Not a valid win32 application - can't follow the process described in the sticky

Hi, this is my first post here, and I think this is also the first time in a very long time that I've had virus infestation problems

I know that this is a common problem (as I've seen in some other posts) but everyone has their own viruses and malware. My case is - I think - still in an early state, but let's see if I can get any help.


The situation:

I was installing AVG to check some files I didn't trust. After configuring it and checking those files (didn't detect anything worong) the system rebooted suddenly. Then when I launched it for the second time XP told me it wasn't a valid win32 application. I tried uninstalling and re-installing with no effect. Then I tried installing Avast antivirus and it didn't run either, the same not a valid win32 application message.

I found this place and started with the five steps as the sticky says, but I've encountered many problems:

First of all, Ccleaner won't run. It doesn'y say the same not valid application, but it just starts, I see the window briefly and then disappears. So I went to IE and firefox and manually told them to delete their temp files. I didn't delete any other temp file manually.

Then I went on to step 2. Mbam worked correctly: here's that log (it's in Spanish):



I think it deleted the hldrrr.exe file after the reboot correctly as I didn't find it in that folder.

Then on to step 3: another problem... Superantispyware crashed twice after about 6-7 minutes scanning the HDD. I didn't open anything at all, it was the only application running at that time and it just crashed suddenly. After rebooting it starts again automatically and prompts me again to check for updates and protect my IExplorer startup page.

So let's try step 4. I'm running bitdefender online scan atm and it has already found "Memscan:Trojan.Delf.PBM" - "Win32.Bagle.SVL@mm" - "Rootkit.Bagle.F" on several occasions each.

I'll have to pause this scan after a while and resume it later (unless my computer crashes again).

I don't know if I'm just losing my time for "skipping" those first steps and going on with the process. But if the programs listed won't run or simply crash I don't know what else to do.

What should I do in my case?

Welcome, Lets see what we can do here.

Download Combofix from the link below. You must rename it before saving it. Save it to your desktop. I suggest that you rename it to Combo-Fix.exe.

>> Download ComboFix <<






--------------------------------------------------------------------

* Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results"
* Click on this http://www.bleepingcomputer.com/forums/topic114351.html]Link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
* Remember to re enable the protection again afterwards.


2. Double click on Combo-Fix.exe & follow the prompts.

* When finished, it will produce a report for you. Please post the C:\ComboFix.txt along with a HijackThis log so we can continue cleaning the system.


Notes:

* Do not mouseclick combofix's window while it's running. That may cause it to stall
* CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.



Please stay by the machine as it runs, and if any errors occur please try and see what they are so we can pinpoint the problem.

Thanks for your early answer and your help Porthos, I'll now provide the logs:

First I executed combo-fix and everything seemed to go smooth:

1/2

Continues in the next post...

combo-fix log:

2/2

Then I installed and executed hijackthis for the first time (hadn't done it before as it was the last step and I hadn't got to it yet). This is the log:

I also made the uninstall list from hijackthis. This is it: