Hello Juliet,
So it looks even to my novice eyes that we may be getting to the nitty grits of my infection . Here is the ESEETSCAN log :
C:\Users\gokarna\Downloads\DriversForFreeSetup.exe a variant of Win32/InstallCore.JW potentially unwanted application
C:\Users\gokarna\Downloads\MediaPlayer__7392_i603528379_il146.exe a variant of Win32/Amonetize.AO potentially unwanted application
C:\Users\gokarna\Downloads\shrek-the-third2007dvdrip-ac3eng-axxo_BitLord.exe Win32/InstallCore.MT potentially unwanted application
Btw how goes it with finding and deleting Yandex ? Can you do it remotely ?
Salute, Wendy