I BELIEVE I HAVE AN RAI

Yes, you did post it, but I was asking about the fix:

Step 1

• Right click OTL.exe and select "Run as Administrator" to launch the program.
• Copy/Paste the contents of the code box below into the Custom Scans/Fixes box.

Do not include the words "Code: Select all". Press "Select all" to automatically select all the text on the box.

:commands

[createrestorepoint]



:OTL

FF - HKLM\Software\MozillaPlugins\@ei.MarineAquarium3Free_57.com/Plugin: C:\Program Files\MarineAquarium3Free_57EI\Installr\1.bin\NP57EISB.dll File not found

[2011/05/01 19:54:00 | 000,009,250 | -HS- | C] () -- C:\ProgramData\e6cj5tlvi1v865yfa8f352520352u236



:commands

[emptytemp]

[emptyflash]

• Click the Run Fix button.
• OTL will now process the instructions.
• When finished a box will open asking you to open the fix log, click OK.
• The fix log will open.
• Copy/Paste the log in your next reply please.

Note: If necessary, OTL may re-boot your computer, or request that you do so, if it does, re-boot your computer. A log will be produced upon re-boot.

OK, just ran it. I've enabled User Account Control also. Might it help in future?
All processes killed
========== COMMANDS ==========
Restore point Set: OTL Restore Point
========== OTL ==========
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@ei.MarineAquarium3Free_57.com/Plugin\ not found.
File C:\ProgramData\e6cj5tlvi1v865yfa8f352520352u236 not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: D-QUAD
->Temp folder emptied: 110851203 bytes
->Temporary Internet Files folder emptied: 110349660 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 17210808 bytes
->Flash cache emptied: 492 bytes

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: NAB
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public

User: SYSAD
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: TEMP
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 227.00 mb


[EMPTYFLASH]

User: All Users

User: D-QUAD
->Flash cache emptied: 0 bytes

User: Default

User: Default User

User: NAB
->Flash cache emptied: 0 bytes

User: Public

User: SYSAD
->Flash cache emptied: 0 bytes

User: TEMP

Total Flash Files Cleaned = 0.00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 12222013_075916

Files\Folders moved on Reboot...

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Hi p_huero,



Good job! Your computer appears to be free from malware. However, due to the nature of the infection, we cannot know for sure that it's clean. Just to remind that a reformat will be the best solution, as soon as you are able to do it.

Now, some clean-up steps:

OTL-Cleanup
You should still have this on your desktop, if so, please ignore the download instructions.
Please download OTL Save it to your Desktop.

1. Right click on OTL.exe select "Run As Administrator" to run it
2. Press the CleanUp button.
3. When done, you will be prompted to reboot your system to finish file removal... please select OK to reboot your computer.

If you did not reboot your computer normally, please do so now, before continuing.

Create a System Restore Point

1. Right-click on Computer and select Properties.
2. In the left pane under Tasks, click System protection.
   If UAC prompts for an administrator password or approval, type the password or give your "permission to continue".
3. Select System Protection and choose Create.
4. In the System Restore dialog box, type a description for the restore point, like "All-clean", click Create.
   A window will pop up with "The Restore Point was created successfully" confirmation message.
5. Click OK and close the System Restore dialog.
   Now you have a clean restore point.

Perform Disk Cleanup
Note: You have to have administrative rights to run Disk Cleanup for "All" users.

1. Click Start button. Type disk in the Start Search text entry box.
2. Double click the Disk Cleanup entry, from the matching program list.
3. In the Disk Cleanup options select "Files from all users on this computer"
   If the Disk Cleanup: Drive Selection dialog box appears:
   • Select the drive where Windows is installed. (Normally, this would be C:\ drive)
   • Press the "OK"...button.
   
   Disk Cleanup will begin space saving calculations.
4. When the calculations are finished... Press the More Options tab.
5. In the "System Restore and Shadow Copies" section... select "Clean up" button.
6. Press the "Delete"... button, at the "Are you sure..." prompt.
   Disk Cleanup will begin cleaning up old files and restore points.
7. Exit Disk Cleanup.
   This will remove all restore points except the one you just created.

Don't forget to re-enable your security programs!

Stay informed.
To help minimize the chances of becoming re-infected, please read.
Computer Security - a short guide to staying safer online

If your computer is running slowly after your clean up, please read.
What to do if your Computer is running slowly

Please reply to this post so I know you have read it. If you don't have any further questions this thread will be closed.

I wish you and your family a Merry Christmas

Safe surfing!

OK, I will do all that, and a Merry Christmas to you too. Thank you again...I'm grateful for all the time you've spent on this, and I will definitely treat this as a lesson learned, specifically about the risks of downloading "free" software. If I ever need to do so again, I'll be sure to look elsewhere than the first ten results on a Google search.
Cowabunga!