resend Meloco browser hijacker

Thank you for your assistance, it is very greatly appreciated. My daughter had been visiting a music download site (she thinks it is "letitsing.com" or "letssingit.com"). The McAfee software popped up, indicating that a Qoologic trojan had been picked up and deleted. The location was C:\Docs and Settings\Kate\Local Settings\Temp Internet Files\Content.IE5\ADVGD0FU\installer_252[1].exe

I ran a full McAfee Virus Scan, which was clear. I ran Ad-Aware SE Pro and Spybot. However, the next day when my daughter went to use IE again, she called me because the homepage had been reset to a suspicious page that looked like a MySpace type site. http://www.meloco.com/index.php?i=sm. I ran McAfee again, which picked up Webhancer, as well as Ad-Aware SE pro, which picked up 50 or 60 cookies and trackers. A-A SE also reported possible browser hijacker. I had been helped by Major Geeks folx on a previous occasion w a browser hijacker, so I went directly to your site.

As per your Read/Run First directions, we have done the following. I ran the whole suite a second time in safe mode without rebooting, because I had to reboot several times in normal mode during first pass when I was trying to download updates, and there were reinfections.

Ran FindQool, RKTOOL, WinPfind

Ccleaner, Ad-Aware SE pro, Windows Defender, Spybot SD, MS Windows Maliscious Software Removal Tool, Bit Defender, ActiveScan

Ran HJT, report is attached. Also reports for BD, ActiveScan, A-A SE, CCleaner, WD, MSWMSRT, FindQool

I can see in the HJT report that opening IE page for my daughters account is set to Meloco.com, but I don't know enough to recognize whether there are other suspicious files. It would be much appreciated if you could Pls review and provide me direction on removing the browser hijacker and any other maliscious files.

again, thank you for your help.

Alan Traugott