Go to my post here first and follow EXACTLY.
How to remove Begin2Search / Coolwebsearch
Uninstall Viewpoint, it is adware;
C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
Then delete the directory with everythin in it.
After that, reboot in safe mode and let HJT "fix" (if still there):
C:\WINDOWS\System32\
nlqzjdk.exe
C:\WINDOWS\
SOUNDMAN.EXE
C:\documents and settings\antonio asaro\local settings\temp\
OUJT5gLJ9.exe
C:\WINDOWS\System32\
euawfoy.exe
C:\Documents and Settings\Antonio Asaro\Application Data\
lswa.exe
C:\WINDOWS\System32\
d?dplay.exe
C:\WINDOWS\System32\
Lvs22C.exe
C:\WINDOWS\System32\
Vryu.exe
C:\WINDOWS\System32\
itircl.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\about.htm
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {43207D8E-961C-72C1-D349-8D4FCADBE0A5} - C:\WINDOWS\system32\
atlue.dll
O4 - HKLM\..\Run: [kkblxfqy] C:\WINDOWS\System32\
nlqzjdk.exe
O4 - HKLM\..\Run: [SoundMan]
SOUNDMAN.EXE
O4 - HKLM\..\Run: [OUJT5gLJ9] C:\documents and settings\antonio asaro\local settings\temp\
OUJT5gLJ9.exe
O4 - HKLM\..\Run: [5BCSZTY5FYE94W] C:\WINDOWS\System32\
Upwt.exe
O4 - HKCU\..\Run: [itircl] C:\WINDOWS\System32\
itircl.exe
O4 - HKCU\..\Run: [JavaUpdate0.07] C:\WINDOWS\System32\
euawfoy.exe
O4 - HKCU\..\Run: [Abts] C:\Documents and Settings\Antonio Asaro\Application Data\
lswa.exe
O4 - HKCU\..\Run: [Qqdu] C:\WINDOWS\System32\
d?dplay.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
O15 - Trusted Zone: *.musicmatch.com
O15 - Trusted Zone: *.musicmatch.com (HKLM)
O16 - DPF: {1D0D9077-3798-49BB-9058-393499174D5D} - file://
c:\counter.cab
O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540006} -
http://www.errorguard.com/installation/Install.cab
O16 - DPF: {27527D31-447B-11D5-A46E-0001023B4289} (CoGSManager Class) -
http://gamingzone.ubisoft.com/dev/packages/GSManager.cab
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) -
http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_44.cab
O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) -
http://launch.gamespyarcade.com/software/launch/alaunch.cab
O16 - DPF: {94837F90-A2CA-4A8A-9DA0-B5438EC563EA} -
http://install.wildtangent.com/cda/islandrally/ActiveLauncher/ActiveLauncherSetup.cab
O16 - DPF: {AB29A544-D6B4-4E36-A1F8-D3E34FC7B00A} -
http://install.wildtangent.com/bgn/partners/daimlerchrysler/rrtstreetwise/install.cab
O16 - DPF: {B3872502-F9FD-4E96-93FF-0D37298F0689} (SOESysInfo Control) -
http://everquest2.station.sony.com/systemscan/soesysinfo.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} -
http://us.dl1.yimg.com/download.yahoo.com/dl/installs/suite/yautocomplete.cab
Afterwards, delete all the
bold files