"Professional" fixed Antimalware Doctor infestation, but still having problems. HELP!

Hello. I have relied on bleepingcomputer.com to help me through numerous little problems over the years, but I never became so infected that I needed to post. This past week, after foolishly downloading a free music file, my PC developed a ransom infection: Antisyware Doctor. My PC was so mucked up that I couldn't do anything to help it, even using a second computer and following the instructions on bleepingcomputer.com. I had to give up and take it to a "professional" for help.

Well, the guy did a pretty good job -I thought-- until I brought it back home and ran a Malwarebytes scan just to be sure. Malwarebytes picked up 13 infections! While it was running, my Trend PC-cillin popped up and notified me of another half dozen infections, with some being ".dll" files. Despite my better judgment, I deleted all the ".dll" files that were picked up by PC-cillin and Malwarebytes took care of the rest. I've run multiple malwarebytes scans since then and nothing is getting picked up.

However, I am still having a BIG problem: Internet Explorer will not run. I have tried downloading version 8 again, but it doesn't fix the problem. Each time I try to reinstall IE, the re-installation process will continue to the end and then two pop-ups will appear that tell me certain ".dll" files are missing. Other than this (which is quite alarming) everything else seems to be back to normal. What do I do now and how do I make certain that I am 100% free of infection?

Here's the Mallwarebytes scan after I brought my computer home from the "pro":

(I'm running Windows XP on a Dell Inspiron Laptop)

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4052

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

4/29/2010 11:59:55 PM
mbam-log-2010-04-29 (23-59-55).txt

Scan type: Full scan (C:\|)
Objects scanned: 202612
Time elapsed: 33 minute(s), 9 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 2
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 13

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ccommander (Rogue.Installer) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\acommander (Rogue.Installer) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Program Files\AKM Antivirus 2010 Pro\AKM Antivirus 2010 Pro.exe (Rogue.WindowsPolicePro) -> Quarantined and deleted successfully.
C:\.Trashes\501\E.tmp (Trojan.Dropper.Gen) -> Quarantined and deleted successfully.
C:\.Trashes\501\PRAGMA5574.tmp (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\.Trashes\501\10.tmp (Trojan.Dropper.Gen) -> Quarantined and deleted successfully.
C:\.Trashes\501\PRAGMAorxiqxnkij\PRAGMAc.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\.Trashes\501\PRAGMAorxiqxnkij\PRAGMAd.sys (Trojan.DNSChanger) -> Quarantined and deleted successfully.
C:\Documents and Settings\My Name\Application Data\CCommander\ccagent.exe (Rogue.PClean) -> Quarantined and deleted successfully.
C:\Documents and Settings\My Name\Application Data\CCommander\uninstall.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\Documents and Settings\My Name\Application Data\FC83EBB56EA7B252077E7932B0546B65\hookdll.dll (Rogue.AntimalwareDoctor) -> Quarantined and deleted successfully.
C:\Documents and Settings\My Name\Templates\memory.tmp (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Documents and Settings\LocalService\Application Data\ACommander\uninstall.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\WINDOWS\Temp\10.tmp (Trojan.Dropper.Gen) -> Quarantined and deleted successfully.
C:\WINDOWS\Temp\F.tmp (Trojan.Dropper.Gen) -> Quarantined and deleted successfully.


Here's the latest "clean" (I hope!) scan:

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4052

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

4/30/2010 1:34:19 AM
mbam-log-2010-04-30 (01-34-19).txt

Scan type: Full scan (C:\|)
Objects scanned: 203160
Time elapsed: 34 minute(s), 43 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)


Any help would be greatly appreciated. Thank you in advance.

Hello,

This is a duplicate of the topic posted here: http://www.bleepingcomputer.com/forums/t/313897/professional-removed-antispyware-doctor-infection-but-still-having-problems-help/ Now, given what you've stated, it appears that you will need specialized tools that are restricted to that forum. Rather than having you create a new topic with the required logs, I'm going to have you post them as a reply to your other topic and I will then merge them to the initial post.

Please follow the instructions in ==>This Guide<== starting with step 6.

Once the proper logs are created, then post them as a reply to your other topic.

If you can produce at least some of the logs, then please post them. If you cannot produce any of the logs, then please indicate that in a response to your other topic and you will receive further instructions once your topic gets picked up.

Orange Blossom

Hi Orange Blossom,
I apologize for posting twice, I just didn't know if my first post was in the right place, etc. I am working on the scans now and will post them in the appropriate area (with the first post) when done. Thank you for your patience and for taking the time to help me out with beginning the process.

Hello,

You're welcome.

Now that you have posted your log, you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a MRT Team member, nor should you ask for help elsewhere. Doing so can result in system changes which may not show in the log you already posted. Further, any modifications you make on your own may cause confusion for the helper assisting you and could complicate the malware removal process which would extend the time it takes to clean your computer.

From this point on the MRT Team should be the only members that you take advice from, until they have verified your log as clean.

Please be patient. It may take a while to get a response because the MRT Team members are EXTREMELY busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT make another reply until it has been responded to by a member of the MRT Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another MRT Team member is already assisting you and not open the thread to respond.

Please be patient. It may take several days to get a response but your log will be reviewed and answered as soon as possible. I advise checking your topic once a day for responses as the e-mail notification system is unreliable.

To avoid confusion, I am closing this topic. Good luck with your log.

Orange Blossom