February 14th

Happy valentine day

February 10th

for st valentine day

Crystal Clark arrives in Colorado's Yampa Valley amid the splendor of a high country June in 1892. After the death of her father, Crystal is relieved to be leaving the troubles of her Georgia life behind to visit her aunt Kate's cattle ranch. Despite being raised as a proper Southern belle, Crystal is determined to hold her own in this wild land–even if a certain handsome foreman doubts her abilities.

Just when she thinks she's getting a handle on the constant male attention from the cowhands and the catty barbs from some of the local young women, tragedy strikes the ranch. Crystal will have to tap all of her resolve to save the ranch from a greedy neighboring landowner. Can she rise to the challenge? Or will she head back to Georgia defeated?

Book one in the Heart of the West series, No Place for a Lady is full of adventure, romance, and the indomitable human spirit. Readers will fall in love with the Colorado setting and the spunky Southern belle who wants to claim it as her own.

Winter olympics

Filed under Uncategorized | No Comments

Wow… the nose ridges really stand out. They don’t start flush with the nose; they suddenly emerge and stick out all the way. It also seems to me that they curve downwards as they continue towards the sidepods, but that could just be a trick of the light.

From the looks of it, the RB6 is a sensible yet radical evolution of the RB5’s design. I reckon this car’s going to be competitive right off the mark…

Red Bull Racing was the last of the title-contending teams to release its new car for the 2010 season.

The RB6 was unveiled this morning at Jerez in Spain, as the Red Bull team – spearheaded by drivers Sebastian Vettel and Mark Webber – look to build on the success of 2009.

With the team finishing second in the Constructor’s Championship, the management at Red Bull felt there was no need to overhaul a successful car – so the RB6 is an evolution of the RB5.

The V-nose solution, which was part of last year’s car, is more prominent on the RB6, plus the car also features the double-decker diffusers made popular last year.

The RB6 will have its first time on the track today, when it joins Mercedes, McLaren, Ferrari, Sauber, Williams, Renault, Toro Rosso and Virgin at the season’s second testing session, at Jerez in Spain. Also getting its first spell of track time will be the new Force India car launched yesterday.

Still missing in action are the cars from Lotus, Campos Meta and US F1 – all these teams will be happy with today’s announcement from FIA head Jean Todt, who confirmed that teams would be able to miss the first three races of the season without punishment.

For more information on the new teams and new drivers for 2010, don’t forget to purchase the March issue of Sports Illustrated – on sale on Monday 15 February.

Red Bull unveil the evolutionary RB6

February 10, 2010 by wgp

Red Bull Racing have taken the covers off their 2010 challenger, the RB6, revealing that the car is a more an evolution than a revolution.

February 9th

sarath fonseka

Filed under Uncategorized | No Comments

Close to 100 million people watched Super Bowl XLIV and the ad
breaks which command almost $US4.5 million for a 30 second
slot.

Doritos, Google and Volkswagen were just some of the companies
to pay the big ticket price in a fierce competition to make the
biggest and best ad.

But the most talked about commercial of the day was one that
never screened. An ad for ManCrunch.com, a gay dating service, was
rejected. CBS declared it “not within the network's broadcast
standards for Super Bowl Sunday.”

Here's our list of the top ten Super Bowl XLIV ads:

Intel

Jeffrey the Robot is left feeling a little unloved as staff at
the Intel canteen discuss their latest creation.

Audi

A Cheap Trick soundtrack and the Green Police getting busy with
Americans hell bent on killing the planet… apart formthe ones who
drive Audis of course.

CareerBuilder.com

Love Casual Fridays? You might not if you worked here.

Monster.com

Monster.com helps a busy fiddling beaver realise his dreams.

Etrade

The Etrade baby talks to his girlfriend about the importance of
building a diversified portfolio, but she wonders what else he's
been up to.

Doritos

A casket filled with Doritos and a TV set to watch the Super
Bowl. What else could a dead dude need?

truTV

Meet Punxsutawney Polamalu who has a prediction for you.

Google

An American finds love in Paris

Emerald Nuts and Pop Secret

Awesome + Awesome = Awesomer

Volkswagen

A punchy VW ad with Stevie Wonder. We definitely do not endorse
this new game.

And the one they banned

Mancrunch.com

Two friends can no longer hide their true feelings for each
other

Best New Blog of the Day @ The Other McCain-Smitty writes -“Stacy pointed me to the Left Coast Rebel, who's got a spot-on collection of right-of-center material.”"Those looking for that Margaret Thatcher fix are directed to a post of simple genius. Subscribe. Together, we can make the Google Reader explode. Reader Kevin Cox, Department of Aviation McCarran Airport Las Vegas - “You're a great writer! I'm glad that I found your blog, it's on my “Read First Thing” list.Eric Dondero at Libertarian Republican -Tim's stridently entrepeneurial, pro-capitalist blog, the Left Coast Rebel, is vastly becoming one of the most popular libertrarian blogs on the web.Nancy Armstrong, blogger at MsplacedDemocrat, featured on Glenn Beck and Bill O'Reilly, a real hero and activist against ACORN – I am working with the ACORN 8, they are real patriots. I forwarded your email to Marcel Reid, it always boosts their self-esteem when they good hear good things about what they are doing….thank you from them. Hubby and I were active duty Navy when the kids were young…..the life just makes you teach your kids differently. I like your stuff! Rest in peace Nancy, you will be missed.Right Girl at Girlontheright.com -I really like the Turncoat 8 article, the content is super-solid, keep it up!Andrew 33 from Kook'smanifesto.com -You have a really big blog, with a lot of readership. I really think highly of you and your blog and being asked to fill in for you gives a deep sense of satisfaction that we are respected by our peers enough to be given the “keys to the Ferrari.”KOOK from Kook'smanifesto.com -The goal here is to spread the word. We all know the truth of things, we all are in 90% agreement with what is wrong and what needs done. Small issues are small issues. The big picture is what is important. LIFE, LIBERTY, PROPERTY.

Bungalow Bill at BBCW.com -

You continue to amaze, great stuff!

RighKlik from RightKlik.com -

Keep the truth coming. This is going to be a tough fight, but we can turn things around.

Becky at JustaGirlinShorts.com -I see why you like it–we are twins:)I added you to the blogroll and am following on blogger

Landshark at Landshark5150 -

I Wish I had your political insight at your age. My hats off to you, Sir. You are toting the load now. Your voice is more important. You still are able to reach youth and elders with it. Your mind is strong and your passion high. The people of this great country want to live free, free of yokes of restraint of government. But that freedom comes with responsibiilies and sadly so few accept that for themselves or their future. They simply don't/won't take the stand or carry the burden of freedom.It doesn't matter who said this, or who wrote that, it is our responibilty to repeat and live those ideas. For it is not ours to keep, but ours to protect and give to the future.

RRR @ Reaganite Republican Resistance -I have been on your blog, my friend… good work! I think you know Stacy McCain, too-I have seen you on TOMc….and great work digging that, (Barney Frank mystery man expose), up bro- makes me feel like I'm sleeping. Keep up the Good Fight- our sides' winning now-

The DAILY newsletter for genealogy
consumers, packed with straight talk – hold the sugar coating – whether
the vendors like it or not! This is the most popular online genealogy magazine in the world, as measured by Alexa.

I recommend the Firefox and Chrome web browsers for this site. Having problems reading this site in Internet Explorer 8? That's because IE8 has a compatibility problem. To fix it, click on IE8's Compatibility Mode icon or else read the article at http://www.eogn.com/ie8_bug.html.

February 8th

I like norton 2010

Filed under Uncategorized | No Comments

Note: In any Ultra Antivirus 2009 files I mention above, “%UserProfile%” is a variable referring to your current user’s profile folder. If you’re using Windows NT/2000/XP, by default this is “C:\Documents and Settings\[CURRENT USER]” (e.g., “C:\Documents and Settings\JoeSmith”). If you have any questions about manual Ultra Antivirus 2009 removal, go ahead and leave a comment.

How Do You Remove Ultra Antivirus 2009 Files?

Need help figuring out how to delete Ultra Antivirus 2009 files? While there’s some risk involved, and you should only manually remove Ultra Antivirus 2009 files if you’re comfortable editing your system, you’ll find it’s fairly easy to delete Ultra Antivirus 2009 files in Windows.

How to delete Ultra Antivirus 2009 files in Windows XP and Vista:

Click your Windows Start menu, and then click “Search.”
A speech bubble will pop up asking you, “What do you want to search for?” Click “All files and folders.”
Type a Ultra Antivirus 2009 file in the search box, and select “Local Hard Drives.”
Click “Search.” Once the file is found, delete it.

How to stop Ultra Antivirus 2009 processes:

Click the Start menu, select Run.
Type taskmgr.exe into the the Run command box, and click “OK.” You can also launch the Task Manager by pressing keys CTRL + Shift + ESC.
Click Processes tab, and find Ultra Antivirus 2009 processes.
Once you’ve found the Ultra Antivirus 2009 processes, right-click them and select “End Process” to kill Ultra Antivirus 2009.

How to remove Ultra Antivirus 2009 registry keys:

Because your registry is such a key piece of your Windows system, you should always backup your registry before you edit it. Editing your registry can be intimidating if you’re not a computer expert, and when you change or a delete a critical registry key or value, there’s a chance you may need to reinstall your entire system. Make sure your backup your registry before editing it.

Select your Windows menu “Start,” and click “Run.” An “Open” field will appear. Type “regedit” and click “OK” to open up your Registry Editor.
Registry Editor will open as a window with two panes. The left side Registry Editor’s window lets you select various registry keys, and the right side displays the registry values of the registry key you select.
To find a registry key, such as any Ultra Antivirus 2009 registry keys, select “Edit,” then select “Find,” and in the search bar type any of Ultra Antivirus 2009’s registry keys.
As soon as Ultra Antivirus 2009 registry key appears, you can delete the Ultra Antivirus 2009 registry key by right-clicking it and selecting “Modify,” then clicking “Delete.”

How to delete Ultra Antivirus 2009 DLL files:

First locate Ultra Antivirus 2009 DLL files you want to delete. Open your Windows Start menu, then click “Run.” Type “cmd” in Run, and click “OK.”
To change your current directory, type “cd” in the command box, press your “Space” key, and enter the full directory where the Ultra Antivirus 2009 DLL file is located. If you’re not sure if the Ultra Antivirus 2009 DLL file is located in a particular directory, enter “dir” in the command box to display a directory’s contents. To go one directory back, enter “cd ..” in the command box and press “Enter.”
When you’ve located the Ultra Antivirus 2009 DLL file you want to remove, type “regsvr32 /u SampleDLLName.dll” (e.g., “regsvr32 /u jl27script.dll”) and press your “Enter” key.

That’s it. If you want to restore any Ultra Antivirus 2009 DLL file you removed, type “regsvr32 DLLJustDeleted.dll” (e.g., “regsvr32 jl27script.dll”) into your command box, and press your “Enter” key.

Did Ultra Antivirus 2009 change your homepage?

Click Windows Start menu > Control Panel > Internet Options.
Under Home Page, select the General > Use Default.
Type in the URL you want as your home page (e.g., “http://www.homepage.com”).
Select Apply > OK.
You’ll want to open a fresh web page and make sure that your new default home page pops up.

Ultra Antivirus 2009 Removal Tip

Is your computer acting funny after deleting any Ultra Antivirus 2009 files? I recommend using a program like File Recover from PC Tools. File Recover saves deleted files that otherwise can’t be recovered by Windows operating sytem.

Want to save time finding Ultra Antivirus 2009 files? Download Spyware Doctor, let it find the Ultra Antivirus 2009 files for you, and then manually delete Ultra Antivirus 2009 files.

How Did You Get Ultra Antivirus 2009?

Wondering how Ultra Antivirus 2009 ended up on your PC? If you’re infected with Ultra Antivirus 2009 or other badware, perhaps you were using…

Freeware or shareware: Did you download and install shareware or freeware? These low-cost or free software applications may come bundled with spyware, adware, or programs like Ultra Antivirus 2009. Sometimes adware is attached to the free software to “pay” developers for the cost of creating the software, and more often spyware is secretly attached to free software to harm your computer and steal your personal and financial information.
Peer-to-peer software: Do you use a peer-to-peer (P2P) program or other application with a shared network? When you use these applications, you put your system at risk for unknowingly downloading an infected file, including applications like Ultra Antivirus 2009.
Questionable websites: Did you visit a website that’s of questionable nature? When you visit malicious sites that are fishy and phishy, badware may be automatically downloaded and installed onto your computer, sometimes including applications like Ultra Antivirus 2009. I recommend you use Firefox web browser, if you don’t already.

Understanding Ultra Antivirus 2009

If you’re infected with Ultra Antivirus 2009, you should know what you’re fighting. I’ll explain some definitions related to Ultra Antivirus 2009.

Ultra Antivirus 2009 May Be Rogue Anti-Spyware

Rogue anti-spyware refers to anti-spyware/antivirus software of questionable value. Rogue anti-spyware may not be proven to protect your computer from spyware, may popup fake alerts or create many false positives about your PC being infected, or may use scare tactics to try to get you to purchase the application. Rogue anti-spyware software may be installed by a Trojan, come bundled with other software, or install itself through web browser security holes. While it is fairly rare, some rogue anti-spyware is created and distributed by known spyware or adware companies, and the rogue anti-spyware may install spyware or adware itself.

Often when you’re infected with rogue anti-spyware like Ultra Antivirus 2009, you’ll see a false popup security alert like this:

Rogue Anti-Spyware Tactics

Typically, rogue anti-spyware such as Ultra Antivirus 2009 has one or more of the qualities listed below, which is why rogue anti-spyware is considered anti-spyware software of questionable value.

False positives/fake alerts: Rogue anti-spyware may produce a large number of false positives or use fake alerts, noting that your computer is infected with spyware parasites or other threats that do not really exist.
Copycat looks: Rogue anti-spyware may copy the look and feel of other legitimate or rogue anti-spyware applications. Often, rogue anti-spyware applications may appear as close clones of other rogue anti-spyware software.
High pressure marketing: Rogue anti-spyware may use scare tactics or other aggressive advertising and marketing tactics to try to trick you into buying the rogue anti-spyware application. Often, rogue anti-spyware may produce false positives and fake alerts about your computer being infected.
Poor detection/scan reporting: Rogue anti-spyware may produce poor reports when it scans your PC. For example, rogue anti-spyware may say your computer is infected 11 parasites, but not specify which spyware parasites or what type of parasites. Rogue anti-spyware may also report that your PC is infected with SafeAndClean, but not tell you which related files, DLLS, etc. were found on your computer.
Weak scanning/detection: Rogue anti-spyware may not only poorly report on computer infection, but rogue antispyware may also poorly scan your PC. Rogue anti-spyware may skip over important folders and files of your computer that should be scanned to detect spyware.

Did Ultra Antivirus 2009 use these tactics to trick you into buying Ultra Antivirus 2009?

Ultra Antivirus 2009 May Be a Trojan

Trojans install themselves secretly onto your computer, most often through your downloading a simple email attachment (often Trojans pose as harmless pictures). Most Trojans are able to gain complete control over your PC after installation. With this control, the Trojan and the hacker behind it may change your system settings, delete important files, steal your passwords, and watch your computer acitivity.

Infection Methods of Ultra Antivirus 2009 and Other Trojans

Most Trojans infect your computer by tricking you into launching an infected file. This poisoned file could disguised as a small file, such as a jpeg or other email attachment, or it might be downloaded via a website or FTP.

Email: Your PC may be infected with a Trojan when you download infected email attachments, or sometimes even when you simply open an email. Many Trojans exploit security holes in Microsoft Outlook. You may be able to reduce your chances of getting infected by a Trojan by using a spam-blocking software.
Websites: Your PC may be infected with a Trojan when you visit a rogue site. Many Trojans exploit security holes in Internet Explorer web browser so that by simply visiting a website you may unknowingly download a Trojan.
Open ports: If your computer runs programs that provide file-sharing functions – such as AOL Instant Messenger (AIM), MSN Messenger, and more – you may open your computer up to vulnerabilities. Using file sharing through these applications may create a network that gives attackers the opportunity to remotely access your computer.

Outpost Security Suite – a robust combination of award-winning firewall, fast and effective anti-malware, personalized antispam and proactive Host Protection module to defend against the majority of Internet risks. Includes automated configuration service and other user aids.
Outpost Security Suite Pro provides the first line of defense against rogue software by proactively controlling how programs behave and interact on a PC. The Host Protection safeguard, which proactively monitors for and blocks the kinds of sophisticated hacking techniques used to compromise or steal data, means that malicious activity is no longer possible. By analyzing threats and displaying actionable alerts, Host Protection stops zero-day attacks and shields the computer against inappropriate operations, rendering it “defended in advance” against security risks like botnets and inadvertent data disclosure.

What you get:
Advanced firewall for secure connections
Combined antivirus and antispyware for all-in-one malware defense
Host protection to block zero-day threats
Web control to protect your PC from web-borne threats
Antispam to automatically keep your inbox junk-free

Benefits:
Safety on the Internet. The two-way firewall stops inappropriate or malicious access to your computer from both internal (LAN) and external (Internet) sources. As a frontline defense, it prevents malware from spreading or “phoning home”, providing protection against hackers, loss of personal data, unknown malware, and unauthorized program activity.
Preemptive threat protection. Outpost’s Host Protection module monitors how programs interact to protect your system against high-level security breaches and has passed all well-known leaktests to prevent unauthorized transmission of information from your PC.
360-degree protection against malware. The lightweight, highly-effective scanning engine combines award-winning anti-virus and anti-spyware to detect, disinfect or remove malicious programs automatically. The on-access monitor is constantly on guard against malware attempting to enter or activate on your PC, and flexible architecture ensures high-speed, low-resource scanning.
Personalized antispam. The antispam module will keep your inbox free of junk. You can train it to recognize and use your personal definition of spam, so it becomes more efficient and an even greater time saver the longer you use it.
Secure web surfing. The versatile Web Control module safeguards you against the Internet’s darker side. It steers you away from websites infected with drive-by downloads, prevents the inadvertent disclosure of personal information, limits your exposure to potentially unsafe web properties, and keeps your identity private.
Bulletproof self-defense. Outpost cannot be deactivated by targeted attacks, ensuring continuity of protection.
Power without complexity. Whether you’re a security novice or expert, you can easily configure Outpost Security Suite 2008 to meet your needs. Thanks to automated and context-sensitive help, the software can learn how to handle firewall alerts and more efficiently adjust to them, so you can focus on what you want to do, and leave the security to Outpost!

What’s new in Outpost Security Suite PRO 2009 (PDF)

Changes in Outpost Security Suite Pro 2009 (6.7.2 3001.452.0718) 15 January 2010:
The following issues are resolved (only significant ones are listed):
Autolearn mode is disabled by default if Advanced security level is selected during installation
Real-time protection was disabled for some time after antivirus databases update
Slowdown during installation of redistributable components
Entertainment mode prompt was not disabled on starting full-screen applications
SMTP attachments could not be sent using Thunderbird mail client
Installation issues (ACS server could not be found)
Rules for trusted and blocked applications could be lost after suspending protection
Properties of some applications could not be opened from the Edit Rules dialog
Log folder could not be opened using the command in the Settings window
Issues on displaying web pages on servers using gzip encoding

Download Outpost Security Suite Pro 2009 Build 6.7.2:
http://hotfile.com/dl/24342998/aa2ceed/Outpost.Security.Suite.Pro.2009.Build.6.7.2.3001.452.0718.with.Serial.rar.html

ESET NOD32 Antivirus v4.0.424 Home Edition-32×64 bit.

ESET NOD32 Antivirus v4.0.424; Home Edition- 32×64 bit | 33.16 +37.15Mb
ESET NOD32 Antivirus System – Integrated, Real-Time Protection against viruses, worms, trojans, spyware, adware, phishing, and hackers. Best detection, fastest performance & smallest footprint. NOD32 Antivirus System provides well balanced, state-of-the-art protection against threats endangering your PC and enterprise systems running various platforms from Microsoft Windows, through a number of UNIX/Linux, Novell, MS DOS operating systems to Microsoft Exchange Server, Lotus Domino and other mail servers.
ESET solutions are built on ESET’s one-of-a-kind ThreatSense technology. This advanced heuristics engine enables proactive detection of malware not covered by even the most frequently updated signature-based products by decoding and analyzing executable code in real time, using an emulated environment. By allowing malware to execute in a secure virtual world, ESET is able to clearly differentiate between benign files and even the most sophisticated and cleverly-disguised malware.
Users of Microsoft® Windows® can experience the power and elegance of NOD32’s ThreatSense Technology with ease and comfort. Our single optimized engine offers the best protection from viruses, spyware, adware, phishing attacks, and more. Keep tomorrow’s threats at bay with our proactive detection technology.
April 20, 2009 – 4.0.424

Fixed: Outlook Express – random email corruption with large attachment when scanning during reading

Fixed: Issue with functionality of Mozilla Thunderbird after reinstallation/upgrade from V3 to V4 or after adding extension.

DOWNLOAD ESET NOD32 Antivirus v4.0.424 Home Edition-32×64 bit :

cannot install new antivirus…?

i've been using avg free edition for quite a while and now i've bought kapersky. i've…

while instaling kaspersky antivirus an error shows up incompatible softwere which i never used AVG8?

i never used AVG 8 but still i cant instal kaspersky 2009 free edition, it says…

Problems with internet connectivity after installing Kaspersky Antivirus software?

Last week I purchased and installed the new version 7.0 of Kaspersky Internet Security. I…

Internet connectivity issue after antivirus installation?

Have Vista. Installed Symantec Antivirus after Norton 360 expired. Internet issues…

i am using Kaspersky Internet Security 7.0. in my windows vista home premium -SP1 laptop.?

My problem is since i installed Kaspersky Internet Security 7.0; i am not able to browse…

Which other antivirus can I use together with Kaspersky 2009 given my situation below on a wifi network?

I use public wifi to connect to the internet. Soemtimes it so happens that my laptops…

What is causing my godson’s network connectivity problems in Windows Vista?

I got my godson a Lenovo T61 with Vista Home Premium for college and he's now having…

I’m not able to update my Kaspersky anti virus ..?

rite now m using Kaspersky 2009 and have some 110 days left on my license. The antivirus…

lost internet connectivity after unintsalling Norton's?

recently i purchased a hp dv9825nr and used the trial version of Norton's for a…

Kaspersky Internet Security 2009 Incompatible SoftwareHELP!!?

When I try to install Kaspersky, it says it detected incompatible software. It says…

Remove Fake Antivirus is used to remove: Cyber Security, Alpha Antivirus, Windows Enterprise Suite, Security Center, Control Center, Braviax, Windows Police Pro, Antivirus Pro 2010, PC Antispyware 2010, FraudTool.MalwareProtector.d, Winshield2009.com, Green AV, Windows Protection Suite, Total Security 2009, Windows System Suite, Antivirus BEST, System Security, Personal Antivirus, System Security 2009, Malware Doctor, Antivirus System Pro, WinPC Defender, Anti-Virus-1, Spyware Guard 2008, System Guard 2009, Antivirus 2009, Antivirus 2010, Antivirus Pro 2009, Antivirus 360 and MS Antispyware 2009 (all of them are fake antivirus which are viruses or trojans) from your computer. Remove Fake Antivirus is used to remove fake antivirus which are viruses or trojans.

5MB

February 8th

How work windows defender spyware?

Filed under Uncategorized | No Comments

1. Options: opens the Options screen where you can set the Automatic Scanning options like frequency, time and the type of scan. You can check for updated definitions before scanning and apply default actions to items detected during the scan. These default actions could be customized in the section Default actions where you can determine what actions Windows Defender would display or apply (if the clause if selected in the Automatic scanning section.) to the items detected in the scan. In addition to these, the screen offers Real-time protection, Advanced and Administrator options.

What is Windows Defender 2010?

Windows Defender 2010 is a fraudulent application which is advertised as a reputable antivirus with a reason to rip people off. Many computer experts have announced that WindowsDefender2010 is a scam because it enters the system without being noticed and later uses misleading behavior trying to deceive its victims into purchasing so called “full” version. Don’t fall into its trap because Graphical User Interface (GUI) of this malware is very similar to the one that uses legitimate anti-spyware Windows Defender. Its creators “borrowed” from Microsoft its colors and shield logo, here you can take a closer look. Please, don’t confuse it with legitimate Microsoft products and use the reputable one to prevent such scams.

Windows Defender 2010 is a typical badware, which is infiltrated through Trojan related techniques, such as fake online scanners and insecure domains (win-def-2010.com, windowsdefender-10.com, windows-defender10.com). When inside, Windows Defender 2010 enables all the security programs found and also creates new registry keys with fake malware files to make the compromised machine completely taken over. Additionally fake security alerts and messages reach the user trying to fool him that his PC is under the great danger. Windows Defender 2010 also simulates a system scan and after that declares that hundreds of spyware is detected. As a solution, the “licensed” its version is offered for the user to be purchased. Moreover, this malware also uses browser hijacking to encourage the user to make a payment.

Don’t buy Windows Defender 2010 because it will never act like any of legitimate softwares. This scam must NOT be trusted because it reports only invented infections and sometimes even announces legitimate files as dangerous ones. Keep your eye on Windows Defender 2010 and use a reputable anti-spyware if you have already found it on your PC. Delete Windows Defender 2010 as soon as possible.

Windows Defender 2010 is Extremely dangerous

well for me Norton has been pretty good on my XP machines. So far I have only had 1 pop-up ever, when i downloaded a virus…it really saved my ass.

i dont really think it lets viruses through, that is unless you deliberatly wanted to infect something…

on my XP machines, the effect of the slowing-down-ness with Norton has been mimimal…i have a 30MB/s cable modem and with Norton the speed is now 26MB/s. not much in my case.

There is one really annoying drawback, though, is that when you are downloading something, there seems to be a up/down wave in its speeds.

Example:
Starts out at around 300Kb/s
starts to drop miserably down to about 12Kb/s
wait about 5 seconds, then starts up again…goes a little farther this time, round 250KB/s
drops down to about 100MB/s
the thing goes on and on until its done. this does get really annoying.
cant complain, though, cuz at least its actually scanning the thing to check if its a virus.

a nice feature i would like to see? a trusted FTP/HTTP source list that will uncap the download speed and wont scan the file being downloaded from the source, thus eliminating the above problem….

-MM3

Hello, I've recently encountered the Antivirus Plus malware and have had trouble getting rid of it completely. Here's what I've done so far:

First I did a system restore to a date before the malware appeared. The only remaining symptoms I could see were that IE and Firefox were still broken and that any attempt to sleep/hibernate caused a crash & restart. I've since downloaded Google Chrome (which works normally for the internet).

After discovering this site I followed the sticky to the best of my ability. Unfortunately I could not run ESET Online Scan because IE doesn't work, but the rest of the logs are below (Malwarebytes, and DDS scan logs).

What should I do next to fix these remaining issues? Thanks in advance for the help.
———————————————————————————–

Malwarebyte's Log:

Malwarebytes' Anti-Malware 1.44
Database version: 3686
Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18882

2/3/2010 9:02:26 PM
mbam-log-2010-02-03 (21-02-26).txt

Scan type: Full Scan (C:\|D:\|)
Objects scanned: 382246
Time elapsed: 1 hour(s), 30 minute(s), 56 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 142
Registry Values Infected: 1
Registry Data Items Infected: 2
Folders Infected: 14
Files Infected: 44

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\funwebproducts.browseroverlaybarbutton (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{98635087-3f5d-418f-990c-b1efe0797a3b} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{38a7c9da-8db7-4d0f-a7b1-c4b1a305bddb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{8d292ec0-6792-4a38-82ed-73a087e41ba6} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{a6573479-9075-4a65-98a6-19fd29cf7374} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{a6573479-9075-4a65-98a6-19fd29cf7374} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{d778513b-1c40-4819-b0c5-49e40b39afd0} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.browseroverlaybarbutton.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.browseroverlayembed (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.browseroverlayembed.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.datacontrol (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{c8cecde3-1ae1-4c4a-ad82-6d5b00212144} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{17de5e5e-bfe3-4e83-8e1f-8755795359ec} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{1f52a5fa-a705-4415-b975-88503b291728} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{a626cdbd-3d13-4f78-b819-440a28d7e8fc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{25560540-9571-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.datacontrol.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.historykillerscheduler (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{8ca01f0e-987c-49c3-b852-2f1ac4a7094c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{1093995a-ba37-41d2-836e-091067c4ad17} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{120927bf-1700-43bc-810f-fab92549b390} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{247a115f-06c2-4fb3-967d-2d62d3cf4f0a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{3e53e2cb-86db-4a4a-8bd9-ffeb7a64df82} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{90449521-d834-4703-bb4e-d3aa44042ff8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{991aac62-b100-47ce-8b75-253965244f69} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{bbabdc90-f3d5-4801-863a-ee6ae529862d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{d6ff3684-ad3b-48eb-bbb4-b9e6c5a355c1} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{eb9e5c1c-b1f9-4c2b-be8a-27d6446fdaf8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{0f8ecf4f-3646-4c3a-8881-8e138ffcaf70} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{b813095c-81c0-4e40-aa14-67520372b987} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{c9d7be3e-141a-4c85-8cd6-32461f3df2c7} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{cff4ce82-3aa2-451f-9b77-7165605fb835} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.historykillerscheduler.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.historyswattercontrolbar (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.historyswattercontrolbar.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.htmlmenu (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.htmlmenu.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.htmlmenu.2 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.iecookiesmanager (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.iecookiesmanager.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.killerobjmanager (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.killerobjmanager.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.popswatterbarbutton (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{8e6f1830-9607-4440-8530-13be7c4b1d14} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{63d0ed2b-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{63d0ed2d-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{8e6f1832-9607-4440-8530-13be7c4b1d14} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{a9571378-68a1-443d-b082-284f960c6d17} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.popswatterbarbutton.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.popswattersettingscontrol (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.popswattersettingscontrol.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.shellviewcontrol (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{621feacd-8857-43a6-ae26-451d670d5370} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{2763e333-b168-41a0-a112-d35f96f410c0} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{2eff3cf7-99c1-4c29-bc2b-68e057e22340} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{2eff3cf7-99c1-4c29-bc2b-68e057e22340} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.shellviewcontrol.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.chatsessionplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{e79dfbc0-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{72ee7f04-15bd-4845-a005-d6711144d86a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{e79dfbc9-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{e79dfbcb-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{e79dfbca-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{e79dfbca-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.chatsessionplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.htmlpanel (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{3e720450-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{3e720451-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{3e720453-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{3e720452-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3e720452-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.htmlpanel.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.outlookaddin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{adb01e81-3c79-4272-a0f1-7b2be7a782dc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.outlookaddin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.pseudotransparentplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{7473d290-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{7473d291-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{7473d293-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{7473d295-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{7473d297-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{7473d292-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{7473d296-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.pseudotransparentplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearchtoolbar.settingsplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{07b18ea0-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{07b18eaa-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{07b18eac-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{f87d7fb5-9dc5-4c8c-b998-d8dfe02e2978} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{53ced2d0-5e9a-4761-9005-648404e6f7e5} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearchtoolbar.settingsplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearchtoolbar.toolbarplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearchtoolbar.toolbarplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\screensavercontrol.screensaverinstaller (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{29d67d3c-509a-4544-903f-c8c1b8236554} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{2e3537fc-cf2f-4f56-af54-5a6a3dd375cc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{2e9937fc-cf2f-4f56-af54-5a6a3dd375cc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{938aa51a-996c-4884-98ce-80dd16a5c9da} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\screensavercontrol.screensaverinstaller.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{3e1656ed-f60e-4597-b6aa-b6a58e171495} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{6e74766c-4d93-4cc0-96d1-47b8e07ff9ca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{741de825-a6f0-4497-9aa6-8023cf9b0fff} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{de38c398-b328-4f4c-a3ad-1b5e4ed93477} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25e} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25f} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{00a6faf6-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{1e0de227-5ce4-4ea3-ab0c-8b03e1aa76bc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{84da4fdf-a1cf-4195-8688-3e961f505983} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{98d9753d-d73b-42d5-8c85-4469cda897ab} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{a4730ebe-43a6-443e-9776-36915d323ad3} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{d9fffb27-d62a-4d64-8cec-1ff006528805} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{0d26bc71-a633-4e71-ad31-eadc3a1b6a3a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{e47caee0-deea-464a-9326-3f2801535a4d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{f42228fb-e84e-479e-b922-fbbd096e792c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98d9753d-d73b-42d5-8c85-4469cda897ab} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\MIME\Database\Content Type\application/x-f3embed (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\FocusInteractive (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media\WMSDK\Sources\f3popularscreensavers (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
C:\Users\Joseph.old\AppData\Roaming\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Users\Joseph.old\AppData\Roaming\FunWebProducts\Data (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Users\Joseph.old\AppData\Roaming\FunWebProducts\Data\Joseph Zoline-Black (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\A360 (Rogue.A360AntiVirus) -> Quarantined and deleted successfully.
C:\Program Files\MyWaySA (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWaySA\SrchAsDe (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\icons (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\SrchAstt (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\SrchAstt\2.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Files Infected:
C:\Program Files\MyWebSearch\bar\2.bin\F3BROVLY.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\F3DTACTL.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\F3HISTSW.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\F3POPSWT.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\F3SHLLVW.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\M3MSG.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\M3HTML.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\M3OUTLCN.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\M3SKIN.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\MWSBAR.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\F3SCRCTR.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\SrchAstt\2.bin\MWSSRCAS.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\F3CJPEG.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\F3HTTPCT.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\MWSOEPLG.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\PortableApps\OpenOfficePortable\App\openoffice\program\unicows.dll (Malware.Packer.Gen) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\MWSOESTB.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\F3RESTUB.DLL (Adware.MyWeb.FunWeb) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\F3SCHMON.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\M3IDLE.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\M3PLUGIN.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\M3SKPLAY.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\M3SLSRCH.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\M3SRCHMN.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\MWSOEMON.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\MWSOESTB.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\NPMYWEBS.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Users\Joseph.old\AppData\Roaming\FunWebProducts\Data\Joseph Zoline-Black\avatar.dat (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\F3IMSTUB.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\F3PSSAVR.SCR (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\F3REPROX.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\F3WPHOOK.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\M3FFXTBR.MANIFEST (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\M3NTSTBR.MANIFEST (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\files.ini (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\icons\CM.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\icons\MFC.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\icons\PSS.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\icons\SMILEY.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\icons\WB.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\icons\ZWINKY.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\ProgramData\sysReserve.ini (Malware.Trace) -> Quarantined and deleted successfully.
C:\Windows\System32\f3PSSavr.scr (Trojan.Agent) -> Quarantined and deleted successfully.
————————————————————————————

DDS Scan Log:

DDS (Ver_09-12-01.01) – NTFSx86
Run by Joseph at 11:30:01.85 on Thu 02/04/2010
Internet Explorer: 8.0.6001.18882
Microsoft® Windows Vista™ Home Basic 6.0.6002.2.1252.1.1033.18.3325.1912 [GMT -8:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
SP: AVG Anti-Virus Free *enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Program Files\Dell\DellDock\DockLogin.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\Ati2evxx.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
c:\ProgramData\SingleClick Systems\Advanced Networking Service\hnm_svc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Dell\DellDock\DellDock.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Dell DataSafe Online\DataSafeOnline.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Windows\system32\svchost.exe -k hpdevmgmt
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Speeditup Free\SearchDefender.exe
C:\Program Files\Sandboxie\SbieCtrl.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Dell Remote Access\ezi_ra.exe
C:\Program Files\Sandboxie\SbieSvc.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Users\Joseph.Josephs_PC\AppData\Local\Apps\2.0\B8MHBDVT.7XR\T216P3WX.E84\curs..tion_eee711038731a406_0004.0000_1430d97334050788\CurseClient.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Windows\system32\svchost.exe -k WindowsMobile
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\Users\JOSEPH~1.JOS\AppData\Local\Temp\HouseCall\housecall.bin
C:\Program Files\Sandboxie\SandboxieRpcSs.exe
C:\Program Files\Sandboxie\SandboxieDcomLaunch.exe
C:\Users\Joseph.Josephs_PC\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Sandboxie\SandboxieCrypto.exe
C:\Users\Joseph.Josephs_PC\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Joseph.Josephs_PC\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Users\Joseph.Josephs_PC\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Joseph.Josephs_PC\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Joseph.Josephs_PC\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Logitech\Video\AlbumDB2.exe
C:\Users\Joseph.Josephs_PC\Documents\Downloads\dds.scr
C:\Windows\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uDefault_Page_URL = hxxp://www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us&ibd=3090114
uSearch Bar = hxxp://www.google.com/ie
uSearch Page = hxxp://www.google.com
uStart Page = hxxp://www.google.com/
uWindow Title = Internet Explorer provided by Dell
mDefault_Page_URL = hxxp://www.google.com/ig/dell?hl=en&client=dell-usuk&channel=us&ibd=3090114
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://www.google.com/search/?q=%s
mSearchAssistant = hxxp://www.google.com/ie
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} – c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Skype add-on (mastermind): {22bf413b-c6d2-4d91-82a9-a0f997ba588c} – c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} – c:\program files\avg\avg8\avgssie.dll
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} – c:\program files\java\jre1.6.0_07\bin\ssv.dll
BHO: CBrowserHelperObject Object: {ca6319c0-31b7-401e-a518-a07c3db8f777} – c:\program files\dell\bae\BAE.dll
uRun: [Yahoo! Pager] "c:\progra~1\yahoo!\messenger\YahooMessenger.exe" -quiet
uRun: c:\program files\windows media player\WMPNSCFG.exe
uRun: "c:\program files\steam\Steam.exe" -silent
uRun: "c:\program files\skype\phone\Skype.exe" /nosplash /minimized
uRun: [Search Defender] "c:\program files\speeditup free\SearchDefender.exe"
uRun: "c:\program files\sandboxie\SbieCtrl.exe"
uRun: "c:\program files\logitech\video\ManifestEngine.exe" boot
uRun: [Google Update] "c:\users\joseph.josephs_pc\appdata\local\google\update\GoogleUpdate.exe" /c
mRun: [<NO NAME>]
mRun: [Windows Mobile Device Center] %windir%\WindowsMobile\wmdc.exe
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: c:\program files\java\j2re1.4.2_03\bin\jusched.exe
mRun: RtHDVCpl.exe
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [My Web Search Bar Search Scope Monitor] "c:\progra~1\mywebs~1\bar\2.bin\m3SrchMn.exe" /m=2 /w
mRun: c:\program files\logitech\video\LogiTray.exe
mRun: c:\program files\logitech\video\ISStart.exe
mRun: "c:\program files\itunes\iTunesHelper.exe"
mRun: c:\program files\intel\modem event monitor\IntelMEM.exe
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [Google Desktop Search] "c:\program files\google\google desktop search\GoogleDesktop.exe" /startup
mRun: "c:\program files\dell support center\bin\sprtcmd.exe" /P dellsupportcenter
mRun: [Dell DataSafe Online] "c:\program files\dell datasafe online\DataSafeOnline.exe" /m
mRun: "c:\program files\common files\symantec shared\ccApp.exe"
mRun: c:\progra~1\avg\avg8\avgtray.exe
mRun: c:\program files\ati technologies\ati control panel\atiptaxx.exe
mRunOnce: "c:\users\joseph~1.jos\appdata\local\temp\housecall\tsc.exe" /HD
StartupFolder: c:\users\joseph.josephs_pc\appdata\roaming\microsoft\windows\start menu\programs\startup\CurseClientStartup.ccip
StartupFolder: c:\users\joseph~1.jos\appdata\roaming\micros~1\windows\startm~1\programs\startup\delldo~1.lnk – c:\program files\dell\delldock\DellDock.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\dellre~1.lnk – c:\windows\installer\{f66a31d9-7831-4fba-ba02-c411c0047cc5}\NewShortcut10_F66A31D978314FBABA02C411C0047CC5.exe
mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0×0)
mPolicies-system: EnableLUA = 0 (0×0)
mPolicies-system: EnableUIADesktopToggle = 0 (0×0)
IE: E&xport to Microsoft Excel – c:\progra~1\micros~4\office12\EXCEL.EXE/3000
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} – {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC} – c:\progra~1\java\jre16~1.0_0\bin\ssv.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} – {48E73304-E1D6-4330-914C-F5F514E3486C} – c:\progra~1\micros~4\office12\ONBttnIE.dll
IE: {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} – {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} – c:\windows\windowsmobile\INetRepl.dll
IE: {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} – {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} – c:\windows\windowsmobile\INetRepl.dll
IE: {5067A26B-1337-4436-8AFE-EE169C2DA79F} – {77BF5300-1474-4EC7-9980-D32B190E9B07} – c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
IE: {77BF5300-1474-4EC7-9980-D32B190E9B07} – {77BF5300-1474-4EC7-9980-D32B190E9B07} – c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} – {FF059E31-CC5A-4E2E-BF3B-96E929D65503} – c:\progra~1\micros~4\office11\REFIEBAR.DLL
DPF: ActiveGS.cab – hxxp://activegs.freetoolsassociation.com/ActiveGS.cab
DPF: Garmin Communicator Plug-In – hxxps://my.garmin.com/mygarmin/m/GarminAxControl.CAB
DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} – hxxps://support.dell.com/systemprofiler/SysPro.CAB
DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} – hxxp://www.musicnotes.com/download/mnviewer.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} – hxxp://fpdownload.macromedia.com/get/shockwave/cabs/director/sw.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} – hxxp://download.microsoft.com/download/F/D/9/FD9E437D-5BC8-4264-A093-DFA2C39D197E/LegitCheckControl.cab
DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} – hxxp://cache.systemrequirementslab.com/htdocs/srl_bin/sysreqlab_srl.cab
DPF: {31435657-9980-0010-8000-00AA00389B71} – hxxp://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab
DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} – hxxp://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.8.110.cab
DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} – hxxp://office.microsoft.com/officeupdate/content/opuc3.cab
DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} – hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.4.3.cab
DPF: {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} – hxxp://support.dell.com/systemprofiler/SysProExe.CAB
DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} – hxxp://download.divx.com/player/DivXBrowserPlugin.cab
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} – hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1202548887738
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} – hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} – hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {A3256902-51FA-45A0-8A97-FC1143C169D9} – hxxp://support.microsoft.com/mats/DiagWebControl.cab
DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} – hxxp://www.sibelius.com/download/software/win/ActiveXPlugin.cab
DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} – hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} – hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} – hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} – hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} – hxxp://utilities.pcpitstop.com/optimize2/pcpitstop2.dll
Filter: application/xhtml+xml – {32F66A26-7614-11D4-BD11-00104BD3F987} – c:\program files\design science\mathplayer\MathMLMimer.dll
Filter: application/xhtml+xml; charset=iso-8859-1 – {32F66A26-7614-11D4-BD11-00104BD3F987} – c:\program files\design science\mathplayer\MathMLMimer.dll
Filter: application/xhtml+xml; charset=utf-8 – {32F66A26-7614-11D4-BD11-00104BD3F987} – c:\program files\design science\mathplayer\MathMLMimer.dll
Filter: text/xml; charset=iso-8859-1 – {32F66A26-7614-11D4-BD11-00104BD3F987} – c:\program files\design science\mathplayer\MathMLMimer.dll
Filter: text/xml; charset=utf-8 – {32F66A26-7614-11D4-BD11-00104BD3F987} – c:\program files\design science\mathplayer\MathMLMimer.dll
Handler: linkscanner – {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} – c:\program files\avg\avg8\avgpp.dll
Handler: skype4com – {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} – c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: GoToAssist – c:\program files\citrix\gotoassist\514\G2AWinLogon.dll
AppInit_DLLs: AVGRSSTX.DLL c:\progra~1\google\google~3\GOEC62~1.DLL

================= FIREFOX ===================

FF – ProfilePath – c:\users\joseph~1.jos\appdata\roaming\mozilla\firefox\profiles\i47oqj2u.default\
FF – prefs.js: browser.startup.homepage – hxxp://www.google.com/
FF – plugin: c:\program files\download manager\npfpdlm.dll
FF – plugin: c:\program files\google\google updater\2.4.1368.5602\npCIDetect13.dll
FF – plugin: c:\program files\netscape\communicator\program\plugins\np32dsw.dll
FF – plugin: c:\program files\netscape\communicator\program\plugins\npaudio.dll
FF – plugin: c:\program files\netscape\communicator\program\plugins\npavi32.dll
FF – plugin: c:\program files\netscape\communicator\program\plugins\NPBeatnk.dll
FF – plugin: c:\program files\netscape\communicator\program\plugins\npchime.dll
FF – plugin: c:\program files\netscape\communicator\program\plugins\npnul32.dll
FF – plugin: c:\program files\netscape\communicator\program\plugins\npqtplugin.dll
FF – plugin: c:\program files\netscape\communicator\program\plugins\npqtplugin2.dll
FF – plugin: c:\program files\netscape\communicator\program\plugins\npqtplugin3.dll
FF – plugin: c:\program files\netscape\communicator\program\plugins\npqtplugin4.dll
FF – plugin: c:\program files\netscape\communicator\program\plugins\npqtplugin5.dll
FF – plugin: c:\program files\netscape\communicator\program\plugins\npqtplugin6.dll
FF – plugin: c:\program files\netscape\communicator\program\plugins\npqtplugin7.dll
FF – plugin: c:\program files\netscape\communicator\program\plugins\npswf32.dll
FF – HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} – c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
FF – HiddenExtension: Firefox security: No Registry Reference – c:\program files\mozilla firefox\extensions\{9CE11043-9A15-4207-A565-0C94C42D590D}

—- FIREFOX POLICIES —-
c:\program files\mozilla firefox\greprefs\security-prefs.js – pref("security.ssl3.rsa_seed_sha", true);

============= SERVICES / DRIVERS ===============

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-1-22 335240]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86;c:\windows\system32\drivers\avgmfx86.sys [2009-1-22 27784]
R2 avg8wd;AVG8 WatchDog;c:\progra~1\avg\avg8\avgwdsvc.exe [2008-5-21 297752]
R2 DockLoginService;Dock Login Service;c:\program files\dell\delldock\DockLogin.exe [2008-9-23 155648]
R2 RtNdPt60;Realtek NDIS Protocol Driver;c:\windows\system32\drivers\RtNdPt60.sys [2009-1-14 27648]
R3 SbieDrv;SbieDrv;c:\program files\sandboxie\SbieDrv.sys [2009-12-1 119296]
S3 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-20 21504]
S3 GoogleDesktopManager-092308-165331;Google Desktop Manager 5.8.809.23506;c:\program files\google\google desktop search\GoogleDesktop.exe [2009-1-14 30192]

=============== Created Last 30 ================

2010-02-04 19:03:24 157712 —-a-w- c:\windows\system32\drivers\tmcomm.sys
2010-02-04 03:24:14 0 d—–w- c:\users\joseph~1.jos\appdata\roaming\Malwarebytes
2010-02-04 03:24:10 38224 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-02-04 03:24:08 19160 —-a-w- c:\windows\system32\drivers\mbam.sys
2010-02-04 03:24:08 0 d—–w- c:\programdata\Malwarebytes
2010-02-04 03:24:08 0 d—–w- c:\program files\Malwarebytes' Anti-Malware
2010-02-04 01:54:22 0 d—–w- c:\program files\Eusing Free Registry Cleaner
2010-02-03 23:18:47 0 dc-h–w- c:\programdata\{BC9FCCF7-E686-494B-8C9B-55C9A39A7CA9}
2010-02-03 23:15:25 0 d—–w- c:\programdata\Spybot – Search & Destroy
2010-02-03 23:15:25 0 d—–w- c:\program files\Spybot – Search & Destroy
2010-02-03 23:14:07 767952 —-a-w- c:\windows\BDTSupport.dll
2010-02-03 23:11:53 0 d—–w- c:\program files\common files\PC Tools
2010-02-03 23:11:52 0 d—–w- c:\users\joseph~1.jos\appdata\roaming\PC Tools
2010-02-03 23:11:52 0 d—–w- c:\programdata\PC Tools
2010-02-03 23:11:52 0 d—–w- c:\program files\Spyware Doctor
2010-01-20 01:23:06 0 d—–w- C:\Zsnesw
2010-01-13 16:31:44 72704 —-a-w- c:\windows\system32\fontsub.dll
2010-01-13 16:31:44 156672 —-a-w- c:\windows\system32\t2embed.dll
2010-01-13 03:39:03 92208 —-a-w- c:\windows\system\WING.DLL
2010-01-13 03:39:03 6736 —-a-w- c:\windows\system\WINGDIB.DRV
2010-01-13 03:39:03 5024 —-a-w- c:\windows\system\WINGPAL.WND
2010-01-13 03:39:03 30544 —-a-w- c:\windows\system\DIB.DRV
2010-01-13 03:39:03 1966 —-a-w- c:\windows\system\DVA.386
2010-01-13 03:39:03 188960 —-a-w- c:\windows\system\WINGDE.DLL
2010-01-13 03:39:03 12800 —-a-w- c:\windows\system\WING32.DLL
2010-01-13 03:38:57 0 d—–w- C:\SIERRA

==================== Find3M ====================

2010-01-14 19:12:06 181120 ——w- c:\windows\system32\MpSigStub.exe
2010-01-02 06:38:20 916480 —-a-w- c:\windows\system32\wininet.dll
2010-01-02 06:32:33 71680 —-a-w- c:\windows\system32\iesetup.dll
2010-01-02 06:32:33 109056 —-a-w- c:\windows\system32\iesysprep.dll
2010-01-02 04:57:00 133632 —-a-w- c:\windows\system32\ieUnatt.exe
2009-12-05 02:35:35 218640 —ha-w- c:\windows\system32\mlfcache.dat
2009-12-05 02:24:15 51200 —-a-w- c:\windows\inf\infpub.dat
2009-12-05 02:24:14 143360 —-a-w- c:\windows\inf\infstrng.dat
2009-12-05 02:24:14 143360 —-a-w- c:\windows\inf\infstor.dat
2009-12-01 02:02:40 171144 —-a-w- c:\windows\system32\xliveinstall.dll
2009-12-01 02:02:38 72840 —-a-w- c:\windows\system32\xliveinstallhost.exe
2009-11-18 11:18:38 665600 —-a-w- c:\windows\inf\drvindex.dat
2009-05-16 02:21:19 174 –sha-w- c:\program files\desktop.ini
2006-11-02 12:39:34 30674 —-a-w- c:\windows\inf\perflib409\perfd.dat
2006-11-02 12:39:34 30674 —-a-w- c:\windows\inf\perflib409\perfc.dat
2006-11-02 12:39:34 287440 —-a-w- c:\windows\inf\perflib409\perfi.dat
2006-11-02 12:39:34 287440 —-a-w- c:\windows\inf\perflib409\perfh.dat
2006-11-02 09:20:21 287440 —-a-w- c:\windows\inf\perflib000\perfi.dat
2006-11-02 09:20:21 287440 —-a-w- c:\windows\inf\perflib000\perfh.dat
2006-11-02 09:20:19 30674 —-a-w- c:\windows\inf\perflib000\perfd.dat
2006-11-02 09:20:19 30674 —-a-w- c:\windows\inf\perflib000\perfc.dat
2009-10-16 00:40:03 245760 –sha-w- c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\windows\ietldcache\index.dat
2009-01-14 22:41:59 8192 –sha-w- c:\windows\users\default\NTUSER.DAT

============= FINISH: 11:30:54.95 ===============

The DDS Attach file is attached below:

Dana From Nebraska

Happy valentine day

for st valentine day

Recent Posts

Recent Comments

Archives

Winter olympics

Red Bull unveil the evolutionary RB6

sarath fonseka

Eastman's Online Genealogy Newsletter

I like norton 2010

How Do You Remove Ultra Antivirus 2009 Files?

Ultra Antivirus 2009 Removal Tip

How Did You Get Ultra Antivirus 2009?

Understanding Ultra Antivirus 2009

Ultra Antivirus 2009 May Be Rogue Anti-Spyware

Ultra Antivirus 2009 May Be a Trojan

How work windows defender spyware?

What is Windows Defender 2010?

Search

Archives

Categories

Sponsor