I have tried everything I could find on the internet to get this removed.

I have tried Avira Antivirus, Kaspersky 30 day trial, asquared, mwb 1.36, Superantispyware, spybot. All of them with full updates.

Any Suggestions.


Malwarebytes' Anti-Malware 1.36
Database version: 1989
Windows 5.1.2600 Service Pack 3

4/16/2009 3:44:59 PM
mbam-log-2009-04-16 (15-44-59).txt

Scan type: Quick Scan
Objects scanned: 91460
Time elapsed: 1 hour(s), 33 minute(s), 10 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 4
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\bf (Trojan.Agent) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\bk (Trojan.Agent) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\iu (Trojan.Agent) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\mu (Trojan.Agent) -> Delete on reboot.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

The HiJackThis log is 948KB so i zipped it and attached it.

I also run ATF cleaner, CCleaner.

No edit button, or atleast i didn't see one. I forgot to add.

Edit:

Also this HijackThis log does not happen in any other user account accept for the Administrator Local account.

Any thoughts ?