Anti VIrus Alert Malware

I am getting one of the AntiVIrus alerts that keeps popping up on both my and my mom's laptops. I can only operatate my Dell in safe mode, but can not operated my mom's HP laptop in safe mode. I might just restore hers since she doesn't have a lot of programs downloaded. Please help me remove this malware! Thank you so very much!
Prior to using your website I was using Mcafee and did the Stinger scan. The following is the Stinger scan results:

McAfee® Labs Stinger™ Version 10.1.0.1197 built on Dec 2 2010

Copyright © 2010 McAfee, Inc. All Rights Reserved.

Virus data file v1000.0000 created on Dec 2 2010.

Ready to scan for 2007 viruses, trojans and variants.



Scan initiated on Thu Dec 09 14:11:09 2010

C:\DOCUME~1\09l\LOCALS~1\Temp\csrss.exe

Found the FakeAlert!Downloader-CEW trojan !!!

C:\DOCUME~1\09l\LOCALS~1\Temp\csrss.exe is infected with the FakeAlert!Downloader-CEW virus !!!

C:\DOCUME~1\09l\LOCALS~1\Temp\csrss.exe could not be repaired.

C:\Documents and Settings\09l\Local Settings\Temp\csrss.exe

Found the FakeAlert!Downloader-CEW trojan !!!

C:\Documents and Settings\09l\Local Settings\Temp\csrss.exe is infected with the FakeAlert!Downloader-CEW virus !!!

C:\Documents and Settings\09l\Local Settings\Temp\csrss.exe has been deleted.

Number of clean files: 388259

Number of infected files: 2

Number of files cleaned: 1



McAfee® Labs Stinger™ Version 10.1.0.1197 built on Dec 2 2010

Copyright © 2010 McAfee, Inc. All Rights Reserved.

Virus data file v1000.0000 created on Dec 2 2010.

Ready to scan for 2007 viruses, trojans and variants.



Scan initiated on Thu Dec 09 19:42:05 2010

C:\DOCUME~1\09l\LOCALS~1\Temp\csrss.exe

Found the FakeAlert!Downloader-CEW trojan !!!

C:\DOCUME~1\09l\LOCALS~1\Temp\csrss.exe is infected with the FakeAlert!Downloader-CEW virus !!!

C:\DOCUME~1\09l\LOCALS~1\Temp\csrss.exe could not be repaired.

C:\Documents and Settings\09l\Local Settings\Application Data\syssvc.exe

Found the Artemis!5F4282EB550E trojan !!!

C:\Documents and Settings\09l\Local Settings\Application Data\syssvc.exe is infected with the Artemis!5F4282EB550E virus !!!

C:\Documents and Settings\09l\Local Settings\Application Data\syssvc.exe has been deleted.

C:\Documents and Settings\09l\Local Settings\Temp\csrss.exe

Found the FakeAlert!Downloader-CEW trojan !!!

C:\Documents and Settings\09l\Local Settings\Temp\csrss.exe is infected with the FakeAlert!Downloader-CEW virus !!!

C:\Documents and Settings\09l\Local Settings\Temp\csrss.exe has been deleted.

C:\Documents and Settings\09l\Local Settings\Temp\oct39.tmp

Found the Artemis!CFE71AF305F6 trojan !!!

C:\Documents and Settings\09l\Local Settings\Temp\oct39.tmp is infected with the Artemis!CFE71AF305F6 virus !!!

C:\Documents and Settings\09l\Local Settings\Temp\oct39.tmp has been deleted.

C:\Program Files\Image-Line\FL Studio 8\Plugins\Fruity\Generators\Chrome\GraphicsTester.exe

Found the Artemis!8A6481B933B7 trojan !!!

C:\Program Files\Image-Line\FL Studio 8\Plugins\Fruity\Generators\Chrome\GraphicsTester.exe is infected with the Artemis!8A6481B933B7 virus !!!

C:\Program Files\Image-Line\FL Studio 8\Plugins\Fruity\Generators\Chrome\GraphicsTester.exe has been deleted.

C:\Program Files\Image-Line\FL Studio 9\Plugins\Fruity\Generators\Chrome\GraphicsTester.exe

Found the Artemis!8A6481B933B7 trojan !!!

C:\Program Files\Image-Line\FL Studio 9\Plugins\Fruity\Generators\Chrome\GraphicsTester.exe is infected with the Artemis!8A6481B933B7 virus !!!

C:\Program Files\Image-Line\FL Studio 9\Plugins\Fruity\Generators\Chrome\GraphicsTester.exe has been deleted.

Number of clean files: 371704

Number of infected files: 6

Number of files cleaned: 5



HERE ARE THE GMER SCAN RESULTS:


GMER 1.0.15.15530 - http://www.gmer.net
Rootkit scan 2010-12-10 14:55:14
Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-e Hitachi_HTS722080K9A300 rev.DCBOCA1H
Running: gmer.exe; Driver: C:\DOCUME~1\09l\LOCALS~1\Temp\pwdoapow.sys


---- User code sections - GMER 1.0.15 ----

.text C:\Program Files\Mozilla Firefox\firefox.exe[2148] ntdll.dll!LdrLoadDll 7C9163C3 5 Bytes JMP 004013F0 C:\Program Files\MozillaFirefox\firefox.exe (Firefox/Mozilla Corporation)

? C:\DOCUME~1\09l\LOCALS~1\Temp\csrss.exe[2784] number of sections mismatch; time/date stamp mismatch; unknown module: bscmake.exe unknown module: OLEAUT32.dll

.text C:\Program Files\Mozilla Firefox\plugin-container.exe[3684] USER32.dll!TrackPopupMenu 7E46531E 5 Bytes JMP 10405CF5 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)

---- Devices - GMER 1.0.15 ----

Device Ntfs.sys (NT File System Driver/Microsoft Corporation)

AttachedDevice \Driver\Tcpip \Device\Ip avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\Tcpip \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)

Device mrxsmb.sys (Windows NT SMB Minirdr/Microsoft Corporation)
Device A81B0D20

AttachedDevice fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)

Device \FileSystem\Cdfs \Cdfs DLAIFS_M.SYS (Drive Letter Access Component/Roxio)

---- EOF - GMER 1.0.15 ----

Hello and welcome to Bleeping Computer

We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.

If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine.

If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.

Upon completing the steps below another staff member will review your topic an do their best to resolve your issues.

If you have already posted a DDS log, please do so again, as your situation may have changed.
Use the 'Add Reply' and add the new log to this thread.

Thanks and again sorry for the delay.

We need to see some information about what is happening in your machine. Please perform the following scan:

• Download DDS by sUBs from one of the following links. Save it to your desktop.
  • DDS.scr
  • DDS.pif
• Double click on the DDS icon, allow it to run.
• A small box will open, with an explaination about the tool. No input is needed, the scan is running.
• Notepad will open with the results.
• Follow the instructions that pop up for posting the results.
• Close the program window, and delete the program from your desktop.

Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet.

Information on A/V control HERE

We also need a new log from the GMER anti-rootkit scanner. Please first disable any CD emulation programs using the steps found in this topic:

Why we request you disable CD Emulation when receiving Malware Removal Advice

Then create another GMER log and post it as an attachment to the reply where you post your new DDS log. Instructions on how to properly create a GMER log can be found here:

How to create a GMER log

Regards,
Georgi

Due to the lack of feedback this Topic is closed.

If you need this topic reopened, please request this by sending the moderating team a PM with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic