SAHbundle.exe problem

I have tried every spyware program available and the just wont go away. Tried cleaning in safe mode, Tried norton. Nothing works. Also this file keeps returning in system32 "ygqczq.dll". Adaware and almost every other ad ware program flags this as vx2. When I search I cant find bundle.exe which is related to SAH but the reg entries and startup entries keep re-appearing and the popups keep coming. People who come up with this stuff should be jailed at the least. Is the only way I can get rid of this to re-format the drive?????. Heres my hijack log:

Edit by chaslang: Unrequested, incomplete, inline log deleted
Please follow forum guidelines. Read the sticky threads!

 

Ok I cant edit the previous file. This is my hyjack log after I shut down email and all of that. There are 2 lines that keep returning that are hilighted. No matter how I search I cannot find bundle.exe on my system.


O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Keyboard Mouse Tool\mouse32a.exe
O4 - HKLM\..\Run: [SAHBundle] C:\DOCUME~1\JAMES\LOCALS~1\Temp\bundle.exe


Edit by chaslang: Unrequested, incomplete, inline log deleted
Please follow forum guidelines. Read the sticky threads!

 

Hi Killzone1,
Im not a real ubber Geek, but have had my fair share of experience (fixing things I break).
I found the article below hope it helps
you,Remove shop at home select

 

Please follow ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

If you already have any of the programs linked in the tutorial please double check your version to make sure you have the latest one and that you have any/all updates for the programs.

After doing ALL of the above if you still have a problem:

Make sure you have HijackThis 1.99 and follow the guidelines on where to install it and how to post a log as an attachment. This is all covered in the sticky thread NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting

Now post a HijackThis as a .txt file attachment to your message. All running programs should be closed, including your web browser, e-mail. Close before running Hijack This!