Can not install any anti virus program or comp shuts down.. help

Logfile of HijackThis v1.99.1
Scan saved at 2:31:33 AM, on 4/27/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\MMKeybd.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\Nhksrv.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Netropa\OSD.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\WINDOWS\system32\svchost.exe
C:\DOCUME~1\Steve\LOCALS~1\Temp\Rar$EX01.797\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
R3 - URLSearchHook: (no name) - <default> - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: CInterfaceObj Object - {58F07DD3-924D-4141-BC74-299F523A95F1} - blank (file missing)
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [DellTouch] C:\WINDOWS\MMKeybd.exe
O4 - HKLM\..\Run: [DeadAIM] rundll32.exe "C:\PROGRA~1\AIM\\DeadAIM.ocm",ExportedCheckODLs
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe"  -lang 1033
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [FreeRAM XP] "C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe" -win
O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Browster Prefetch On/Off - res://C:\PROGRA~1\Browster\Browster.dll/CustomPrefetchMenu.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\WINDOWS\System32\shdocvw.dll
O16 - DPF: {084F552D-19EB-4668-9788-984CBC781A8F} - http://survey.otxresearch.com/Preloader.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1126338144502
O16 - DPF: {82F2D6B2-6C58-4404-A930-9DB0FD90D4B1} (Driver_Detective_v43_Non_Member.DD_v43) - http://drivershq.com/cab/prod/Driver_Detective_v43_Non_Member.CAB
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {B991DA79-51F7-4011-98D2-1F2592E82A56} (ACNPlayer2 Class) - http://198.99.241.129/ePlayer/V3_2_0_0/ACNePlayer.cab
O16 - DPF: {E856B973-45FD-4559-8F82-EAB539144667} (Dell PC Checkup Installer Control) - http://pccheckup.dellfix.com/rel/35/install/gtdownde.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/mcfscan/2,1,0,4744/mcfscan.cab
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) - http://pdl.stream.aol.com/downloads/aol/unagi/ampx_en_dl.cab
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Netropa NHK Server (Nhksrv) - Unknown owner - C:\WINDOWS\Nhksrv.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

You could also see if you can download and try the 'Stinger' which is a utility that cleans the system of viruses, that block anti virus software.
Suggest you download the 'Stinger' and run it to make sure that 'disabling viruses' are not present.  Please note that the filename has been changed from "stinger.exe" to "s-t-i-n-g-e-r.exe" (and more recently stng260.exe), download with details here:

http://vil.nai.com/vil/stinger/

You may also wish to try an online virus scan such as

http://housecall.trendmicro.com/

I've found that very useful when presented with heavily infected PC's in the past.

Here is your analyze file.

While in hijack this, fix the nasties..  

THEN

run the eiwido prescription

fix this :

O16 - DPF: {084F552D-19EB-4668-9788-984CBC781A8F} - http://survey.otxresearch.com/Preloader.dll    

and i would suggest running ALL these in safe mode : - updated -

     adaware :      http://www.lavasoftusa.com/
     Spybot :        http://www.download.com/3000-8022-10122137.html
http://housecall.trendmicro.com/                                                               online scan for trojans
http://www.spychecker.com/program/hijackthis.html                                   download
http://www.hijackthis.de/index.php?langselect=english                                check the log
http://www.microsoft.com/athome/security/spyware/software/default.mspx       Anti spyware

Whoops.. this is your file
http://www.hijackthis.de/logfiles/fc49db2a6c2b1ae77d2f2e78a03e0149.html

Another very good virus scanner you could try is AVG (grisoft) which is particularly good:
http://www.grisoft.com/us/us_dwnl_free.php

No one has since commented on your HijackThis log report (requested by irwinpks), but if you require advise i suggest you also 'Fix' this one:

R3 - URLSearchHook: (no name) - - (no file)
 
This one too, as it's unnecessary:
O2 - BHO: CInterfaceObj Object - {58F07DD3-924D-4141-BC74-299F523A95F1} - blank (file missing)
 
Fix anything you don't recognise and labelled "Possibly nasty", for example:
O8 - Extra context menu item: Browster Prefetch On/Off - res://C:\PROGRA~1\Browster\Browster.dll/CustomPrefetchMenu.htm

However, before you do this, it would really be prudent to create a folder where you would like the HijackThis file to reside, and run it from there, not from the Desktop or a temp folder. It is important that you download this file to its own folder as this folder will be used when HijackThis makes backups. Temp folders get deleted, taking with them HJT's 'backups' of items that were 'fixed'.  You then give yourself the opportunity of a "restoration".   Hope that helps.

C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe

Umm looks like AVG is already installed.
Are you trying to install other anti-virus programs at the same time?

Kenneniah.... avg is not installed. those just wont leave my computer. my comp is messed up.

did you run Ewido????

yea i ran Ewido... it found like 300+ infected files. I just tried to install AVG but it says i allready have it installed, but when i go to uninstall it, it doesnt work.nothing happens. so im going to try another anti virus program now and see what happens.

nope, still didnt work. here is the message i get whenever i install an anti virus program...

http://img118.imageshack.us/img118/9581/digitalcamera0273hg.jpg


maybe i dont have a virus? maybe its a glitch or i deleted something in the registry idk. any idea what i can do? i really do not want to reformat.

> i really do not want to reformat <
That's ok, that's not being considered at this stage.
Although this next article is for Win NT, it's worth reading.   ->

"IRQL_NOT_LESS_OR_EQUAL":
http://www.computerhope.com/issues/ch000365.htm

Did you at one point have McAFFEE??

Steve011  ..   as a matter of interest, have you recently upgraded from WinMe or Win98 ?

Another suggestion is to select Start > Run and type     MSCONFIG.      Ok.

From the SCU select the Startup tab.      Use this next link to decide which 'Task List Programs' you can *temporarily* remove.   Then uncheck these unwanted items.    Reboot.

http://netsquirrel.com/msconfig/

Any improvement?

nope i never had McAFFEE. none of this is working. :(

Recent windows update
http://support.microsoft.com/kb/918165

Copy the following to the clipboard (it's all one line even if wrapped in your browser - paste into notepad and remove line breaks if necessary, and copy again)
click START, type RUN <enter>

=copy below here=
REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached" /v "{A4DF5659-0801-4A60-9607-1C48695EFDA9} {000214E6-0000-0000-C000-000000000046} 0x401" /t REG_DWORD /d 1
=copy above here=

irwinpks... can you explain it better. im not sure where to put that. thanks

ok i put that into the registry. im gonna try a anti virus program now. wish me luck

Restart the computer before you do that

didnt work :(

list the Antivirus software that you were installing....

I have a bad feeling that you may have to reinstall the OS.

well i try different anti virus programs..

ive tried... mcafee..trend micro pc cillin...norton... zone alarm... and a few others.

i guess i have to reformat. ugh

i had norton 2005, then that expired and i didnt have anything. i dont know what happen but i cant install any of these virus checkers on my comp. :(

Ok...Let's attempt to get rid of Norton 2005

http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2005033108162039?Open&src=sg&docid=2004072316001306&nsf=nav.nsf&view=5faa3ca6df6f549888256edd0061c0a4&dtype=&prod=<span%20class=

http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2005033108162039?Open&src=&docid=2004020314035036&nsf=tsgeninfo.nsf&view=docid&dtype=&prod=&ver=&osv=&osv_lvl=

http://www.mickelson.org/files/zips/nonav.zip

You may need to use a starup boot disc from one of the virus companies to check your system independent of it running.

That failing, reload.
Repairing may be too costly in time and effort.
Save all your data files first.
Good luck

Many viruses attack anti virus software so they will not be detected. I assume you may have one or more of these type of viruses. Personally, lately there have been a few viruses that were so hard to remove I simply choose to reformat and move on. I look at how much time I have spent and how much time I will spend on fixing the computer, if that time is longer than it takes me to reformat and reinstall I would simply reformat. I'm sure you do not want to hear that, but sometimes the amount of time it takes to remove theses viruses or malware is ridicoulus. Just make sure you backup all your files, and maybe write down a list of programs to reinstall. Personally for antivirus I like NOD32, it gives me no problems, updates flawlessly and above all uses minimal memory. Good luck and keep us posted!

The easiest way IMHO is slaving the disk to another PC, and scanning it there, with ALL the utilities mentioned !
then put it back and reboot.

@nobus...good one.. I do that too, if all the above fail.  To add on your suggestion.. the host scanning machine MUST BE 100% and updated with the latest definitions.

@steve011...we put alot of effort into this...did you forget us?

@steve011,
It would be good to get an update, even if you finally decided to reformat.

i'll have to reformat

@steve011.. thanks for getting back and explaining your final resolve.. perhaps you may want to close this question by accepting my comment that states..
"I have a bad feeling that you may have to reinstall the OS."

Perhaps not the answer you want to hear, yet the exact answer that you have to do.  I'm pretty sure that most of the Experts here have their own personal account on your situation and that you are not the only one... Welcome to the club.  Prevention will save you my friend.

think 'A'

Thank you in advance.  Aloha from Hawaii.

Irwin