spyware, HJT log, "you have been paid"

On bootup, browser loads to page, http://underrun.net/pay.html and page title "you've been paid"...

Have performed all of the actiions suggested on your "before you post' page and it still comes back.
[log removed]

 

Please follow all the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

Since this appears to be a trojan it would good idea for you to run the "Alternative Scans - If still having problems" section given in the READ ME FIRST thread.

If you already have any of the programs linked in the tutorial please double check your version to make sure you have the latest one and that you have any/all updates for the programs.

NOTE: In order to resolve the issues you are having it is very important that you at least try to perform all the steps as outlined. If you have any difficulty please post back letting us know what steps you have completed, what you found while doing the scans if anything and details about any problems you have encountered in completing the steps. The more details you can provide the better.

http://forums.majorgeeks.com/showthread.php?t=38752
Hijack This Tutorial And How To Post Your Log File