[LittleBlueHouse]

Here is the log from MBRCheck. By the way, are you sure these programs are sound? When I restarted Spyware Doctor, it found a number of Trojans that didn't show up before I downloaded these programs.

MBRCheck, version 1.2.3
© 2010, AD

Command-line:
Windows Version: Windows XP Home Edition
Windows Information: Service Pack 3 (build 2600)
Logical Drives Mask: 0x0000007d

Kernel Drivers (total 157):
0x804D7000 \WINDOWS\system32\ntkrnlpa.exe
0x806E5000 \WINDOWS\system32\hal.dll
0xBA5A8000 \WINDOWS\system32\KDCOM.DLL
0xBA4B8000 \WINDOWS\system32\BOOTVID.dll
0xB9F87000 fltmgr.sys
0xB9F59000 ACPI.sys
0xBA5AA000 \WINDOWS\system32\DRIVERS\WMILIB.SYS
0xB9F48000 pci.sys
0xBA0A8000 isapnp.sys
0xBA0B8000 ohci1394.sys
0xBA0C8000 \WINDOWS\system32\DRIVERS\1394BUS.SYS
0xBA670000 pciide.sys
0xBA328000 \WINDOWS\system32\DRIVERS\PCIIDEX.SYS
0xBA0D8000 MountMgr.sys
0xB9F29000 ftdisk.sys
0xBA330000 PartMgr.sys
0xBA0E8000 VolSnap.sys
0xB9F11000 atapi.sys
0xBA0F8000 disk.sys
0xBA108000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS
0xB9EFF000 sr.sys
0xB9EC2000 PCTCore.sys
0xB9E6B000 pctDS.sys
0xB9DC6000 pctEFA.sys
0xBA118000 PxHelp20.sys
0xB9DB5000 TfFsMon.sys
0xB9DA2000 TfSysMon.sys
0xB9D8B000 KSecDD.sys
0xB9CFE000 Ntfs.sys
0xB9CD1000 NDIS.sys
0xBA128000 sbp2port.sys
0xB9CB7000 Mup.sys
0xBA1C8000 \SystemRoot\system32\DRIVERS\AmdK8.sys
0xBA480000 \SystemRoot\system32\DRIVERS\usbohci.sys
0xB94B9000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
0xBA488000 \SystemRoot\system32\DRIVERS\usbehci.sys
0xBA1D8000 \SystemRoot\system32\DRIVERS\imapi.sys
0xBA1E8000 \SystemRoot\system32\DRIVERS\cdrom.sys
0xBA1F8000 \SystemRoot\system32\DRIVERS\redbook.sys
0xB9496000 \SystemRoot\system32\DRIVERS\ks.sys
0xBA490000 \SystemRoot\System32\Drivers\GEARAspiWDM.sys
0xB943C000 \SystemRoot\system32\drivers\ctaud2k.sys
0xB9418000 \SystemRoot\system32\drivers\portcls.sys
0xBA208000 \SystemRoot\system32\drivers\drmk.sys
0xB93EC000 \SystemRoot\system32\drivers\ctoss2k.sys
0xBA5EC000 \SystemRoot\system32\drivers\ctprxy2k.sys
0xB9C77000 \SystemRoot\system32\DRIVERS\gameenum.sys
0xBA218000 \SystemRoot\system32\DRIVERS\nic1394.sys
0xB9C73000 \SystemRoot\system32\DRIVERS\nvnetbus.sys
0xB93AC000 \SystemRoot\system32\DRIVERS\NVNRM.SYS
0xB9379000 \SystemRoot\system32\DRIVERS\NVSNPU.SYS
0xB9211000 \SystemRoot\system32\DRIVERS\ati2mtag.sys
0xB91FD000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
0xBA498000 \SystemRoot\system32\DRIVERS\fdc.sys
0xBA228000 \SystemRoot\system32\DRIVERS\serial.sys
0xB9C6F000 \SystemRoot\system32\DRIVERS\serenum.sys
0xBA4A0000 \SystemRoot\system32\DRIVERS\irsir.sys
0xBA550000 \SystemRoot\system32\DRIVERS\irenum.sys
0xB91E9000 \SystemRoot\system32\DRIVERS\parport.sys
0xBA238000 \SystemRoot\system32\DRIVERS\i8042prt.sys
0xBA248000 \SystemRoot\system32\DRIVERS\L8042mou.Sys
0xB91D8000 \SystemRoot\system32\DRIVERS\LMouKE.Sys
0xBA4A8000 \SystemRoot\system32\DRIVERS\mouclass.sys
0xB9C3F000 \SystemRoot\system32\DRIVERS\L8042Kbd.sys
0xBA4B0000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0xBA258000 \SystemRoot\system32\DRIVERS\jswscimd.sys
0xBA7DA000 \SystemRoot\system32\DRIVERS\audstub.sys
0xBA340000 \SystemRoot\system32\DRIVERS\rasirda.sys
0xBA380000 \SystemRoot\system32\DRIVERS\TDI.SYS
0xBA268000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0xB9C33000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0xB9199000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0xBA278000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0xBA288000 \SystemRoot\system32\DRIVERS\raspptp.sys
0xB9188000 \SystemRoot\system32\DRIVERS\psched.sys
0xBA298000 \SystemRoot\system32\DRIVERS\msgpc.sys
0xBA388000 \SystemRoot\system32\DRIVERS\ptilink.sys
0xBA390000 \SystemRoot\system32\DRIVERS\raspti.sys
0xBA2A8000 \SystemRoot\system32\DRIVERS\termdd.sys
0xBA5EE000 \SystemRoot\system32\DRIVERS\swenum.sys
0xB912A000 \SystemRoot\system32\DRIVERS\update.sys
0xB9C2F000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0xBA2B8000 \SystemRoot\system32\DRIVERS\wsimd.sys
0xBA2C8000 \SystemRoot\System32\Drivers\NDProxy.SYS
0xBA2D8000 \SystemRoot\system32\DRIVERS\usbhub.sys
0xBA5F0000 \SystemRoot\system32\DRIVERS\USBD.SYS
0xB83AF000 \SystemRoot\system32\drivers\hap16v2k.sys
0xB82D2000 \SystemRoot\system32\drivers\ha10kx2k.sys
0xB82B0000 \SystemRoot\system32\drivers\emupia2k.sys
0xB8290000 \SystemRoot\system32\drivers\ctsfm2k.sys
0xB81F2000 \SystemRoot\system32\drivers\ctac32k.sys
0xB952D000 \SystemRoot\system32\DRIVERS\NVENETFD.sys
0xBA398000 \SystemRoot\system32\DRIVERS\flpydisk.sys
0xBA5F6000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
0xBA731000 \SystemRoot\System32\Drivers\Null.SYS
0xBA5F8000 \SystemRoot\System32\Drivers\Beep.SYS
0xBA3A8000 \SystemRoot\System32\drivers\vga.sys
0xBA5FA000 \SystemRoot\System32\Drivers\mnmdd.SYS
0xBA5FC000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0xBA3B0000 \SystemRoot\System32\Drivers\Msfs.SYS
0xBA3B8000 \SystemRoot\System32\Drivers\Npfs.SYS
0xBA5A0000 \SystemRoot\system32\DRIVERS\rasacd.sys
0xA7EF1000 \SystemRoot\system32\DRIVERS\ipsec.sys
0xA7E98000 \SystemRoot\system32\DRIVERS\tcpip.sys
0xA7E70000 \SystemRoot\system32\DRIVERS\netbt.sys
0xA7E4A000 \SystemRoot\system32\DRIVERS\ipnat.sys
0xA7E0F000 \??\C:\WINDOWS\system32\drivers\pctgntdi.sys
0xBA158000 \SystemRoot\system32\DRIVERS\wanarp.sys
0xB91CC000 \SystemRoot\System32\drivers\ws2ifsl.sys
0xA7DC5000 \SystemRoot\System32\drivers\afd.sys
0xBA168000 \SystemRoot\system32\DRIVERS\arp1394.sys
0xBA178000 \SystemRoot\system32\DRIVERS\netbios.sys
0xA7D9A000 \SystemRoot\system32\DRIVERS\rdbss.sys
0xA7D2A000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0xBA198000 \SystemRoot\System32\Drivers\Fips.SYS
0xB91C0000 \SystemRoot\system32\DRIVERS\hidusb.sys
0xBA1B8000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
0xBA3C0000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
0xBA3D0000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS
0xA7B0A000 \SystemRoot\system32\DRIVERS\V0080Dev.sys
0xB81B3000 \SystemRoot\system32\DRIVERS\STREAM.SYS
0xA79F7000 \SystemRoot\system32\DRIVERS\V0080EVX.SYS
0xB91D0000 \SystemRoot\system32\DRIVERS\mouhid.sys
0xB7F90000 \SystemRoot\System32\Drivers\Cdfs.SYS
0xA7917000 \SystemRoot\System32\Drivers\dump_atapi.sys
0xBA5BA000 \SystemRoot\System32\Drivers\dump_WMILIB.SYS
0xBF800000 \SystemRoot\System32\win32k.sys
0xB803C000 \SystemRoot\System32\drivers\Dxapi.sys
0xBA438000 \SystemRoot\System32\watchdog.sys
0xBF000000 \SystemRoot\System32\drivers\dxg.sys
0xBA6AD000 \SystemRoot\System32\drivers\dxgthk.sys
0xBA448000 \SystemRoot\system32\DRIVERS\atinmdxx.sys
0xBF012000 \SystemRoot\System32\ati2dvag.dll
0xBF054000 \SystemRoot\System32\ati2cqag.dll
0xBF08E000 \SystemRoot\System32\atikvmag.dll
0xBF0C4000 \SystemRoot\System32\ati3duag.dll
0xBF32B000 \SystemRoot\System32\ativvaxx.dll
0xBF3FE000 \SystemRoot\System32\ATMFD.DLL
0xBA478000 \SystemRoot\system32\DRIVERS\AegisP.sys
0xA56A9000 \SystemRoot\system32\DRIVERS\irda.sys
0xB802C000 \SystemRoot\system32\DRIVERS\ndisuio.sys
0xA5424000 \SystemRoot\system32\DRIVERS\mrxdav.sys
0xBA624000 \SystemRoot\System32\Drivers\ParVdm.SYS
0xA527F000 \SystemRoot\system32\drivers\wdmaud.sys
0xA5344000 \SystemRoot\system32\drivers\sysaudio.sys
0xA5021000 \SystemRoot\system32\DRIVERS\srv.sys
0xA509D000 \??\C:\WINDOWS\system32\drivers\PfModNT.sys
0xA4DC9000 \SystemRoot\system32\DRIVERS\secdrv.sys
0xA5631000 \??\C:\WINDOWS\system32\drivers\symlcbrd.sys
0xA46A1000 \??\C:\Program Files\Spyware Doctor\PCTSDInj32.sys
0xA42E6000 \??\C:\WINDOWS\system32\drivers\pctplsg.sys
0xA41ED000 \SystemRoot\System32\Drivers\HTTP.sys
0xA43F6000 \??\C:\WINDOWS\system32\drivers\TfNetMon.sys
0xA3D75000 \SystemRoot\system32\DRIVERS\athuw.sys
0xA3CB1000 \SystemRoot\System32\Drivers\Fastfat.SYS
0xA39DE000 \SystemRoot\system32\drivers\kmixer.sys
0x7C900000 \WINDOWS\system32\ntdll.dll

Processes (total 52):
0 System Idle Process
4 System
864 C:\WINDOWS\system32\smss.exe
1508 csrss.exe
1536 C:\WINDOWS\system32\winlogon.exe
1580 C:\WINDOWS\system32\services.exe
1592 C:\WINDOWS\system32\lsass.exe
1748 C:\WINDOWS\system32\ati2evxx.exe
1764 C:\WINDOWS\system32\svchost.exe
1820 svchost.exe
1908 C:\WINDOWS\system32\svchost.exe
184 svchost.exe
348 svchost.exe
672 C:\WINDOWS\system32\spoolsv.exe
732 C:\WINDOWS\system32\acs.exe
492 svchost.exe
840 C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
956 C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
1080 C:\Program Files\Bonjour\mDNSResponder.exe
1228 C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe
1420 C:\Program Files\Carbonite\Carbonite Backup\CarboniteService.exe
2008 C:\WINDOWS\system32\ati2evxx.exe
344 C:\WINDOWS\system32\CTSVCCDA.EXE
520 C:\Program Files\Canon\IJPLM\ijplmsvc.exe
1008 C:\Program Files\Memeo\AutoBackup\MemeoBackgroundService.exe
1108 C:\WINDOWS\explorer.exe
620 C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe
1176 C:\Program Files\Spyware Doctor\pctsAuxs.exe
2152 C:\Program Files\Spyware Doctor\pctsSvc.exe
3508 C:\Program Files\Spyware Doctor\BDT\FGuard.exe
3548 C:\Program Files\Carbonite\Carbonite Backup\CarboniteUI.exe
3624 C:\Program Files\Real\realplayer\Update\realsched.exe
3648 C:\Program Files\iTunes\iTunesHelper.exe
4004 C:\Program Files\NETGEAR\WNA1100\WNA1100.exe
2140 C:\Program Files\Seagate\Seagate Dashboard\SeagateDashboardService.exe
2196 C:\Program Files\Seagate\Seagate Dashboard\MemeoDashboard.exe
2328 C:\Program Files\Spyware Doctor\pctsGui.exe
2508 C:\WINDOWS\system32\svchost.exe
2976 C:\Program Files\NETGEAR\WNA1100\WifiSvc.exe
176 wmiprvse.exe
3744 C:\Program Files\Memeo\AutoBackup\InstantBackup.exe
2120 wmiprvse.exe
2620 C:\Program Files\Seagate\Seagate Dashboard\HipServAgent\HipServAgent.exe
3896 C:\WINDOWS\system32\wuauclt.exe
3808 C:\Program Files\iPod\bin\iPodService.exe
4284 C:\Program Files\Spyware Doctor\TFEngine\TFService.exe
4552 alg.exe
6244 C:\WINDOWS\system32\vssvc.exe
280 C:\WINDOWS\system32\dllhost.exe
5728 C:\WINDOWS\system32\dllhost.exe
7804 msdtc.exe
10188 C:\Documents and Settings\Louis\Desktop\MBRCheck.exe

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (NTFS)
\\.\D: --> \\.\PhysicalDrive1 at offset 0x00000000`00007e00 (NTFS)

PhysicalDrive0 Model Number: ST3400633AS, Rev: 3.AAD
PhysicalDrive1 Model Number: ST3400633AS, Rev: 3.AAD

Size Device Name MBR Status
--------------------------------------------
372 GB \\.\PhysicalDrive0 Windows XP MBR code detected
SHA1: DA38B874B7713D1B51CBC449F4EF809B0DEC644A
372 GB \\.\PhysicalDrive1 Windows XP MBR code detected
SHA1: DA38B874B7713D1B51CBC449F4EF809B0DEC644A


Done!

[Advertisements]

Hi,

The tools we run here are safe. Sometimes an anti-virus system will think it is something bad because the tools will look at system files and settings. Could you get a log from your anti-virus? Maybe I could see if it is really bad or not.

Do you get redirects in Firefox, Internet Explorer, or both?

Save these instructions so you can have access to them while in Safe Mode.

Download TFC to your desktop

• Open the file and close any other windows.
• It will close all programs itself when run, make sure to let it run uninterrupted.
• Click the Start button to begin the process. The program should not take long to finish its job
• Once its finished it should reboot your machine, if not, do this yourself to ensure a complete clean

Next,

Please click here to download AVP Tool by Kaspersky.

• Save it to your desktop.
• Reboot your computer into SafeMode.
  

  You can do this by restarting your computer and continually tapping the F8 key until a menu appears.
  Use your up arrow key to highlight SafeMode then hit enter.

• Double click the setup file to run it.
• Click Next to continue.
• Accept the Licence agreement and click on next
• It will by default install it to your desktop folder.Click Next.
• It will then open a box There will be a tab that says Automatic scan.
• Under Automatic scan make sure these are checked.

• Hidden Startup Objects
• System Memory
• Disk Boot Sectors.
• My Computer.
• Also any other drives (Removable that you may have)

Leave the rest of the settings as they appear as default.

• Then click on Scan at the to right hand Corner.
• It will automatically Neutralize any objects found.
• If some objects are left un-neutralized then click the button that says Neutralize all
• If it says it cannot be Neutralized then choose The delete option when prompted.
• After that is done click on the reports button at the bottom and save it to file name it Kas.
• Save it somewhere convenient like your desktop and just post only the detected Virus\malware in the report it will be at the very top under Detected post those results in your next reply.
  
  

  Note: This tool will self uninstall when you close it so please save the log before closing it.

[mitch8]

Hi,

The tools we run here are safe. Sometimes an anti-virus system will think it is something bad because the tools will look at system files and settings. Could you get a log from your anti-virus? Maybe I could see if it is really bad or not.

Do you get redirects in Firefox, Internet Explorer, or both?

Save these instructions so you can have access to them while in Safe Mode.

Download TFC to your desktop

• Open the file and close any other windows.
• It will close all programs itself when run, make sure to let it run uninterrupted.
• Click the Start button to begin the process. The program should not take long to finish its job
• Once its finished it should reboot your machine, if not, do this yourself to ensure a complete clean

Next,

Please click here to download AVP Tool by Kaspersky.

• Save it to your desktop.
• Reboot your computer into SafeMode.
  

  You can do this by restarting your computer and continually tapping the F8 key until a menu appears.
  Use your up arrow key to highlight SafeMode then hit enter.

• Double click the setup file to run it.
• Click Next to continue.
• Accept the Licence agreement and click on next
• It will by default install it to your desktop folder.Click Next.
• It will then open a box There will be a tab that says Automatic scan.
• Under Automatic scan make sure these are checked.

• Hidden Startup Objects
• System Memory
• Disk Boot Sectors.
• My Computer.
• Also any other drives (Removable that you may have)

Leave the rest of the settings as they appear as default.

• Then click on Scan at the to right hand Corner.
• It will automatically Neutralize any objects found.
• If some objects are left un-neutralized then click the button that says Neutralize all
• If it says it cannot be Neutralized then choose The delete option when prompted.
• After that is done click on the reports button at the bottom and save it to file name it Kas.
• Save it somewhere convenient like your desktop and just post only the detected Virus\malware in the report it will be at the very top under Detected post those results in your next reply.
  
  

  Note: This tool will self uninstall when you close it so please save the log before closing it.

[LittleBlueHouse]

I ran TFC and it deleted a number of things.

I ran AVP as per your instructions, which took the entire day. In the end it found no threats, did not neutralize anything, and I could not find a "detected" section in the report.

I believe I have the Google redirect problem in both Firefox and MIE.

Spyware Doctor detected, in the report from 7/19, 101 instances of Trojan.Generic and 23 instances of Trojan-Downloader.Murlo.

Edited by LittleBlueHouse, 22 July 2011 - 05:22 PM.

[mitch8]

Hi,

Can you try running aswMBR in safe mode?

[LittleBlueHouse]

Sorry for the slow response. We had guests from out of town for a few days. The last day I used the computer, I had no trouble with Google redirecting. Maybe something you had me do fixed the problem.

Here is the log file from aswMBR in Safe Mode:

aswMBR version 0.9.7.777 Copyright© 2011 AVAST Software
Run date: 2011-07-30 13:31:47
-----------------------------
13:31:47.203 OS Version: Windows 5.1.2600 Service Pack 3
13:31:47.203 Number of processors: 2 586 0x2302
13:31:47.203 ComputerName: TUXEDOMASK UserName: Louis
13:31:50.468 Initialize success
13:31:56.953 AVAST engine download error: 0
13:32:05.562 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-17
13:32:05.562 Disk 0 Vendor: ST3400633AS 3.AAD Size: 381553MB BusType: 3
13:32:05.562 Disk 1 \Device\Harddisk1\DR1 -> \Device\Ide\IdeDeviceP3T0L0-22
13:32:05.578 Disk 1 Vendor: ST3400633AS 3.AAD Size: 381554MB BusType: 3
13:32:05.656 Disk 0 MBR read successfully
13:32:05.656 Disk 0 MBR scan
13:32:05.671 Disk 0 Windows XP default MBR code
13:32:05.671 Disk 0 scanning sectors +781417665
13:32:05.765 Disk 0 scanning C:\WINDOWS\system32\drivers
13:32:16.187 Service scanning
13:32:22.500 Disk 0 trace - called modules:
13:32:22.546 ntoskrnl.exe CLASSPNP.SYS disk.sys PCTCore.sys ACPI.sys hal.dll atapi.sys pciide.sys
13:32:22.562 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8a6ceab8]
13:32:22.578 3 CLASSPNP.SYS[f7657fd7] -> nt!IofCallDriver -> [0x8a6f9d58]
13:32:22.718 5 PCTCore.sys[f7461b63] -> nt!IofCallDriver -> \Device\0000007b[0x8a6f79e8]
13:32:22.843 7 ACPI.sys[f758e620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T0L0-17[0x8a75bd98]
13:32:22.984 Scan finished successfully
14:46:34.437 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Louis\Desktop\FIX COMPUTER\MBR.dat"
14:46:34.453 The log file has been saved successfully to "C:\Documents and Settings\Louis\Desktop\FIX COMPUTER\aswMBR.txt"

[mitch8]

Hi,

Well, you logs look good to me. If there is no more problem then I guess we are done.

You need to remove the malware removal tools from your computer, to do that:

Open up OTL and click on CleanUp

Please follow the steps below to keep your computer clean.

• Clean restore points - To get you off to a good start we will clean your restore points so that all the bad stuff is gone for good. Then if you need to restore at some stage you will be clean. There are several ways to reset your restore points, but this is my method:
  
  • Select Start > All Programs > Accessories > System tools > System Restore.
  • On the dialogue box that appears select Create a Restore Point
  • Click NEXT
  • Enter a name e.g. Clean
  • Click CREATE
  You now have a clean restore point, to get rid of the bad ones:
  
  • Select Start > All Programs > Accessories > System tools > Disk Cleanup.
  • In the Drop down box that appears select your main drive e.g. C
  • Click OK
  • The System will do some calculation and the display a dialogue box with TABS
  • Select the More Options Tab.
  • At the bottom will be a system restore box with a CLEANUP button click this
  • Accept the Warning and select OK again, the program will close and you are done
• Update your computer - To check for updates yourself go to http://windowsupdate.microsoft.com It is very important to check for updates often as my security problems are fixed with updates. Also make sure your computer will update automatically, to do that:
  
  • Go the control panel
  • Click on security center
  • Then "Automatic Updates"
  • Select Automatic (recommended)
  • Pick the time and click ok
• Update Java - It's very important to keep java up to date because older versions have vulnerabilities that malware can use to infect your system.
  Please download JavaRa to your desktop and unzip it to its own folder
  
  • Run JavaRa.exe, pick the language of your choice and click Select. Then click Remove Older Versions.
  • Accept any prompts.
  • Open JavaRa.exe again and select Search For Updates.
  • Select Update Using Sun Java's Website then click Search and click on the Open Webpage button. Download and install the latest Java Runtime Environment (JRE) version for your computer.
• Update Adobe Reader- It's good to keep Adobe Reader updated to because many security problems are fixed in updates. To check for updates:
  
  • Open Adobe Reader
  • On the menu bar click on help then check for updates...
  • The program will then tell you if updates are available
• Anti-spyware programs - These programs will scan your computer and delete spyware. If you do not have any anti-spyware programs on your computer I recommend:
  
  • Malware Bytes
  • SUPERAntiSpyware
• Install SpywareBlaster - SpywareBlaster will added a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs. A good tutorial on SpywareBlaster can be found at http://www.bleepingcomputer.com/tutorials/tutorial49.html
  
• Safe web browsing - You can install one of the toolbars below that will warn you about a malicious website.
  
  • WOT (web of trust)
  • McAfee SiteAdvisor
• Update your security software! You have to update you security software to make sure your computer is safe from new malware threats.
  
• And also see TonyKlein's article
  So how did I get infected in the first place?

[mitch8]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.