Run the Brute Force Uninstaller step again..Make sure you are using the 2search.bfu file that MicroBell asked you to get.
Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order it is mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes. You should 'not' have any open browsers when you are following the procedures below. Also if you have any programs that may prevent system changes (like Spybot's TeaTimer program, Ad-aware's Ad-Watch, and others), make sure you disable them before doing any of the fixes (or accept the changes for the fix we give you when asked by the programs).
Go to My Computer->Tools (or View)->Folder Options->View tab:
* Under the Hidden files and folders heading, select Show hidden files and folders (it's Show all files for Windows 98).
* Uncheck the Hide protected operating system files (recommended) option.
* Click Yes to confirm and then click OK.
For the options that you checked/enabled earlier, you may uncheck them after your log is clean. If we ask you to fix a program that you use or want to keep, please post back saying that (we don't know every program that exists, so we may tell you to delete a program that we think is bad to keep).
Download CleanUp!
http://cleanup.stevengould.org/ (Alternate Link if main link don't work -
http://www.greyknight17.com/spy/CleanUp.exe ) and install it. CleanUp! deletes EVERYTHING out of your temp/temporary folders, it does not make backups. If you have any documents or programs that are saved in any Temporary Folders, please make a backup of these before running CleanUp!. Run CleanUp! and click on the Options button. Uncheck 'Scan local drives for temporary files'. Also uncheck those two Newsgroup entries if you don't want to delete them. Click OK and then click on the CleanUp! button. Let it run. After it's done, choose Yes to logoff.
Restart your computer and boot into Safe Mode (if you don't know how, go to
http://www.bleepingcomputer.com/foru...howtutorial=61 ). Make sure to close any open browsers.
Uninstall the following via the Add/Remove Panel (Start->(Settings)->Control Panel->Add/Remove Programs) if found:
2Search
Run a scan in HijackThis. Check each of the following if they still exist and hit 'Fix Checked' after you check the last one:
O2 - BHO: GoogleCatch.clsIESpy - {4508E20C-ACAD-11D2-9FC0-00550076E06F} - C:\Program Files\2search\2search.dll
O4 - HKLM\..\Run: [2Search] C:\Program Files\2search\main.exe
Check and fix ALL the O18 entries below related to Logitech, except for the first line (see below). Leave that entry unchecked:
O18 - Protocol: bw+0 - {5958427B-D5DC-479A-B52B-CFB2EACBFEAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
Go to Start->Run and type in regsvr32 /u occache.dll and hit OK.
Delete these if found:
C:\WINDOWS\DOWNLOADED PROGRAM FILES\dm.inf
C:\PROGRAM FILES\2search
C:\Documents and Settings\Peter_2\Cookies\peter_2@microsofteup.112. 2o7[1].txt
C:\Documents and Settings\Peter_2\Cookies\peter_2@tribalfusion[1].txt
C:\Documents and Settings\Peter_2\Cookies\peter_2@microsofteup.112. 2o7[1].txt
C:\Documents and Settings\Peter_2\Cookies\peter_2@tribalfusion[1].txt
C:\RECYCLER\S-1-5-21-45187622-387425249-3885722425-1011\Dc3.inf
C:\WINDOWS\inf\polall1r.inf
Go to Start->Run and type in regsvr32 occache.dll and hit OK.
Restart and run a new Panda scan. Post that log here along with a new HijackThis log.