Some people do have them legitimately although I consider them foistware… Watch them go
Do you have the same redirects with IE ?
Start OTS. Copy/Paste the information in the quotebox below into the panel where it says “Paste fix here” and then click the Run Fix button.
[Unregister Dlls]
[Registry - Safe List]
< BHO's [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
YY -> {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} [HKLM] -> C:\Program Files\Yontoo Layers Client\YontooIEClient.dll [Yontoo Layers]
[Files/Folders - Created Within 30 Days]
NY -> Yontoo Layers Client -> C:\Program Files\Yontoo Layers Client
NY -> Tarma Installer -> C:\Documents and Settings\All Users\Application Data\Tarma Installer
NY -> My Cheat Tables -> C:\Documents and Settings\Lacy Moore\My Documents\My Cheat Tables
NY -> OpenCandy -> C:\Documents and Settings\Lacy Moore\Local Settings\Application Data\OpenCandy
NY -> Cheat Engine 6.0 -> C:\Documents and Settings\All Users\Start Menu\Programs\Cheat Engine 6.0
NY -> Cheat Engine 6 -> C:\Program Files\Cheat Engine 6
[Empty Temp Folders]
[EmptyFlash]
[CreateRestorePoint]
The fix should only take a very short time. When the fix is completed a message box will popup telling you that it is finished. Click the Ok button and Notepad will open with a log of actions taken during the fix. Post that information back here
I will review the information when it comes back in.
THEN
Download aswMBR.exe ( 511KB ) to your desktop.
Double click the aswMBR.exe to run it
http://i1224.photobucket.com/albums/ee362/Essexboy3/aswmbrscan.gif
Click the “Scan” button to start scan
http://i1224.photobucket.com/albums/ee362/Essexboy3/aswmbrsavelog.gif
On completion of the scan click save log, save it to your desktop and post in your next reply