Download and unzip cwsserviceremove to your desktop. use either link below:
cwsserviceremove
cwsserviceremove.zip
Delete the following files and folders
C:\WINDOWS\system32\saie_*.dat<--Delete this file
C:\WINDOWS\system32\winupdt.bin<--Delete this file
C:\Documents and Settings\All Users\Application Data\VBouncer<--Delete the whole folder
C:\Program Files\Search3 Toolbar<--Delete the whole folder
C:\Documents and Settings\Saker\Favorites\Sites about\Ab scissor.url<--Delete this file
C:\Documents and Settings\Saker\Desktop\backups\backup-20050413-201402-652.dll<--Delete this file
C:\ntdetect_hta.vir<--Delete the whole folder
C:\Program Files\AWS<--Delete the whole folder
C:\Program Files\Common Files\clanteaf<--Delete the whole folder
C:\Program Files\Windows AdStatus<--Delete the whole folder
C:\Program Files\Windows Media Player\[b]wmplayer.exe.tm
Double click on the cwsserviceremove and when asked to merge say yes.
Reboot
Post a new HJT.Log
Kc