Win32:patched-RP [trj]

Viruses and worms
1

Avast found Win32:patched-RP [trj] in explorer.exe (listed twice?) and winlogon.exe, but I don’t know how to clean those files. (I guess those are responsible for my taskbar and desktop files & stuff randomly disappearing on me? Half the time restarting the computer still “fixes” it, but it’s been getting worse.)

MBAM found nothing. Then again I’ve had trouble updating Avast, so maybe it happened to MBAM as well, no idea.

Ran OTL, otl.txt and extras.exe attached. What next?

Thank you for your help.

2
Ran OTL, otl.txt and extras.exe attached. What next?
wait for Essexboy, he will enter the forum in 5-6 hours
3

I see you have run Dr Web - but alas it was the wrong version, we need to use the souped up copy

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

:OTL O3 - HKU\S-1-5-21-3113157664-3977258671-1107226668-1006\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found. O3 - HKU\S-1-5-21-3113157664-3977258671-1107226668-1006\..\Toolbar\WebBrowser: (no name) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No CLSID value found. O20 - AppInit_DLLs: (ms32clod.dll) - File not found File not found -- C:\Documents and Settings\Asuka Kureru\Bureau\CAMN87R0. File not found -- C:\Documents and Settings\Asuka Kureru\Bureau\CA8HGPCV. [2010/10/20 14:23:59 | 000,010,492 | ---- | M] () -- C:\WINDOWS\System32\dx7vt.dat [2010/10/20 14:23:59 | 000,009,471 | ---- | M] () -- C:\WINDOWS\System32\dhcpqzc.dat [2010/10/20 14:23:59 | 000,009,021 | ---- | M] () -- C:\WINDOWS\System32\kbdkdzq.dat [2010/10/20 14:23:59 | 000,006,099 | ---- | M] () -- C:\WINDOWS\System32\winiset.dat [2010/10/20 14:23:59 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\kbdnecb5.dat [2010/10/20 14:17:04 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\ufatiksw.dat

:Files
ipconfig /flushdns /c

:Commands
[purity]
[resethosts]
[emptytemp]
[EMPTYFLASH]
[CREATERESTOREPOINT]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

THEN

Download Dr Web from here http://www.freedrweb.com/?lng=en link on the top right of the page, tick the EULA and then download

It will download as an 8 digit file save it to your desktop

Restart in safe mode and run
Accept the enhanced version
Then run the quick scan
About halfway through you will be prompted to buy - just X the box closed
Once finished it will generate a log please attach that