Follow these Steps in order numbered. Don't proceed to next step unless you have successfully completed previous step: 1) Run this script in AVZ like before, your computer will reboot: begin SetAVZGuardStatus(True); SearchRootkit(true, true); StopService('drvdrv'); DeleteService('drvdrv'); DelBHO('{10C2C2C0-1C16-4CD1-A234-E64596998826}'); QuarantineFile('C:\WINDOWS\system32\pmnlm.dll',''); QuarantineFile('C:\WINDOWS\system32\jkkji.dll',''); QuarantineFile('C:\WINDOWS\system32\geeby.dll',''); QuarantineFile('C:\Documents and Settings\RICHIE_BONALLIE\Application Data\Google\afuya1119762.exe',''); QuarantineFile('C:\windows\ld12.exe',''); QuarantineFile('C:\WINDOWS\system32\eLock2BurnerLockDriver.sys',''); QuarantineFile('C:\WINDOWS\system32\eLock2FSCTLDriver.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\pbsaudrv.sys',''); QuarantineFile('C:\Program Files\drv\drv.sys',''); QuarantineFile('c:\program files\drv\drv.dll',''); DeleteFile('c:\program files\drv\drv.dll'); DeleteFile('C:\Program Files\drv\drv.sys'); DeleteFile('C:\windows\ld12.exe'); DeleteFile('C:\Documents and Settings\RICHIE_BONALLIE\Application Data\Google\afuya1119762.exe'); DeleteFile('C:\WINDOWS\system32\geeby.dll'); DeleteFile('C:\WINDOWS\system32\jkkji.dll'); DeleteFile('C:\WINDOWS\system32\pmnlm.dll'); BC_ImportAll; ExecuteSysClean; ExecuteRepair(7); ExecuteRepair(13); BC_Activate; SetAVZPMStatus(true); RebootWindows(true); end. 2) After reboot execute following script in AVZ: begin CreateQurantineArchive('C:\quarantine1.zip'); end. A file called quarantine1.zip should be created in C:\. Upload that file to rapidshare.com and Private message me download link. If I'm helping you and I don't reply within 24 hours send me a PM.

0

Download Security Check by screen317 from here or here. Save it to your Desktop. Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box. A Notepad document should open automatically called checkup.txt. Please post the contents of that document. If I'm helping you and I don't reply within 24 hours send me a PM.

0

Results of screen317's Security Check version 0.98.4 Windows XP Service Pack 3 [b]`````````````````````````````` Antivirus/Firewall Check: ``````````````````````````````[/b] Windows Firewall Enabled! NortonSecurityScan(SymantecCorporation) NortonSecurityScan ECHO is off. [color=red]Error obtaining update status for antivirus![/color] [b]`````````````````````````````` Anti-malware/Other Utilities Check: ``````````````````````````````[/b] Ad-Aware Spybot - Search & Destroy Malwarebytes' Anti-Malware CCleaner (remove only) Java(TM) 6 Update 11 [color=red][b]Out of date Java installed![/b][/color] Adobe Flash Player 10 [b]`````````````````````````````` Process Check: objlist.exe by Laurent ``````````````````````````````[/b] Ad-Aware AAWService.exe [color=red][b]Ad-Aware AAWTray.exe is disabled![/b][/color] [color=red][b]Spybot SDHelper is disabled![/b][/color] [b]`````````````````````````````` DNS Vulnerability Check: ``````````````````````````````[/b] GREAT! (Very random) Scan took 21565 seconds. [b]`````````End of Log```````````[/b]

0

Are you still getting redirected? Follow these Steps in order numbered. Don't proceed to next step unless you have successfully completed previous step: 1) Run complete scan with: http://onecare.live.com/site/en-Us/... 2) Install, update database and run full scan with Malwarebytes' Anti-Malware. Attach malwarebyte full scan log, fix anything detected. 3) House cleaning. Run full Scan with SuperAntispyware : http://www.superantispyware.com/dow... . Fix what it detects and post summary scan log. If I'm helping you and I don't reply within 24 hours send me a PM.

0

No, the redirecting has stopped. Should I still follow the three steps?

0

Yes its recommended you still follow Response Number 10. It will clean up remaining files and other benefits. If I'm helping you and I don't reply within 24 hours send me a PM.

0