Please

  • post a hijackthis-Log ( http://hjt.klaffke.de/en ) and
  • report what Onlinescanners Trend, RAV & KAV say to the file (with avast shield paused)
  • secure your Browser → Disable activeX & scripting
    (See “Virusremoval” below)