Google still misdirecting

Goored fix LOG

GooredFix v1.92 by jpshortstuff
Log created at 10:25 on 21/05/2009 running Option #2 (mslattery)
Firefox version 3.0.10 (en-US)
(Subsequent Run)

=====Goored Deletions=====
C:\Program Files\Mozilla Firefox\extensions\{EDD9511A-FA36-4BC1-B4BD-C98B5A37EE3B}
->Backing up folder... Done.
->Emptying folder... Done.
->Deleting folder... Done.

=====Dumping Registry Values=====

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Firefox 3.0.10\extensions]
"Plugins"="C:\Program Files\Mozilla Firefox\plugins"

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Mozilla Firefox 3.0.10\extensions]
"Components"="C:\Program Files\Mozilla Firefox\components"

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions]
"{20a82645-c095-46ed-80e3-08825760534b}"="C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\"

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions]
"jqs@sun.com"="C:\Program Files\Java\jre6\lib\deploy\jqs\ff"

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions]
"{1d5287d1-8a92-0001-1f31-1cec198018d8}"="C:\Program Files\AVG\AVG8\ToolbarFF"

[HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions]
"{3f963a5b-e555-4543-90e2-c3908898db71}"="C:\Program Files\AVG\AVG8\Firefox"

Okay, how is the machine now? the main problem is gone.

Yes google seems to be running well now. Do I need to run the script at the command prompt for goored?

"%userprofile%\Desktop\GooredFix.exe" /uninstall

Please let me know.

Hello.
Yes, run that command, along with this next command:

Click Start > Run and copy/paste the following bolded text into the Run box and click OK:

ComboFix /u



This will also reset your restore points.

How is the machine running now?

Everything seems good now. I really appreciate your halp and your patience. You guys are awesome.

One LAST question (I hope)..... ComboFix changed my background screen. Is that normal and can I change it back to what I had?

I guess that was 2 questions. Thanks again!!

Yes, it's normal, or set by the malware. There is some restrictions on Activedesktop if you used that.

Change it back if you want to.