advHelp32.dll Virus and How I got rid of it

I am usually very careful but I got a virus that I noticed in my startup menu that has no manufacturer listed. It appears the virus is very new only a couple days old.

This virus first appeared yesterday Jan 6th and my MS Security Essentials didn’t even know about it because it was so new.

What does it do?

About every 3 or 4th search on Google within Firefox 9 it would take me to an advertisement instead of the page Google intented. Sometimes it doesn’t go to an ad it take you to another virus.

What I am doing to clean my computer.

I disabled it on start up and deleted it in the directory, but it seems to be in the registry as well so that is what I am working on now.

If anyone figures out how to clean this off there Windows 7 system please let me know.

How I got rid of it

I did a restore from Jan 5th at 5am in the morning and that got rid of it.

Happened between 12/24 to 1/4/12

Google Gmail:

I am guessing that “50.16.179.243″ is backupify using amazon’s servers. And

These are the files they placed on my site:

* c
Wed Dec 28 23:14:18 2011 0 213.5.71.102 45 /home/learning/__check.html a _ i r learning ftp 1
* c
Wed Dec 28 23:14:22 2011 0 213.5.71.102 45 /home/learning/public_html/__check.html a _ i r learning ftp 1
* c
Wed Dec 28 23:14:24 2011 0 213.5.71.102 35057 /home/learning/public_html/wp-includes/js/tinymce/utils/utils.php a _ i r learning ftp 1