Virus hijacking browser, redirecting websites

[btang]

I've attached the log: avptool_syscheck.zip. Thanks for your help!

[Rene-gad]

Close/unload all the programs excepted AVZ and Internet Explorer

Switch off:
- Antivirus and and, if you have - Firewall.
- System Restore


- Execute following script

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 QuarantineFile('C:\Windows\system32\siejf93.dll','');
 QuarantineFile('C:\Windows\system32\jsne87fidgf.dll','');
 QuarantineFile('C:\Users\Will\AppData\Local\Temp\csrssc.exe','');
 QuarantineFile('C:\Users\Dad\AppData\Local\Temp\winlogun.exe','');
 QuarantineFile('C:\Users\Dad\AppData\Local\Temp\winlogin.exe','');
 DelBHO('{C5AF42A3-94F3-42BD-F434-3604832C897D}');
 DeleteFile('C:\Users\Dad\AppData\Local\Temp\winlogin.exe');
 DeleteFile('C:\Users\Dad\AppData\Local\Temp\winlogun.exe');
 DeleteFile('C:\Users\Will\AppData\Local\Temp\csrssc.exe');
 DeleteFile('C:\Windows\system32\jsne87fidgf.dll');
 DeleteFile('C:\Windows\system32\siejf93.dll');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

After reboot:
- Clean Temp-Maps, Cache of Browsers, Recycler. Use Windows service tool cleanmgr or CCleaner or ClearProg
- Close all the programs and start only Internet Explorer!!!
- Repeat 3 log files in accordance with the rules.
- Switch Antivirus and, if you have - Firewall, on.
- Go On-Line
- Upload the quarantine in accordance with Appx. 3 of the rules.
- Attach 3 logs to your new post..

[btang]

I've uploaded the logs you requested.