab
Press the Gather System Information button
Once done Open the last report saved folder then attach the zip file to your next post zip
The file is located at C:\Users[i]your name[/i]\Desktop\Virus Removal Tool\setup_9.0.0.722_05.01.2011_20-34\LOG\avptool_sysinfo.zip
http://i1224.photobucket.com/albums/ee362/Essexboy3/avpmanual.jpg
Kaspersky scan report was 54 mb so i have zipped it (it was 2mb so i couldn’t attach)
http://www.mediafire.com/?25e8akeko0c4yrk
avptool_sysinfo.zip for some reason Zip files can’t be attached so i uploaded to mediafire.
CDrom.sys was reported OK there - what are your current problems ?
i found 2 viruses when the scan finished, but i couldn’t quarantine them at all. the kaspersky was popping up the message at the bottom to neutralize the viruses. what about them ? are they ok
I must have missed them on the log what were the names and yes let Kaspersky neutralise them
1) APART FROM THE KASPERSKY DETECTED VIRUSES, ADDITION TO THIS VIRUSES Avast ALSO pops up ANOTHER alert saying
- “Suspicious files have been detected (using a heuristic method).
This may be a sign of malware infection. Please allow the files to be
submitted to our lab for analysis.”
file name
system32\DRIVERS\1948418drv.sys
ACTION TO BE TAKEN
Ignore
I choose to ignore, coz i doubt it’s a kaspersky file that avast is detecting,
b[/b] The redirection to yahoo is still on.
b[/b] PLEASE FIND THE VIRUS FROM PREVIOUSLY ATTACHED KASPERSKY FILES
COZ IT WILL ALMOST TAKE 7 HOURS TO COMPLETE THE SCAN
SOME OF THEM I JUST FOUND
7/17/2011 7:39:52 PM Detected: HEUR:Trojan.Win32.Generic D:\System Volume Information_restore{3B1B6CF5-05D0-4D16-85D5-769DBCF39C8D}\RP10\A0025525.dll
7/17/2011 5:54:08 PM Detected: Trojan.Win32.Chifrax.d F:\BitTorrent\Microsoft Office 2007 Complete Version + CD Key.iso/Launcher.exe
\BitTorrent\Microsoft Office 2007 Complete Version + CD Key.iso/Launcher.exeThat is where the infection came from
Download MBRCheck.exe to your Desktop. Run the application.
If no infection is found, it will produce a report on the desktop. Post that report in your next reply.
If an infection is found, you will be presented with the following dialog:
[QUOTE]Enter ‘Y’ and hit ENTER for more options, or ‘N’ to exit:
[/quote]
Type N and press Enter. A report will be produced on the desktop. Post that report in your next reply.
Report posted below
Are you still having the same problem ? As at the moment I can see no further malware. What error do you get when you try to upload