Its another BHO - browser helper object - based adware - go to
www.majorgeeks.com and download BHODemon, install, undate, and then look at
the BHOs it lists. disable any you don't want.
While there I would also recommend SpywareBlaster - be sure to unpdate it
and the select Enable All Protection.
Some extra manual steps for ensuring your problem is gone:
Reboot into safe mode
Then, as some of the files or folders you need to delete may be hidden do
this:
Open Windows Explorer & Go to Tools > Folder Options.
Click on the View tab and make sure that "Show hidden files and folders" is
checked.
Also uncheck "Hide protected operating system files" and untick "hide
extensions for known file types" . Now click "Apply to all folders"
Click "Apply" then "OK"
(run MSAS in full deep mode twice and see what it finds)
Locate and if found delete:
c:\windows\system32\ztdumm.exe
C:\WINDOWS\farmmext.exe
C:\WINDOWS\wupdt.exe
C:\WINDOWS\Ceres.dll
C:\WINDOWS\systb.dll
Do a search for a file named Buddy.exeand delete it if found.
==============================
Empty the Recycle Bin.
==============================
Go to Start > Run and type %temp% in the Run box, press OK . The Temp folder
will open. Click Edit > Select All then Edit > Delete to delete the entire
contents of that Temp folder.
Then go to C:\windows\temp and select EVERYTHING except temporary internet
files, cookies and history folders and delete all that and then do the same
for C:\temp
1) Open Control Panel
2) Click on Internet Options
3) On the General Tab, in the middle of the screen, click on Delete Files
4) Check the box "Delete all offline content"
5) Click on OK.....wait for the hourglass icon to stop after it deletes the
temporary internet files
6) You can now click on "Delete Cookies" and click OK to delete cookies that
websites have placed on your hard drive.
JohnF.