TAG SearchUs, pop-ups, desktop background change and more...

As Abri had stated earlier, your PC is very badly infected (as you can see from the length of this fix and this is not everything). As such it may take few iterations to get everything fixed up.

Uninstall the below old versions of software:
J2SE Runtime Environment 5.0 Update 6
J2SE Runtime Environment 5.0 Update 9
Java 2 Runtime Environment, SE v1.4.2_03
Java(TM) 6 Update 3
Java(TM) SE Runtime Environment 6 Update 1

Run C:\MGtools\analyse.exe by double clicking on it. This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
O2 - BHO: (no name) - {00000000-d9e3-4bc6-a0bd-3d0ca4be5271} - (no file)
O2 - BHO: (no name) - {029e02f0-a0e5-4b19-b958-7bf2db29fb13} - (no file)
O2 - BHO: (no name) - {071D2E5B-3C7F-4089-A3A3-DAAF11C10E0C} - C:\Program Files\MSN Gaming Zone\vixyfeqa4444.dll (file missing)
O2 - BHO: ElmBHO - {0B123D8D-F9FF-45B4-AB68-9682CA10C2D2} - C:\Program Files\Elm\Elm.dll
O2 - BHO: COM+ Service - {2BDEC973-B5AC-4e5b-8AB3-5A0500880DA2} - C:\WINDOWS\system32\winload.dll (file missing)
O2 - BHO: {b2e04393-d8d8-4d3b-c994-bec7de528fb2} - {2bf825ed-7ceb-499c-b3d4-8d8d39340e2b} - C:\WINDOWS\system32\vdorxhgq.dll
O2 - BHO: (no name) - {2d7cb618-cc1c-4126-a7e3-f5b12d3bcf71} - (no file)
O2 - BHO: (no name) - {31D205A0-8E99-45E4-AED1-68C8F560FC17} - C:\WINDOWS\system32\gdpsfjbi.dll (file missing)
O2 - BHO: egmulhxk.msdn_hlp - {477840F3-BA52-44D9-8E41-38D61CAA010F} - C:\WINDOWS\system32\egmulhxk.dll
O2 - BHO: (no name) - {51641ef3-8a7a-4d84-8659-b0911e947cc8} - (no file)
O2 - BHO: CInternetExplorerAssistant - {59693FA9-25A3-4D8C-BB03-35658A5D83DA} - C:\PROGRA~1\INTERN~2\INTERN~1.DLL
O2 - BHO: (no name) - {5E200E9B-1B06-4F72-9E24-7B7B801E00CD} - C:\WINDOWS\system32\ddccy.dll (file missing)
O2 - BHO: (no name) - {638801EC-D206-4EC4-97EA-5A8336B648DD} - C:\Program Files\MSN Gaming Zone\vixyfeqa83122.dll (file missing)
O2 - BHO: (no name) - {669695bc-a811-4a9d-8cdf-ba8c795f261e} - (no file)
O2 - BHO: (no name) - {6abc861a-31e7-4d91-b43b-d3c98f22a5c0} - (no file)
O2 - BHO: BndShell3 BHO Class - {875A1348-7674-42aa-ADAC-B4F36A004A2D} - C:\Program Files\QdrDrive\QdrDrive8.dll
O2 - BHO: (no name) - {8E3FBDE2-7DBD-4040-85D9-29BBC559C129} - C:\WINDOWS\system32\nnnmlig.dll (file missing)
O2 - BHO: (no name) - {a4a435cf-3583-11d4-91bd-0048546a1450} - (no file)
O2 - BHO: (no name) - {B2D2D370-1406-4BA9-8702-0BD96CBD4CBD} - C:\WINDOWS\system32\mljjhfc.dll
O2 - BHO: (no name) - {B46F8792-8F19-4B53-93F9-D16E7A608565} - C:\WINDOWS\system32\gdpsfjbi.dll (file missing)
O2 - BHO: (no name) - {b8875bfe-b021-11d4-bfa8-00508b8e9bd3} - (no file)
O2 - BHO: (no name) - {c2680e10-1655-4a0e-87f8-4259325a84b7} - (no file)
O2 - BHO: (no name) - {ca1d1b05-9c66-11d5-a009-000103c1e50b} - (no file)
O2 - BHO: (no name) - {d8efadf1-9009-11d6-8c73-608c5dc19089} - (no file)
O2 - BHO: (no name) - {e9306072-417e-43e3-81d5-369490beef7c} - (no file)
O2 - BHO: (no name) - {EC64BC31-DFD4-46D7-A44D-4ED2009E12FE} - C:\WINDOWS\system32\ddcy.dll
O2 - BHO: (no name) - {FF78A3FE-BD8E-46E6-8383-2D016ECC9871} - C:\WINDOWS\system32\ddcyv.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [j5271739] rundll32 C:\WINDOWS\system32\j5271739.dll sook
O4 - HKLM\..\Run: [troy44] C:\WINDOWS\troy44.exe
O4 - HKLM\..\Run: [{10-03-3A-A1-ZN}] C:\Documents and Settings\brandi crossland\Local Settings\Temp\T0D4M001.exe D4M001
O4 - HKLM\..\Run: [3091030e] rundll32.exe "C:\WINDOWS\system32\hlqndtaq.dll",b
O4 - HKLM\..\Run: [BM33a23092] Rundll32.exe "C:\WINDOWS\system32\fkxenijs.dll",s
O4 - HKCU\..\Run: [WinTouch] C:\Documents and Settings\brandi crossland\Application Data\WinTouch\WinTouch.exe
O4 - HKCU\..\Run: [QdrPack11] "C:\Program Files\QdrPack\QdrPack11.exe"
O4 - HKCU\..\Run: [ISMModule3] "C:\Program Files\ISM\ISMModule3.exe"
O4 - Startup: Elm - Auto Update.lnk = C:\Program Files\Elm\Elm.exe
O4 - Startup: TA_Start.lnk = C:\Documents and Settings\brandi crossland\Local Settings\Temp\T0D4M001.exe
O18 - Filter hijack: text/html - {07851C6A-1C43-41d9-8319-BC89154A8C00} - C:\Program Files\RcvSystem\httpdchk.dll
O20 - AppInit_DLLs: c:\windows\system32\ldcore.dll
O20 - Winlogon Notify: ddccy - C:\WINDOWS\system32\ddccy.dll (file missing)
O20 - Winlogon Notify: mljggfe - mljggfe.dll (file missing)
O20 - Winlogon Notify: mljjhfc - C:\WINDOWS\SYSTEM32\mljjhfc.dll
O20 - Winlogon Notify: nnnmlig - nnnmlig.dll (file missing)
O22 - SharedTaskScheduler: COM+ Service - {2BDEC973-B5AC-4e5b-8AB3-5A0500880DA2} - C:\WINDOWS\system32\winload.dll (file missing)
O23 - Service: Adobe LM Service - Unknown owner - C:\DOCUME~1\BRANDI~1\LOCALS~1\Temp\645421.exe (file missing)
O23 - Service: Fax - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: ImapiService - Unknown owner - C:\WINDOWS\system32\imapi.exe (file missing)
O23 - Service: mnmsrvc - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe (file missing)
O23 - Service: Nla - Unknown owner - C:\DOCUME~1\BRANDI~1\LOCALS~1\Temp\645421.exe (file missing)
O23 - Service: RasMan - Unknown owner - C:\DOCUME~1\BRANDI~1\LOCALS~1\Temp\645421.exe (file missing)

NOTE: HJT may popup an error about the AppInit_DLLs line. Ignore it and click OK to continue..

After clicking Fix, exit HJT.

Now download The Avenger by Swandog46, and save it to your Desktop.

• Extract avenger.exe from the Zip file and save it to your desktop
• Run avenger.exe by double-clicking on it.
• Check the 'Input script manually' box.
• Click on the magnifying glass icon.
• Copy everything in the Quote box below, and paste it in the box that opens:

• Now click the 'Done' button.
• Click on the traffic light icon and OK the prompt.
• You will be prompted to restart, OK the prompt and your PC should reboot, if not, reboot it yourself.
• A log file from Avenger will be produced at C:\avenger.txt

After reboot, now install the current version of Sun Java from: Sun Java Runtime Environment

Now delete all files in the below folders except ones from the current date (Windows will not let you delete the files from the current day).
C:\WINDOWS\Temp
C:\Documents and Settings\brandi crossland\Local Settings\Temp

Now run ComboFix again like you did while running the READ & RUN ME.

Now run Ccleaner!

Now click Start, Run, and enter sfc /scannow and click OK. Note there is a space after the sfc
This will run a System File check and it could ask for your Windows XP CD so be prepared to insert it.

Now run the C:\MGtools\GetLogs.bat file by double clicking on it.

Now attach the below new logs:

• C:\avenger.txt
• C:\ComboFix.txt
• C:\MGlogs.zip

Make sure you tell me how things are working now!