First of all, don't waste a lot of time running scan after scan with things your "technical friend" said to run.
It's not going to work. Plus, the fix will take about 2 hours of your time. So plan for it.
One reason is that this new version of the spyware embeds itself in many many places...over 1,000.
One of those places re-installs the spyware after you think you removed it with some great thing a friend gave you or you found on the Internet.
Well, it will be back when you turn on your computer next time.
What about SAFE MODE?
Answer---nope....not without some instruction. You may get 30-60 seconds of internet time in Safe Mode before your computer is stopped and the program starts running.
So...what do you do?
1st...you do need to boot into safe mode with networking.
Open internet explorer..and you will get an error....because the program will not allow you on the internet.
STEP 1
Go to TOOLS
Internet Options
Click the CONNECTIONS tab
LAN Settings button
and UNCHECK ALL BOXES!
Nothing in that windows should be marked.
Say ok and close out of the Browser.
STEP 2
NEXT for XP users, click START-RUN and type Regedit.msc
For VISTA users, click the start button, type "CMD" and in the DOS box, type Regedit.
Find and delete the following Registry keys if they are present
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[random charaters]"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "[random characters]"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments "SaveZoneInformation" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyServer" = "http=127.0.0.1:5555"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Associations "LowRiskFileTypes" = ".exe"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "ProxyOverride" = ""
HKEY_CURRENT_USER\Software\AvScan
HKEY_CURRENT_USER\Software\AvSoft
HKEY_CURRENT_USER\Software\AVS4YOU
STEP 3Reboot into SAFE MODE again, open the browser and you should have internet now.Now download and run MALWAREBYTES.If you need it, I have it on my Downloads site.
http://www.jamesclancy.com/Downloads.html
Update it as well before using.
STEP 4
Do the FULL SCAN. It maye take an hour, but it will now find all the problem files.
Click REMOVE and reboot to normal use.
It will be slow the first time as you really have given your PC a workout.
ALTERNATE IDEA
If you don't want to mess with getting into the registry or blowing off 2 hours of your time.
JamesClancy.com will do this for you for $50. You will also get a free internal cleaning of your PC with before and after photos.