sann0116

ooops. forgot to mention system behaviour. can't see any evidence of savings sidekick in web browser, although it is still listed as an entry in uninstall/change program on control panel. Claro LTD toolbar is also listed and still seems to be hijacking my Chrome search from address bar. It isn't listed as an extension within chrome though. Yontoo also listed in control panel, but can't see any buzzdock ads so far. Thanks once again for your help. Phil

Here we go. cheers, Phil ComboFix.txt

Thanks Jeff. combofix.txt attached. Phil ComboFix.txt

many thanks, I've run TDSSKiller. Checked "Detect TDLFS File System". Under "objects to scan" loaded modules isn't checked by default and I left that unchecked. I've attached the log. It doesn't seem to have detected anything. Still having symptoms though. There are two links in the post preview of this message offering me a chance to win an iphone 5! cheers, Phil TDSSKiller.2.8.13.0_15.10.2012_19.54.40_log.txt

Hi Jeff, Thanks for agreeing to help. My name is Phil. I've installed aswMBR and updated the avast virus signatures. When I run aswMBR it gets as far as "avast engine scan c:\windows\system32" and then cuts to a blue screen of death: "A problem has been detected and windows has been shut down to prevent damage to your computer." I've tried launching safe mode and scanning from there but the same thing happens, although the blue screen technical details are slightly different. Any suggestions? Regards, Phil

I've tried running MalwareBytes anti-malware. First time it detected it and seemed to remove it. Despite this it's still listed in control panel and still causes problems. I'd be grateful for any help or advice. attach.txtdds.txt