Hi, and sorry if I previously posted to another thread. I didn't realize that I wasn't supposed to do that.
I started out with Antivirus Live problems. Using research on the web, I seemed at first successful at getting rid of it by going into the registry, removing all references to what it seemed to call itself (becusysguard.exe), and then deleting the folder it put in my c:\documents and settings\myname\local settings\application data\random dir\becusysguard.exe. Also, I took out the proxy settings from IE that it put in on its behalf.
This worked for about two weeks, but I keep getting hit with similar "You have a virus blah blah blah" infection - similar to Antivirus Live, but a different infection. In these later cases, the infection locks me out of just about everything, and the only way I can resolve is to boot the Windows XP CD into repair mode and then copy a bare bones registry from c:\windows\repair, and then boot into safe mode and then pick a restore point before infection. These are temporary fixes. Within a few days, I get hit with something else.
At one point, I downloaded and installed McAfee, and since then I haven't gotten the "Antivirus Live" type of issues, but now I have what seems to be the Google Redirection issue. The computer also seems to be doing funky things - screen vibrates, scroll bars advance on their own - almost as if someone is remoted in.
So, I went through all the Read Me First posts and did all the scans. I will attach the logs here. In Add / Remove Programs, the only thing I don't recognize is WindowsLive OneCare Safety Scanner. I didn't see this on any list of viruses or malware, and I don't suspect it's a problem, but I mention it here.
So thank you for all of your kind help, and I hope that we can get rid of this thing. Is it possible that my IP Address is open to someone, so that even though I clean my machine, they can continue to re-enter and infect? Would they be getting through my firewall if that were the case?
[Saving space, attachment deleted by admin]
