Please Help... I think Im infected...

[ThankYou]

Hey,

Currently besides the Malware that we installed there is no antivirus I have AVG just waiting to instal it.

Here is the log
SystemLook 30.07.11 by jpshortstuff
Log created at 00:33 on 18/11/2011 by Eli Lipskar
Administrator - Elevation successful

========== filefind ==========

Searching for "*setup_1116236.exe"
C:\Documents and Settings\Eli Lipskar\My Documents\Downloads\setup_1116236.exe --a---- 948144 bytes [22:04 11/08/2011] [22:04 11/08/2011] 564E1D9345C015770ACF34F68AA6CAF6

-= EOF =-

THANKS AGAIN

[JonTom]

Hello ThankYou

Lets try that file removal again:

1. Please disable Spybot Teatimer
   
   
   
   • Launch Spybot S&D, go to the Mode menu and make sure "Advanced Mode" is selected.
   • On the left hand side, click "Tools", then click on the "Resident" icon in the list.
   • Uncheck the "Resident "TeaTimer" (Protection of overall system settings) active" box.
   • Click the "System Startup" icon in the List.
   • Uncheck the "TeaTimer" box and "OK" any prompts.
   • If Teatimer gives you a warning that changes were made, click the "Allow Change" box when prompted.
   • Exit Spybot S&D when done.
   
   
   
2. Please download OTM
   
   
   
   • Please download OTM by OldTimer by clicking here.
   • Save the file (called OTM.exe) to your desktop.
   • Double click on the OTM.exe icon to run the program. (Note: If you are running on Vista/Windows 7, right-click on the file and choose Run As Administrator).
   • Copy the lines in the codebox below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):
   
   
   
   

   :Processes 
   explorer.exe
   
   :Files
   C:\Documents and Settings\Eli Lipskar\My Documents\Downloads\setup_1116236.exe
   
   
   :Commands
   [Purity]
   [EmptyTemp]
   [Emptyflash]
   [Start Explorer]
   [Reboot]

   
   
   
   
   • Return to OTM, right click in the "Paste Instructions for Items to be Moved" window (under the yellow bar) and choose Paste.
     
   • Click the Moveit! button.
   • Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
   • Close OTM.
   • Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes. In this case, after the reboot, open Notepad (Start->All Programs->Accessories->Notepad), click File -> Open, in the File Name box enter *.log and press the Enter key, navigate to the C:\_OTMoveIt\MovedFiles folder, and open the newest .log file present, and copy/paste the contents of that document back here in your next post.
   
   
   Please post the OTM log in your next reply along with a new DDS scan log.

[ThankYou]

I tried running the OTM.exe and my computer keep crashing.

Please Advise

[JonTom]

Hello ThankYou

Thats a little odd but no major problem. We can remove the file manually:

1. Please search for the following files
   
   
   
   • NOTE: DO NOT double click on ANY executable (.exe) files in the next step!!!
   • Right-click your "Start" button and select "Explore".
   • Navigate to and delete the following files/folders in bold.
   
   
   
   
   • C:\Documents and Settings\Eli Lipskar\My Documents\Downloads\setup_1116236.exe <=== Delete this file.
   
   
   Once deleted, run DDS and post the new scan log in your next reply.

[ThankYou]

Hello,

I manually Deleted the file here is the fresh DDS.

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_29
Run by Eli Lipskar at 19:44:08 on 2011-11-19
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2038.1357 [GMT -5:00]
.
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Flip Video\FlipShare\FlipShareService.exe
C:\Program Files\Flip Video\FlipShareServer\FlipShareServer.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\System32\StkASv2K.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\DellTPad\Apoint.exe
C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\DYMO\DYMO Label Software\DLSService.exe
C:\Program Files\DYMO File\DYMOFileMonitor.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\DYMO\DYMO Label Software\DymoQuickPrint.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DellTPad\ApMsgFwd.exe
C:\Program Files\DellTPad\HidFind.exe
C:\Program Files\DellTPad\Apntex.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
.
============== Pseudo HJT Report ===============
.
BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 6.0\acrobat\activex\AcroIEHelper.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: AcroIEToolbarHelper Class: {ae7cd045-e861-484f-8273-0445ee161910} - c:\program files\adobe\acrobat 6.0\acrobat\AcroIEFavClient.dll
BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program files\adobe\acrobat 6.0\acrobat\AcroIEFavClient.dll
uRun: [DymoQuickPrint] "c:\program files\dymo\dymo label software\DymoQuickPrint.exe" /startup
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [Broadcom Wireless Manager UI] c:\windows\system32\WLTRAY.exe
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [Dell QuickSet] c:\program files\dell\quickset\quickset.exe
mRun: [Apoint] c:\program files\delltpad\Apoint.exe
mRun: [SigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\stsystra.exe
mRun: [Google Desktop Search] "c:\program files\google\google desktop search\GoogleDesktop.exe" /startup
mRun: [Seagull Drivers] ssdal_nc.exe startup
mRun: [DLSService] "c:\program files\dymo\dymo label software\DLSService.exe"
mRun: [DYMOFileMonitor] "c:\program files\dymo file\DYMOFileMonitor.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
dRunOnce: [FlashPlayerUpdate] c:\windows\system32\macromed\flash\FlashUtil10l_ActiveX.exe -update activex
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
DPF: {38AB0814-B09B-4378-9940-14A19638C3C2} - hxxp://www.auctiva.com/Aurigma/ImageUploader57.cab
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1290402081855
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1290571067531
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {9B479D7B-916A-45B0-B042-D42865A60E21} - hxxp://192.168.15.189/DvrOcx.cab
DPF: {BEA7310D-06C4-4339-A784-DC3804819809} - hxxp://images3.pnimedia.com/ProductAssets/costcous/activex/v3_0_0_7/PhotoCenter_ActiveX_Control.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} - hxxps://secure.logmein.com/activex/ractrl.cab?lmi=100
TCP: DhcpNameServer = 192.168.1.254
TCP: Interfaces\{7DB56F0C-5D60-4448-A266-D7483257E48A} : DhcpNameServer = 192.168.1.254
Handler: intu-help-qb1 - {9B0F96C7-2E4B-433e-ABF3-043BA1B54AE3} - c:\program files\intuit\quickbooks 2008\HelpAsyncPluggableProtocol.dll
Handler: qbwc - {FC598A64-626C-4447-85B8-53150405FD57} - c:\windows\system32\mscoree.dll
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Notify: igfxcui - igfxdev.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\eli lipskar\application data\mozilla\firefox\profiles\mb7xufoi.default\
FF - component: c:\program files\mozilla firefox\extensions\{82af8dca-6de9-405d-bd5e-43525bdad38a}\components\SkypeFfComponent.dll
FF - plugin: c:\documents and settings\eli lipskar\application data\mozilla\firefox\profiles\mb7xufoi.default\extensions\{9eb34849-81d3-4841-939d-666d522b889a}\plugins\npSlingPlayer.dll
FF - plugin: c:\documents and settings\eli lipskar\application data\mozilla\plugins\npgoogletalk.dll
FF - plugin: c:\documents and settings\eli lipskar\application data\mozilla\plugins\npgoogletalk.dll
FF - plugin: c:\documents and settings\eli lipskar\application data\mozilla\plugins\npgtpo3dautoplugin.dll
FF - plugin: c:\documents and settings\eli lipskar\local settings\application data\google\update\1.3.21.79\npGoogleUpdate3.dll
FF - plugin: c:\program files\common files\research in motion\bbwebsllauncher\NPWebSLLauncher.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\mozilla firefox\plugins\NPEltr32.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Click to call with Skype: {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} - c:\program files\mozilla firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\java\jre6\lib\deploy\jqs\ff
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: AddThis: {3e0e7d2a-070f-4a47-b019-91fe5385ba79} - %profile%\extensions\{3e0e7d2a-070f-4a47-b019-91fe5385ba79}
FF - Ext: Download Youtube Videos +: video.downloader.plugin@ffpimp.com - %profile%\extensions\video.downloader.plugin@ffpimp.com
FF - Ext: Greasemonkey: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} - %profile%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
FF - Ext: WebSlingPlayer: {9EB34849-81D3-4841-939D-666D522B889A} - %profile%\extensions\{9EB34849-81D3-4841-939D-666D522B889A}
.
============= SERVICES / DRIVERS ===============
.
R2 FlipShareServer;FlipShare Server;c:\program files\flip video\flipshareserver\FlipShareServer.exe [2010-12-15 1085440]
R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2011-11-15 366152]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-11-15 22216]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;c:\program files\google\google desktop search\GoogleDesktop.exe [2010-12-1 30192]
S3 iRippit;iRippit USB Driver for Tube device v2.0.3;c:\windows\system32\drivers\iRippit.sys [2011-8-3 40312]
S3 MBAMSwissArmy;MBAMSwissArmy;\??\c:\windows\system32\drivers\mbamswissarmy.sys --> c:\windows\system32\drivers\mbamswissarmy.sys [?]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
.
=============== Created Last 30 ================
.
2011-11-18 15:04:03 -------- d-----w- C:\_OTM
2011-11-16 15:43:11 -------- d-----w- c:\program files\ESET
2011-11-16 02:07:52 -------- d-----w- c:\documents and settings\eli lipskar\application data\Malwarebytes
2011-11-16 02:07:39 -------- d-----w- c:\documents and settings\all users\application data\Malwarebytes
2011-11-16 02:07:34 22216 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-11-16 02:07:34 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-11-11 19:55:23 -------- d-sha-r- C:\cmdcons
2011-11-11 19:52:36 98816 ----a-w- c:\windows\sed.exe
2011-11-11 19:52:36 518144 ----a-w- c:\windows\SWREG.exe
2011-11-11 19:52:36 256000 ----a-w- c:\windows\PEV.exe
2011-11-11 19:52:36 208896 ----a-w- c:\windows\MBR.exe
2011-11-06 12:17:48 -------- d-----w- c:\documents and settings\all users\application data\MFAData
.
==================== Find3M ====================
.
2011-10-10 14:22:41 692736 ----a-w- c:\windows\system32\inetcomm.dll
2011-10-03 10:06:03 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-10-03 07:37:52 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-09-28 07:06:50 599040 ----a-w- c:\windows\system32\crypt32.dll
2011-09-26 15:41:20 611328 ----a-w- c:\windows\system32\uiautomationcore.dll
2011-09-26 15:41:20 220160 ----a-w- c:\windows\system32\oleacc.dll
2011-09-26 15:41:14 20480 ----a-w- c:\windows\system32\oleaccrc.dll
2011-09-06 13:20:51 1858944 ----a-w- c:\windows\system32\win32k.sys
2011-08-23 16:40:52 1062984 ----a-w- c:\documents and settings\eli lipskar\gotomypc_540.exe
2011-08-22 23:48:55 916480 ----a-w- c:\windows\system32\wininet.dll
2011-08-22 23:48:54 43520 ------w- c:\windows\system32\licmgr10.dll
2011-08-22 23:48:54 1469440 ------w- c:\windows\system32\inetcpl.cpl
2011-08-22 11:56:39 385024 ----a-w- c:\windows\system32\html.iec
.
============= FINISH: 19:48:02.76 ===============

[JonTom]

Hello ThankYou

Your log appears to be clean

Now is the time to install AVG.

Once it is installed, please try the following to re-acquire your missing start menu items:

• To manually recreate "All Programs" entries, follow these steps...
• Download App Paths
• Double click on AppPaths.exe to run the program.
• Keep the program open.
• In this example I'll recreate an entry for Avast antivirus program.

• Go Start > All Programs.
• Right click on Avast entry, click "Properties".

• NOTE: Make sure you right click on Avast program, NOT on Avast folder.
• You'll see this window:

• Due to the damage caused by the infection, you'll find "Target" box empty.
• Go back to AppPaths window and find Avast entry.
• Right click on Avast line, click "Edit".
• A pop-up window will open:

• Highlight everything in "Path" box, right click on it, click "Copy".
• Go back to Avast "Properties" window, right click inside "Target" box, click "Paste".
• IMPORTANT! Add quotation marks at the beginning of the path and at the end.
• Click OK and you're done.

• In case the program's link shows as (empty):

• Open Windows Explorer, navigate to Avast folder in Program Files.
• Right click on Avast ".exe" file, click "Create shortcut":

• Copy that shortcut, go back to Start menu.
• Right click on avast! Free Antivirus, click "Paste".
• You'll see Avast shortcut recreated replacing (empty) entry.

• Alternatively, you can paste the shortcut in:
  
• (XP) - C:\Documents and Settings\All Users\Start Menu\Programs\Avast
• (Vista/7) - C:\Program Data\Start Menu\Programs\Avast

Let me know how you get on in your next reply.

[ThankYou]

Hello And Thank You

I installed AVG - and am now in the process of adding back all the programs. Thanks for ur help.

Is there anything else you recommend for my system?

[JonTom]

Hello ThankYou

Is there anything else you recommend for my system?

Provided you are no longer having any problems we can remove our tools in the steps below:

1. Please Uninstall Combofix
   
   
   
   • Click on "Start" and then on "Run".
   • Now type combofix /uninstall in the run box and click "OK". Please note the space between the "x" and the "/Uninstall", it needs to be there.
   
   
   
2. Please perform the following cleanup procedure
   
   
   
   • Double click on the OTM.exe icon on your desktop to run the program.
   • Once OTM has opened, click on the "CleanUp!" button.
   • Follow any prompts that you receive.
   
   
   
3. Removal of Tools
   
   
   
   • You no longer need SystemLook, Unhide, Security Check, aswMBR or TDSSKiller. Please delete them from your machine.
   
   
   
4. Please re-enable Spybot Teatimer
   
   
   
   • Launch Spybot S&D, go to the Mode menu and make sure "Advanced Mode" is selected.
   • On the left hand side, click "Tools", then click on the "Resident" icon in the list.
   • Check the "Resident "TeaTimer" (Protection of overall system settings) active" box.
   • Click the "System Startup" icon in the List.
   • Check the "TeaTimer" box and "OK" any prompts.
   • If Teatimer gives you a warning that changes were made, click the "Allow Change" box when prompted.
   • Exit Spybot S&D when done.
   
   
   
   Once you have completed the above steps you should be good to go! If you have any further questions, please feel free to ask.
   
   
5. Finally, please take the time to read through the information provided below:
   
   Enhance your System Security
   
   
   • For an excellent list of free anti virus software, free online virus scanners, free spyware detection/removal and free firewalls, click here.
   
   
   
   • IMPORTANT! Please make sure you only have ONE firewall and ONE real-time antivirus installed on your system. When using "on demand" scanners, first update the detection signature files, then disconnect from the internet and disable your resident security program before running the scan.
   • Once complete, remember to re-engage your resident security before going online.
   
   
   Web Browsers and Browser Security
   
   Firefox
   
   • You can download Firefox from here.
   
   
   No-Script
   
   • If you use Firefox as your default browser, No-Script can provide additional security by preventing malicious scripts from being executed on your system.
   • You can download No-Script by clicking here.
   
   
   Internet Explorer
   
   • The newest version of Internet Explorer is available from here.
   • Please Note: IE9 is not configured to run on XP machines.
   
   
   SpywareBlaster
   
   • If you use Internet Explorer as your default browser, SpywareBlaster would be a valuable addition to your online security.
   • SpywareBlaster prevents malicious ActiveX objects from being downloaded onto your system.
   • You can download SpywareBlaster by clicking here.
   
   
   Web of Trust
   
   • When using search engines, Web of Trust provides you with an easy way of telling the good sites from the bad and is compatible with both Firefox and Internet Explorer.
   • Coloured symbols are displayed next to search results, giving you more confidence in the links you choose to click on: Green (To go), Yellow (Caution) and Red (Stop).
   • You can download Web of Trust by clicking here.
   
   
   Keep your Software Updated
   
   • Outdated software can sometimes have vulnerabilities that are exploitable by malware.
   • Check if there are available updates for your installed software with Secunia's Online Software Inspector by clicking here.
   
   
   Passwords
   
   • Learn how to create strong passwords by clicking here and test the strength of the passwords you already use by clicking here.
   
   
   General Reading
   
   • PC Safety and Security - What do I need?
     
   • How to prevent Malware (by Miekiemoes)
   
   
   Learn How To Combat Malware
   
   • Would you like to learn how to fight back against malware and help others? Enroll at the What The Tech (Formerly Tom Coyotes) Malware Classroom by clicking here.

[JonTom]

Since this problem appears to be resolved this topic is now closed.

Glad we could help

Best wishes
JonTom