Thanks! IWas having the same problem and the advice on this forum seems to have fixed it(so far) I will list what I did in addition to follow the advice on this thread.
1. Updated and ran Spybot S&D ( No help)
2.Did a scan from Trendmicro (started to remove and identified ctfmona.exe as the problem, but couldn't get it all out!)
3. Tried to remove ctfmona.exe from the system32 file. Gave me a "disk is in use message", so I stopped ctfmona.exe in the msconfig startup services and booted to safe mode and removed it manually.
4. WIndows browser was still hijacked and led to "Dealtime.com etc." when I tried to search for solutions via Google, so I used Firefox to find this thread (thank god).
5.Ran Hijackthis! and found the following key as listed in this thread:
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
Stopped it with Hijack this.
5. Ran the tool Combofix as listed in this thread.
6. When the computer rebooted it poted a log and I noticed this:
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmona
7. Went into the registry and deleted it out of the registry.
8. Posted this with the hope that it will help someone.
Thanks, good luck
By the way, I got this trojan from a myspace page. A screenshot for Windows malicious removal tool popped up (fake), then I clicked on a .exe file that claimed to be from windowsupdate. , but had a bunch of weird letters after it. I don't know why I clicked on it, but I did. I have update set to manual and it said it wasn't approved by Microsoft!!! Duh. Well hope this helps people and thanks again to crunchie!!!