Hi there all av’s are having problems with this - in your case it looks like a rogue FF extension plus a failed rogue av install. I notice you still have AVG running, not a good policy to have two AV running at the same time
Run OTL
[*]Under the Custom Scans/Fixes box at the bottom, paste in the following
:OTL
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{14214F6F-75CE-4074-A3C4-36BE8099B17C}: C:\Documents and Settings\Ian\Local Settings\Application Data\{14214F6F-75CE-4074-A3C4-36BE8099B17C}
[2011/06/22 22:45:33 | 000,000,000 | ---D | M] (XULRunner) -- C:\DOCUMENTS AND SETTINGS\IAN\LOCAL SETTINGS\APPLICATION DATA\{663E773F-E7E4-4888-97AB-6B1933FB7EB8}
O20 - AppInit_DLLs: (C:\WINDOWS\system32\larariyi.dll) - File not found
O20 - AppInit_DLLs: (C:\WINDOWS\system32\duyojaye.dll) - File not found
[2011/06/27 18:41:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ian\Application Data\Umidud
[2011/06/27 18:41:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ian\Application Data\Qiegy
[2010/03/06 15:20:31 | 000,013,270 | -HS- | C] () -- C:\Documents and Settings\Ian\Local Settings\Application Data\cOIowo4S2404k
[2011/05/23 04:59:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\pF06511MmIfK06511
:Files
ipconfig /flushdns /c
:Commands
[purity]
[resethosts]
[emptytemp]
[EMPTYFLASH]
[CREATERESTOREPOINT]
[Reboot]
[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.
THEN
Download aswMBR.exe ( 1.8mb ) to your desktop.
Double click the aswMBR.exe to run it
Click the “Scan” button to start scan
http://i1224.photobucket.com/albums/ee362/Essexboy3/aswMBR2-1.gif
On completion of the scan click save log, save it to your desktop and post in your next reply
http://public.avast.com/~gmerek/aswMBR2.png