Here is the BackLight log:
02/23/07 23:38:47 [Info]: BlackLight Engine 1.0.55 initialized
02/23/07 23:38:47 [Info]: OS: 5.1 build 2600 (Service Pack 2)
02/23/07 23:38:47 [Note]: 7019 4
02/23/07 23:38:47 [Note]: 7005 0
02/23/07 23:38:53 [Note]: 7006 0
02/23/07 23:38:53 [Note]: 7011 224
02/23/07 23:38:53 [Note]: 7026 0
02/23/07 23:38:53 [Note]: 7026 0
02/23/07 23:39:05 [Note]: FSRAW library version 1.7.1021
I will not be around tomorrow and will update on your next instruction as soon as I am back home on Sunday. Have a nice weekend. Thanks.
Make sure that the filetype is set to Registryfiles (*.reg)
Click on Save and Close the window
Open Notepad (NOT WORDPAD!) and copy the following lines from the quote box below into a new document, leaving a blank line at the end. (don't forget to copy and paste the word REGEDIT4) :
Make sure there are NO blank lines before REGEDIT4
Make sure there IS one blank line at the end of the file.
Save the document to your desktop as Fix.reg and filetype: All Files
Go to your desktop and double click on the file to run Fix.reg and when it asks you if you want to merge the contents to the registry, click yes/ok.
It is very interesting that the Avenger folder can't be delete. That pctools.dll is inside a zip file and it should be easily removed.
Could you please check that does the pctools.dll still exist in the C:\Documents and Settings\All Users\Application Data\Microsoft\PCTools folder?
Hi, I'm back. And done with the fix.reg… checked the PCTools folder isn't in C:\Documents and Settings\All Users\Application Data\Microsoft\PCTools folder. But the one in Avenger is still there and still can't delete it. The backup zip of it can and already been deleted. Let me know what else can be use to remove it. Thanks a lot.
So the is pctools.dll file ins't in the backups.zip file of Avenger folder anymore? Was it even there? Did you move it manually?
We could always try to remove the Avenger folder with a batch file in safe mode. It doesn't hurt to try.
Restart your computer to the safe mode:
Restart your computer
Start tapping the F8 key when the computer restarts.
When the start menu opens, choose Safe mode
Press Enter. The computer then begins to start in Safe mode.
Open Notepad and copy the following lines into a new document:
@echo off
attrib -r -h C:\Avenger\*.*
del /a /f /q C:\Avenger\*.*
RD /s /q "C:\Avenger"
Save the document to your desktop as Remove.bat and filetype: All Files
Go to your desktop and run the file Remove.bat and allow to run it if prompted. A window will open and close.
Restart the computer normally and check the results
Hi, ok.. the backup.zip was initially there when I first run the Avenger, but I already deleted it manually. Now left with the "_OTMoveIt" folder with all its contents (including the 'pctools-0.dll') inside the Avenger folder. Done the steps of using batch file as instructed, but the Avenger folder with all its contents is still there…tried manually as well to remove the 'pctools-0.dll' still not going .
Sorry have to trouble you again and let your crack your head.
Ok I got some help and we could try to make sure that the rights are correct.
Please follow these instructions and take the ownership of the pctools.dll file. After you finished these instructions, try to delete that file manually. If it doesn't work, reboot the computer and try deleting again.
Let me know the results
How to take ownership of a file
Note You must be logged on to the computer with an account that has administrative credentials.
To take ownership of a file, follow these steps:
1. Right-click the file that you want to take ownership of, and then click Properties.
2. Click the Security tab, and then click OK on the Security message (if one appears).
3. Click Advanced, and then click the Owner tab.
4. In the Name list, click Administrator, or click the Administrators group, and then click OK.
The administrator or the Administrators group now owns the file. To change the permissions on the files and folders under this folder, go to step 5.
5. Click Add.
6. In the Enter the object names to select (examples) list, type the user or group account that you want to give access to the file. For example, type Administrator.
7. Click OK.
8. In the Group or user names list, click the account that you want, and then select the check boxes of the permissions that you want to assign that user.
9. When you are finished assigning permissions, click OK.
Hi, yes this time we nailed it!! The whole Avenger folder and its contents have been deleted. The computer is working well, just a little slow during start up (maybe too many application running at the background?) Other than that, all are OK.
Thank you very much for your help and hardwork. I appreciate it very much.
(PS: Next I will need to work on my wife's pc, which I think is very infected.. I shall post a new HJT in a new thread when this post is officially closed)
The slow startup, you have many processes loading at the startup. Many of these are not needed to load automatically and can be manually started if needed. You may fix all/some of these below with HijackThis:
Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.
Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.
.
Sorry have to trouble you again and let your crack your head. 
The whole Avenger folder and its contents have been deleted. The computer is working well, just a little slow during start up (maybe too many application running at the background?) Other than that, all are OK. 