Run Hijack This. Click on Config ---> Misc Tools ---> Open Process Manager.
Kill each of the following processes, if found -
Hardware Clock Driver / (hwclock) / C:\WINDOWS\System32\hwclock.exe
Network DDE Client / (NetDDEclnt) / C:\WINDOWS\System32\netddeclnt.exe
C:\WINDOWS\System32\Fmspdy.exe
C:\WINDOWS\System32\Twypai.exe
C:\WINDOWS\System32\oif6ak25.exe
C:\Program Files\Wflumn\Fdgyzs.exe
winhost.exe
Logitech.exe
ntguard32.exe
winupdater.exe
Run Hijack This again. Click on config ---> Misc Tools ----> Delete an NT service. Enter the following item - hwclock - and hit enter. Repeat the process with NetDDEclnt.
Run Hijack This and click on scan. The following items need to be fixed -
O2 - BHO: MyWay Search Assistant BHO - {04079851-5845-4dea-848C-3ECD647AA554} - C:\Program Files\MyWay\SrchAstt\1.bin\MYSRCHAS.DLL (file missing)
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL (file missing)
O2 - BHO: BHObj Class - {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4} - C:\WINDOWS\wsem303.dll (file missing)
O2 - BHO: BAHelper Class - {A3FDD654-A057-4971-9844-4ED8E67DBBB8} - C:\Program Files\SideFind\sfbho.dll (file missing)
O3 - Toolbar: My &Search Bar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL (file missing)
O3 - Toolbar: ISTbar - {FAA356E4-D317-42a6-AB41-A3021C6E7D52} - C:\Program Files\ISTbar\istbarcm.dll (file missing)
O9 - Extra button: SideFind - {10E42047-DEB9-4535-A118-B3F6EC39B807} - C:\Program Files\SideFind\sidefind.dll (file missing)
O4 - HKLM\..\Run: [Logitech] Logitech.exe
O4 - HKLM\..\Run: [WSAConfiguration] ntguard32.exe
O4 - HKLM\..\Run: [Microsoft Update] winupdater.exe
O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet Optimizer\optimize.exe"
O4 - HKLM\..\Run: [version] C:\WINDOWS\System32\Fmspdy.exe
O4 - HKLM\..\Run: [secure] C:\WINDOWS\System32\Twypai.exe
O4 - HKLM\..\Run: [oif6ak25] C:\WINDOWS\System32\oif6ak25.exe
O4 - HKLM\..\Run: [Vrbteswr] C:\Program Files\Wflumn\Fdgyzs.exe
O4 - HKLM\..\RunServices: [win32] winhost.exe
O4 - HKLM\..\RunServices: [Logitech] Logitech.exe
O4 - HKLM\..\RunServices: [WSAConfiguration] ntguard32.exe
O4 - HKLM\..\RunServices: [Microsoft Update] winupdater.exe
Close all windows other than Hijack This. Check the boxes next to above items and click on Fix checked.
Connect back the PC and modem.
Reboot the PC in Safe Mode.
Locate and delete the files -
C:\WINDOWS\System32\Fmspdy.exe
C:\WINDOWS\System32\Twypai.exe
C:\WINDOWS\System32\oif6ak25.exe
C:\Program Files\Wflumn\Fdgyzs.exe
winhost.exe
Logitech.exe
ntguard32.exe
winupdater.exe
Reboot the PC and post a fresh HJT log