I am having trouble removing some registry values much as the above described. I have downloaded the groupfix batch file and I can successfully execute it. That gives me a minute window where everything is fine, and then the values keep getting reset back to having regedit and system restore off by group policy. Malwarebytes finds the two registry problems everytime I scan, however does not seem to actually remove them. Attached here is the report before telling it to remove them.
When i tell Malewarebytes to remove them it says it has sucessfully and asks for a reboot, upon completion, nothing has changed. I have been stuck in this loop for a few hours, and am going to attempt to run the groupfix seconds before I tell malwarebytes to delete them, but have little hope.
EDIT: Through more research, and 6 hours of work, I believe I have finally defeated this thing using a Kaspersky deep root scan. I am now installing all of the Windows updates. I am feeling much better about the security of my pc, have AVG 9.0 up and running again, but if there is anything I need to do now to make sure its really gone, or to better protect myself in the future that would be greatly appreciated. Thanks.
Edited by Dadutchman, 12 January 2011 - 02:10 PM.
Split to AII. ~BZ