Unzip HJT into it's own permanent folder before doing anything in order for it to create backups. (Not a temporary folder or the desktop & not directly on your hard drive). Close all (browser) windows & rescan with hijackthis. When the scan is finished place a check in the box to the left of the following entries & click 'fix checked' :
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://amazingautossearch.com/searchbar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://amazingautossearch.com/searchbar.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://amazingautossearch.com/passt.../www.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://amazingautossearch.com/searchbar.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://amazingautossearch.com/searchbar.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://amazingautossearch.com/searchbar.html
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
F0 - system.ini: Shell=
F2 - REG:system.ini: Shell=
All the 01 entries.
O2 - BHO: (no name) - {9F599706-F35A-E479-E1A2-E671F9532019} - F:\PROGRA~1\partchin\Axis New.dll
O3 - Toolbar: (no name) - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - (no file)
O3 - Toolbar: loveamok1 - {52C50340-7B62-DB04-2F1A-55A2F1D467E4} - F:\PROGRA~1\partchin\Axis New.dll
O4 - HKLM\..\Run: [RunDLL] rundll32.exe "F:\WINNT\system32\bridge.dll",Load
O4 - HKLM\..\Run: [logtray] F:\PROGRA~1\Long idle setup\Bows boob.exe
O15 - Trusted Zone: *.msn.com
Reboot into safe mode following the instructions here & navigate to & delete
F:\PROGRA~1\partchin< folder
F:\PROGRA~1\Long idle setup< folder
F:\WINNT\system32\bridge.dll< file
Reboot normally after doing the above then post a fresh log plz.
