Could you check for redirects on completion of this run please
Warning This fix is only relevant for this system and no other, using on another computer may cause problems
Run OTL
[*]Under the Custom Scans/Fixes box at the bottom, paste in the following
:OTL
O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - Reg Error: Value error. File not found
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - Reg Error: Value error. File not found
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {D0943516-5076-4020-A3B5-AEFAF26AB263} - No CLSID value found.
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-1292428093-220523388-839522115-1003\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKU\S-1-5-21-1292428093-220523388-839522115-1003\..\Toolbar\WebBrowser: (no name) - {30CEEEA2-3742-40E4-85DD-812BF1CBB83D} - No CLSID value found.
O3 - HKU\S-1-5-21-1292428093-220523388-839522115-1003\..\Toolbar\WebBrowser: (no name) - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} - No CLSID value found.
O3 - HKU\S-1-5-21-1292428093-220523388-839522115-1003\..\Toolbar\WebBrowser: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No CLSID value found.
[2011/08/25 15:09:49 | 000,000,308 | -HS- | M] () -- C:\WINDOWS\tasks\YNCYFKBFMZ.job
[2011/08/15 10:01:34 | 000,015,412 | -HS- | M] () -- C:\Documents and Settings\All Users\Application Data\7t7p22c81w2g7apeq5p233kdt24
[2011/08/09 19:13:00 | 000,003,820 | -HS- | M] () -- C:\Documents and Settings\All Users\Application Data\k70ct7q74s110t6p28n00va
[2011/08/09 19:13:00 | 000,003,820 | -HS- | M] () -- C:\Documents and Settings\Adrana\Local Settings\Application Data\k70ct7q74s110t6p28n00va
[2011/08/15 10:01:33 | 000,015,412 | -HS- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\7t7p22c81w2g7apeq5p233kdt24
[2011/08/09 20:41:23 | 000,000,308 | -HS- | C] () -- C:\WINDOWS\tasks\YNCYFKBFMZ.job
[2011/08/09 20:41:22 | 000,107,520 | RHS- | C] () -- C:\WINDOWS\System32\nppt9xv.dll
[2011/08/09 20:38:10 | 000,015,518 | -HS- | C] () -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\7t7p22c81w2g7apeq5p233kdt24
[2011/08/09 20:38:10 | 000,015,412 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\7t7p22c81w2g7apeq5p233kdt24
[2011/08/09 16:29:59 | 000,003,820 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\k70ct7q74s110t6p28n00va
[2011/08/09 16:29:59 | 000,003,820 | -HS- | C] () -- C:\Documents and Settings\Adrana\Local Settings\Application Data\k70ct7q74s110t6p28n00va
:Files
ipconfig /flushdns /c
:Commands
[purity]
[resethosts]
[emptytemp]
[EMPTYFLASH]
[CREATERESTOREPOINT]
[Reboot]
[*]Then click the
Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the
Quick Scan button. Post the log it produces in your next reply.