Hi pete
I see no evidence of an Anti-virus program on board. Please install update and run an Anti-virus (or if you do have 1 make sure it is enabled). Here are some links for anti-virus software.
AVG
Avast
BitDefender Free Edition v7.2
*NOTE It is important you only have 1 anti-virus program running.
---------------------------------------
Please disable the following programs (and your anti-virus program) so they don't interfere with the fixes. You can re-enable them again after completing the steps in this post.
AD-AWARE AD-WATCH- Right click on the Ad-Watch icon in the system tray.
- At the bottom of the screen there will be two checkable items called "Active" and "Automatic".
- Active: This will turn Ad-Watch On\Off without closing it.
- Automatic: Suspicious activity will be blocked automatically.
- Uncheck both of those boxes.
- (When done, you can re-enable it using the same steps but this time check both boxes.)
AVG ANTI-SPYWARE
- Launch AVG Anti-Spyware.
- From the "Status" menu, select "Change state" to inactivate 'Resident Shield' and 'Automatic Updates'.
- Then right click on AVG Anti-Spyware in the system tray and uncheck "Start with Windows".
SPY SWEEPER
- Open Spy Sweeper and click on Options > Program Options and uncheck "load at windows startup".
- On the left click "shields" and then uncheck everything there.
- Uncheck "home page shield".
- Uncheck "automatically restore default without notification".
- Exit the program.
- (When we are done, you can re-enable it using the same steps but this time reverse them.)
---------------------------------------
Scan with HijackThis and check the following entries (If they still exist) (make sure not to miss any)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = prosearching.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = prosearching.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = prosearching.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = prosearching.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = prosearching.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = prosearching.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = prosearching.com
O4 - HKLM\..\Run: [WinampAgent] D:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AGEIA PhysX SysTray] C:\Program Files\AGEIA Technologies\TrayIcon.exe
O4 - HKCU\..\Run: [BBC News alerts] D:\Program Files\BBC News alerts\skinkers.exe
Remember to close all other windows and click Fix Checked
---------------------------------------
Please re-scan at Kaspersky, once the scan has completed the 'Stop Scan' button will no longer be available and the 'Save Report' button will be active. Leaving your other security programs disabled may speed the scan up a bit. You can disconnect from the internet once the scan has started, remember to re-connect BEFORE clicking on Save Report.
---------------------------------------
Required Logs
Kaspersky report
new HijackThis log