1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system
SearchScopes: HKLM-x32 - {6F13248C-2D40-1473-4D68-63E9F88A6822} URL = http://search.sweetim.com/search.asp?src=6&crg=3.1010000&st=10&q={searchTerms}
SearchScopes: HKCU - {1A73B476-42B2-4CCA-AE4C-CF21C7E3235C} URL = http://br.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=512435&p={searchTerms}
SearchScopes: HKCU - {BD9E44CC-FA08-4585-B8A0-D74C700B41B1} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3297267&CUI=UN32803530921232731&UM=2
SearchScopes: HKCU - {D90A8940-DA30-42BE-A6DC-58B6804256ED} URL = http://dts.search-results.com/sr?src=ieb&appid=235&systemid=406&sr=0&q={searchTerms}
SearchScopes: HKCU - {F3A2900B-AA5D-4F48-B393-F4E89FDB67AF} URL = https://isearch.avg.com/search?cid={C9B3B2F2-D7DA-4765-B6A8-E1544F107EAD}&mid=acfa1b3aee9547d0b8fcd152ba73cb4b-32d35533d834bb0927ab4e4b7e2350abac8e1723&lang=pt-br&ds=is015&pr=sa&d=2012-07-31 20:24:42&v=12.1.0.21&sap=dsp&q={searchTerms}
FF Homepage: hxxp://start.iminent.com/?appId=0D2B550C-8C4A-4AD5-AB87-35DDEBCA37A8
cmd: ipconfig /flushdns
AlternateDataStreams: C:\Windows\System32:61C406C8_Abn.gbp
AlternateDataStreams: C:\ProgramData\TEMP:728B799F
AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1
AlternateDataStreams: C:\Users\Miguel\Downloads:Shareaza.GUID
AlternateDataStreams: C:\Users\Todos os Usuários\TEMP:728B799F
AlternateDataStreams: C:\Users\Todos os Usuários\TEMP:D1B5B4F1
2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It’s important that both files, FRST and fixlist.txt are in the same location or the fix will not work.
3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.
Then…
Go to Control Panel → Uninstall a program , find Avast and click Uninstall.
Then you need to select Repair option, like on image below
Then…
Please go to: VirusTotal
[*] Click the Choose File button.
[*] Please copy/paste the following text into the ‘File name:’ box:
C:\Windows\S4TSR.EXE
[*] Click Open then click the Scan it! button just below.
[*] This will scan the file. Please be patient.
[*] If you get a message saying File already analyzed: click Reanalyse
[*] Once scanned, copy and paste the URL from your browser address bar in your next reply.