Dear techspot, I have done all in your preliminary removal thread, except step 3 (because it won't start in my computer for unknown reason). My problem is avg keeps finding win32/cryptexe virus in file c:\msets.exe, and in some folder in windows (i forgot, but the file name is helper.exe). Everytime i found those file, i always deleted it, but soon after i connect to the internet, the files keep coming back (the same file, the same folder). Also, my avg antirootkit found nothing. I'll attach the hijack, avg antispyware, and combofix log below. Thank you.