Hi there all av’s are having problems with this - in your case it looks like a rogue FF extension plus a failed rogue av install. I notice you still have AVG running, not a good policy to have two AV running at the same time

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

:OTL FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{14214F6F-75CE-4074-A3C4-36BE8099B17C}: C:\Documents and Settings\Ian\Local Settings\Application Data\{14214F6F-75CE-4074-A3C4-36BE8099B17C} [2011/06/22 22:45:33 | 000,000,000 | ---D | M] (XULRunner) -- C:\DOCUMENTS AND SETTINGS\IAN\LOCAL SETTINGS\APPLICATION DATA\{663E773F-E7E4-4888-97AB-6B1933FB7EB8} O20 - AppInit_DLLs: (C:\WINDOWS\system32\larariyi.dll) - File not found O20 - AppInit_DLLs: (C:\WINDOWS\system32\duyojaye.dll) - File not found [2011/06/27 18:41:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ian\Application Data\Umidud [2011/06/27 18:41:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Ian\Application Data\Qiegy [2010/03/06 15:20:31 | 000,013,270 | -HS- | C] () -- C:\Documents and Settings\Ian\Local Settings\Application Data\cOIowo4S2404k [2011/05/23 04:59:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\pF06511MmIfK06511

:Files
ipconfig /flushdns /c

:Commands
[purity]
[resethosts]
[emptytemp]
[EMPTYFLASH]
[CREATERESTOREPOINT]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

THEN

Download aswMBR.exe ( 1.8mb ) to your desktop.

Double click the aswMBR.exe to run it

Click the “Scan” button to start scan

http://i1224.photobucket.com/albums/ee362/Essexboy3/aswMBR2-1.gif

On completion of the scan click save log, save it to your desktop and post in your next reply

http://public.avast.com/~gmerek/aswMBR2.png