Hello
Do you know this domain?
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = jewelconsulting.org
O17 - HKLM\Software\..\Telephony: DomainName = jewelconsulting.org
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = jewelconsulting.org
If not - fix these records over Hijackthis.
I couldn't find any really bad thing in your logs.
Pls. run this script
Код:
begin
QuarantineFile('C:\WINDOWS\system32\Drivers\uphcleanhlp.sys','');
RebootWindows(true);
end.
after reboot load the quarantine here up: http://virusinfo.info/upload_virus_eng.php