Download
ATF Cleaner- Double-click ATF-Cleaner.exe to run the program.
- Click Select All found at the bottom of the list.
- Click the Empty Selected button.
Click
Exit on the Main menu to close the program.
Run HijackThis and check the following entries:
Code:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/cust.../www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O4 - HKLM\..\Run: [{8C9BC2E9-0514-1033-0618-020505310001}] "C:\Program Files\Common Files\{8C9BC2E9-0514-1033-0618-020505310001}\Update.exe" mc-110-12-0000272
Close all other windows except HijackThis and press "Fix Checked". Then close HijackThis and restart the computer.
Download Avenger from here:
Swandog46’s Public Tools Page
Open the program. Check the 'Input script manually' option.
Click the Magnifying Glass icon.
In the box that opens, paste this:
Files to delete:
C:\Program Files\Common Files\{8C9BC2E9-0514-1033-0618-020505310001}\Update.exe
and click 'Done'
Click the Traffic Light icon to start the program, and OK the prompts to reboot your PC.
Post the Avenger output.txt, which you can find at C:\Avenger\.txt, along with a new AVG Anti-spyware log. We're getting there, don't lose heart!