Welcome to Daniweb :)
Ok, first thing I see in the processes are things like this:
C:\DOCUME~1\Elise\LOCALS~1\Temp\Adobelm_Cleanup.0001
In other words, they're running from a *.tmp folder, and generally are bad.
SO, first thing we're gonna do is run CCleaner in safe mode:
________________
Begin by downloading CCleaner , and specifically choosing the most recent version.
Then, follow these steps:
1. Close all programs so that you are at your desktop.
2. Double-click on the "My Computer" icon.
3. Select the "Tools" menu and click "Folder Options".
4. After the new window appears select the "View" tab.
5. Place a checkmark in the checkbox labeled "Display the contents of system folders".
6. Under the "Hidden files and folders" section select the radio button labeled "Show hidden files and folders".
7. Remove the checkmark from the checkbox labeled "Hide file extensions for known file types".
8. Remove the checkmark from the checkbox labeled "Hide protected operating system files". 9. Press the "Apply" button and then the "OK" button and shutdown My Computer.
10. Now your computer is configured to show all hidden files.
Now, install the program. Open it, and choose the 'Options' tab. Inside, hit the 'Custom' tab, and add the following folders (Note: Not all of these files are on every computer. If one of these isn't present, skip it):
C:\Windows\Temp
C:\Temp
C:\Documents and Settings\\Local Settings\Temp
C:\Documents and Settings\\Local Settings\Temporary Internet Files\Content.IE5
C:\Documents and Settings\\Local Settings\History
C:\Documents and Settings\\Cookies
C:\Windows\Prefetch
After doing this, move back to the 'Cleaner' tab, and inside this, be sure your open to the 'Windows' tab. Inside, check the box labeled 'Custom Files and Folders'.
Next, after following all of these steps, you're ready to scan.
First, reboot into safe mode. Then, run scans in both the 'Cleaner' and 'Issues'. Note: It might take several scans in each to remove all of the junk.
Now reboot back into normal mode.
___________________
Copy this advise to a Notepad file. Save it to your desktop. We will use it later
Now, continue by opening the Add/Remove Programs list and uninstalling MyWebSearch.
Now, open HJT and place checks next to the following:
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.sitesearchcentral.com/sp2.php
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.supremetoolbar.com
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
F2 - REG:system.ini: Shell=Explorer.exe, C:\WINDOWS\system32\uuuwp.exe
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,fpcbaji.exe
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O4 - HKLM\..\Run: [ecikpc] C:\WINDOWS\system32\elespe.exe reg_run
O4 - HKCU\..\Run: [ayolq] C:\WINDOWS\system32\elespe.exe reg_ru
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbar...p=ZNxpt029DQUS
O15 - Trusted Zone: agt.firstteam.com
O15 - Trusted Zone: *.firstteam.com
O15 - Trusted Zone: www.firstteam.net
O15 - Trusted IP range: http://127.0.0.1
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache...up1.0.0.15.cab
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -
After placing checks, close ALL windows (including this one) and hit 'Fix Checked'.
Now we're gonna run Killbox:
1) Please download the Killbox .
Unzip it to the desktop but do NOT run it yet.
2) Then please reboot into Safe Mode by restarting your computer and pressing F8 as your computer is booting up. Then select the Safe Mode option.
Once in safe mode, delete the following folder:
C:\Program Files\MyWebSearch
Now, empty the recycle bin
3) Now, please run Killbox.
4) Select "Delete on Reboot".
5) Open the text file with these instructions in it, and copy the file names below to the clipboard by highlighting them and pressing Control-C:
C:\WINDOWS\system32\uuuwp.exe
C:\WINDOWS\system32\fpcbaji.exe
C:\WINDOWS\system32\elespe.exe
6) Return to Killbox, go to the File menu, and choose "Paste from Clipboard".
7) Click the red-and-white "Delete File" button. Click "Yes" at the Delete on Reboot prompt. Click "No" at the Pending Operations prompt.
If you receive a message such as: "Component 'MsComCtl.ocx' or one of its dependencies not correctly registered: a file is missing or invalid." when trying to run TheKillbox, click here to download and run missingfilesetup.exe. Then try TheKillbox again..
Let the system reboot.
Now, post back here with a new HJT log.
Thanks.
